Do Not Sell My Personal Information

What "sale" means under CCPA

The California Consumer Privacy Act (CCPA/CPRA) defines "sale" broadly — it includes any exchange of personal data for value, even without money (e.g., sharing for targeted advertising in exchange for analytics). Even though we don't do this, the law requires us to keep this page available for California residents.

What we do with your data

Your data is only used to operate the service and meet legal obligations. Specifically:

• Strictly necessary processors (Stripe, Supabase, Resend, Sentry, AI providers) — operate under DPAs with confidentiality obligations and no right to resell.
• Aggregated anonymous analytics (Vercel Analytics, only when you opt in via the cookie banner).
• Zero targeted advertising based on sensitive health data. Zero data bought or sold to third parties.

Your CCPA/CPRA rights

If you are a California resident, you have the following rights — regardless of where our company is based:

• Right to know (§ 1798.100): you can request a full report of the information we hold about you, how we collect it, and what we use it for.
• Right to delete (§ 1798.105): you can request deletion of your personal data — we perform a cascading hard delete across systems.
• Right to opt-out of "sale" (§ 1798.120): even though we don't sell, you can formally register your objection in case we ever change our practices — we record your preference.
• Right to non-discrimination (§ 1798.125): we will never deny service, charge more, or reduce quality because you exercise a privacy right.

Outside California?

LGPD (Brazil), GDPR (European Union), and other applicable laws are detailed in our Privacy Policy.

View full Privacy Policy →