Consumer Health Data Privacy Policy

This policy is for residents of Washington and Nevada, and anyone whose consumer health data Bean collects in those states, under Washington’s My Health My Data Act and Nevada’s consumer health data law. Bean is operated by Doji Natural Products LLC. Our Privacy Policy describes all of Bean’s information practices.

Consumer health data Bean collects

• The fact that you use a pregnancy app, and your household’s due date, baby birthday and baby nickname.
• Anything health-related you choose to enter: log entries, Quick Log notes, photos, saved links and files, visit details and questions, and questions you ask Ask Bean.
• Notification settings and reminder timing for visits you save.
• Product analytics, if you allow it: which app features you use, linked to a random analytics ID, with a coarse pregnancy stage (trimester or postpartum).

Why we collect it

• To provide the service you asked for: keeping your private household in sync between you and your partner, showing weekly guides, organizing visits and sending reminders you enable.
• With your permission, to provide AI features (Ask Bean, Quick Log with AI and saved-link tagging).
• With your permission, to measure how Bean is used and improve it (product analytics).
• To keep Bean secure and prevent abuse.

Where it comes from

From you, from the partner you invite into your household (who can see and add to shared household information), and from your device (time zone, platform and app version). Bean derives your coarse pregnancy stage from the due date or birthday you entered.

Who receives it

Bean does not sell consumer health data and does not use it for advertising. We share it only with the members of your household and with service providers that process it on our behalf:

• Neon (database storage) and Vercel (hosting and file storage): all household data.
• Anthropic: the content you send to AI features, only after you give permission.
• PostHog: product analytics events, only as described above.
• Expo, Apple and Google: delivery of notifications you enable. Notification text is generic and contains no health details.
• Clerk: account sign-in. Resend: partner invitation emails. These do not receive health details you enter.

Your rights and how to use them

You can ask to confirm whether we collect or share your consumer health data, to receive a copy of it and a list of the third parties and service providers it was shared with, to delete it, and to withdraw any consent you gave. You can withdraw AI or analytics permission in the app under Settings, and delete your account in Settings. For any other request, email support@ourbean.app with the subject “Consumer health data request” from the email address on your account. We may need to confirm it is you.

We respond within 45 days, and may extend that once by another 45 days when reasonably necessary, telling you why. Deleting your data also deletes it from our service providers, subject to the limited backup periods in our Privacy Policy. For product analytics, deletion removes the link between your account and its analytics ID, so the remaining events can no longer be associated with you.

If we decline your request, you can appeal by replying to our decision with the subject “Appeal”. We will answer within 45 days. If you are not satisfied, you may contact the Washington State Attorney General or the Nevada Attorney General.