Consumer Health Data Privacy Policy

Leelalu, Inc. publishes this policy under Washington's My Health My Data Act and Nevada's consumer health data law. It covers only consumer health data. Everything else we collect is described in our privacy policy.

Washington's law protects Washington residents wherever we operate, and we apply this policy to everyone who uses LEELALU rather than only to people in those two states.

LEELALU is a consumer family-care app, not a clinic or healthcare provider. This policy explains how we handle the consumer health data described below, alongside our general privacy policy.

What consumer health data we collect.

• Pregnancy and stage. Dates entered in stage settings are stored in browser local storage on the web and through secure storage in the native app. The app sends a coarse stage label, such as "pregnancy week 33" or "child age 3 months", with a Lu question rather than automatically including those exact dates. Names or dates can still be sent if you type them into a message or another shared text field.
• Bodily functions and care. Feeds, sleeps and diaper entries you log, feeding mode and solids status, and the notes you attach to them.
• Health questions and the answers to them. Questions you type to Lu are sent to LEELALU and some requests are processed by OpenAI, even when you are signed out. When signed in with history enabled, questions and replies are saved in your private Lu history unless you choose Temporary Chat or delete it. Guest and Temporary Chat conversations are not saved in Lu history; provider processing and retention are separate.
• Health-related free text. Whatever you choose to write into a task, a care plan, a handoff summary, a family chat message or a Family Vault moment.
• Emergency signals. Whether a message matched our emergency corpus, recorded without your words in our safety records.
• Precise location, only if you turn it on. Route points during an outing, which can reveal a visit to a clinic. This is off unless you start an outing and choose live location.

The child's structured person record rejects name, birth date and due date identity facts. That restriction does not remove identifying details from free text you send or save. Please leave out names and exact dates you do not need to share, and use fictional details when trying the demo.

Why we collect it, and how it is used.

To provide the features you use: keep the family record available to its authorized audience, use the stage and facts you share to support Lu replies, show an emergency information card when a message matches our safety rules, show you what you logged, and respond when you contact support. Lu can make mistakes, and emergency matching is not a monitoring service. We do not use this data to target advertising to you.

We do not use your family's content to train AI models.

Where it comes from.

From you and from the other adults in your family circle, typed into the app. We do not buy health data, we do not receive it from data brokers, and we do not infer it from your browsing anywhere else.

What we share, and with whom.

We use the service providers below to run the product. Each receives the data needed for its function; OpenAI's processing and retention are described separately below.

• Supabase hosts the database, authentication and media storage where your record lives.
• Vercel hosts our server endpoints and their request logs.
• OpenAI processes some Lu requests, including guest requests. We use the API storage setting switched off, which does not mean zero provider retention. OpenAI's published API policy says content is not used for training by default and abuse-monitoring content may be retained for up to 30 days, unless longer retention is legally required or reasonably necessary to protect its services or others from harm. We do not promise a zero-retention arrangement. Details are in our privacy policy.
• Expo delivers push notifications, whose text is always generic and never your health data.

Inside your family, what each person sees is decided by the role, the visibility scope and the access window you set, and by the audience you choose for each Vault item. Private Vault items are not visible to the rest of the family, including other family owners. Exports include only records the person exporting is authorized to access. A caregiver sees the family only inside their access window.

We do not sell it.

We have never sold consumer health data and we do not sell it. A sale would require your separate written authorization under Washington law, and we do not intend to ask for one. We also do not share it with advertisers and we run no advertising pixels.

Your rights.

• Confirm and access. Export your family's record from inside the app at any time. It is assembled with your own visibility and handed straight to your device.
• Know who has it. The list above is that list, and it changes only by changing this page first.
• Withdraw consent. Take any fact away from Lu on the What Lu Remembers screen, withdraw a consent from your data screen, or turn off location and notifications. Withdrawal binds the next action immediately.
• Delete. Delete from inside the app. Your own record is erased after a grace period of 14 days in which one tap takes it back; a whole family is frozen at once and erased after a 30 day window that exists so everyone can take a copy first. The privacy policy says exactly what is erased, what stays and why, and what we can and cannot yet promise about backups.
• Appeal. If we refuse a request, we will tell you why and how to appeal it. Write to hello@leelalu.com and a person answers. We respond within 45 days and will say so if we need the extension the law allows.

You may also complain to the Washington State Attorney General.

Changes.

When this policy changes, the date above changes with it, and we do not apply a new use to data already collected without asking you again.

Leelalu, Inc., 1301 N Broadway STE 93372, Los Angeles, CA 90012. hello@leelalu.com.