This notice describes Nottifai LLC’s handling of consumer health data, including under Washington’s My Health My Data Act and other applicable US consumer-health privacy laws. It applies to health-related information you choose to provide through Nottifai, even though Nottifai is a general email-reminder service.
1. Categories and sources
We collect the reminder names, messages, dates, schedules, and support content you enter. If you choose to mention an appointment, medication, condition, treatment, symptom, reproductive or sexual health matter, mental health matter, or other health-related activity, that content and its association with your account may reveal past, present, or future physical or mental health information.
You provide the health-related content. We also generate associated scheduling and delivery records and receive delivery or diagnostic information from our service providers when they send or troubleshoot your reminders or support requests. We do not retrieve medical records, connect to HealthKit or similar health platforms, purchase health data, or use precise location to identify visits to health facilities. We do not infer additional health conditions from your activity or build advertising profiles from health-related content.
2. Purposes
We use health-related content only to store and display the reminder you request, schedule and deliver it to your email address, maintain the associated delivery record, or respond to the support request in which you provide it. We process only the information necessary for those requested services. We do not use it for advertising or general-purpose AI training.
Do not put someone else’s health information into Nottifai. You can use a neutral reminder label to avoid including health details. If we introduce an additional category or purpose, we will provide the disclosures and obtain affirmative consent required by applicable law before that processing begins. Agreement to general Terms is not separate health-data consent.
3. Disclosures and recipients
The health-related content described above, together with the identifiers and email address needed to process it, may be handled by these categories of providers:
- Database, hosting, and scheduling processors: Convex and its infrastructure subprocessors store and process reminders, their delivery records, and in-app feedback.
- Email delivery processors: Resend and its infrastructure subprocessors process the email body, subject, destination address, and delivery information to send your requested reminder. Your chosen email provider receives the message for you.
- Support-mailbox processors: Our support-mailbox provider processes information you include in an email to support so we can respond to your request.
We do not share consumer health data with any affiliates. We do not sell consumer health data, disclose it to advertisers or data brokers, or authorize providers to use it for those purposes. Any disclosure or processing must be necessary for the service you request or supported by consent or another basis permitted by the applicable health-data law. Providers processing health data for us must follow contractual limits consistent with these purposes and this notice.
We do not allow third parties to use Nottifai to collect consumer health data over time and across unrelated websites or online services.
4. Your rights and how to use them
Where applicable, you can confirm whether we collect, share, or sell consumer health data; access that data; obtain the required list of recipients and their contact information; withdraw consent to collection and sharing; and request deletion. We do not sell this data. You may exercise rights without retaliation and without creating a new account.
Email [email protected] with Health privacy request and describe the action you want. Usually, contacting us from your account’s email address helps us verify the request. We may request only additional information reasonably needed to verify identity or an agent’s authorization. Do not include medical details that are unnecessary to identify the records.
You can edit or delete reminders or delete your account in the app. Pausing a reminder stops future scheduling but does not erase its contents. Deleting a reminder includes its associated delivery history in the active app database. Account deletion also includes your in-app feedback. Applicable deletion requests include relevant processors and other recipients as required by law, and include backups within applicable deadlines. We keep only the lookup and request information needed to finish that cleanup, subject to any specific legal retention requirement. We will explain any legally permitted limitation. We cannot recall a reminder from your own mailbox or a message already delivered to you.
For Washington requests, we respond without undue delay and within 45 days after receiving your request. We promptly take reasonable steps to verify it; verification does not extend that deadline. When legally permitted, we may extend the response period once by an additional 45 days and will explain the extension and its reason within the initial response period.
For Nevada requests, we respond without undue delay and within 45 days after authenticating the request, with a further 45-day extension only when legally permitted and explained within the initial response period. Covered requests to delete consumer health data are carried out within 30 days after authentication, subject to applicable exceptions, including the rules for archived or backup records.
Withdrawing permission for processing needed to deliver a reminder means we cannot continue that reminder. If we deny a request, reply with Health privacy appeal. We will provide a written outcome and reasons within the applicable deadline; for Washington and Nevada appeals, this is within 45 days after receiving the appeal. If we deny the appeal, we will explain how to complain to the relevant attorney general. Washington consumers can contact the Washington Attorney General.
5. Changes to this notice
We will update this notice, its effective date, and its version when our practices change. We will notify affected users of material changes through the app or email and obtain consent before new processing when required by law.
6. Contact
Nottifai LLC
1079 W Round Grove Rd #300 #558
Lewisville, TX 75067, United States
[email protected]