Consumer Health Data Privacy Notice
Last updated: October 8, 2026
This notice explains how we handle health information under Washington's My Health My Data Act and similar US state laws. It also gives a privacy contact for Canada. It sits alongside our Privacy Policy.
What we collect
- Your answers to the symptom check and the plan questionnaire. These can include health information, such as symptoms and cycle changes.
- Your first name and email address.
- Whether you've paid. Card details are handled by Stripe, not stored by us.
Why we use it
To show your snapshot, email your summary and the emails you asked for, write and deliver your plan, and provide support. We don't use it for advertising.
Who processes it for us
Stripe (payments), our email delivery provider, our hosting and database provider, and an AI writing service that generates your plan. They process it only to provide these services.
Meta
On our public marketing pages, the Meta Pixel records page views. When you request your summary, we tell Meta a sign-up happened, using a scrambled (hashed) email, so we can measure our ads. We never send Meta your answers or any health information.
We never sell your data
We don't sell your personal data or your health information.
Your rights
You can ask what we hold, get a copy, correct it, delete it, or withdraw consent, by emailing hello@yarrowandflint.com. We respond within 30 days at the latest and usually much sooner. You can unsubscribe from any email.
Privacy contact
Privacy contact, Yarrow & Flint, hello@yarrowandflint.com
Educational information personalized to your answers. Not medical advice, a diagnosis, or a substitute for care from a qualified healthcare professional.