Consumer Health Data Privacy Policy

Leelalu, Inc. publishes this policy under Washington's My Health My Data Act and Nevada's consumer health data law. It covers only consumer health data. Everything else we collect is described in our privacy policy.

Washington's law protects Washington residents wherever we operate, and we apply this policy to everyone who uses LEELALU rather than only to people in those two states.

We are not a clinic and not a healthcare provider. The data described here is not protected health information under HIPAA, and this policy, not HIPAA, is what governs it.

What consumer health data we collect.

• Pregnancy and stage. A due date or a birth date you enter, which stays in your device's secure keystore and is not sent to our servers, and the coarse label derived from it, such as "pregnancy week 33" or "child age 3 months", which is sent with a question to Lu and can be saved as a confirmed fact in your family record.
• Bodily functions and care. Feeds, sleeps and diaper entries you log, feeding mode and solids status, and the notes you attach to them.
• Health questions and the answers to them. What you type to Lu and what Lu replies, kept in your private Lu history unless you choose Temporary Chat or delete it.
• Health-related free text. Whatever you choose to write into a task, a care plan, a handoff summary, a family chat message or a Family Vault moment.
• Emergency signals. Whether a message matched our emergency corpus, recorded without your words in our safety records.
• Precise location, only if you turn it on. Route points during an outing, which can reveal a visit to a clinic. This is off unless you start an outing and choose live location.

We do not collect a child's name, a child's birth date or a child's due date as structured data. Our database refuses those three values for a child on every path.

Why we collect it, and how it is used.

To run the product you asked for and nothing else: to keep your family's shared record so every adult sees the same nights, to let Lu answer you with the right stage and the right sources, to route a genuine emergency to a phone number without delay, to show you what you logged, and to support you when you write to us. We do not use it to profile you, to target you, or to advertise to you.

We do not use your family's content to train AI models.

Where it comes from.

From you and from the other adults in your family circle, typed into the app. We do not buy health data, we do not receive it from data brokers, and we do not infer it from your browsing anywhere else.

What we share, and with whom.

We share consumer health data only with the service providers who run the product for us, and only so they can run it. They may not use it for their own purposes.

• Supabase hosts the database, authentication and media storage where your record lives.
• Vercel hosts our server endpoints and their request logs.
• OpenAI processes a question you type to Lu, with storage switched off on our side and no training on your content. The provider may retain content for up to 30 days for its own abuse monitoring; we have requested a zero-retention agreement and it is not signed yet.
• Expo delivers push notifications, whose text is always generic and never your health data.

Inside your family, what each person sees is decided by the role, the visibility scope and the access window you set, and by the audience you choose for each Vault item. A caregiver sees the family only inside their access window.

We do not sell it.

We have never sold consumer health data and we do not sell it. A sale would require your separate written authorization under Washington law, and we do not intend to ask for one. We also do not share it with advertisers and we run no advertising pixels.

Your rights.

• Confirm and access. Export your family's record from inside the app at any time. It is assembled with your own visibility and handed straight to your device.
• Know who has it. The list above is that list, and it changes only by changing this page first.
• Withdraw consent. Take any fact away from Lu on the What Lu Remembers screen, withdraw a consent from your data screen, or turn off location and notifications. Withdrawal binds the next action immediately.
• Delete. Delete from inside the app. Your own record is erased after a grace period of 14 days in which one tap takes it back; a whole family is frozen at once and erased after a 30 day window that exists so everyone can take a copy first. The privacy policy says exactly what is erased, what stays and why, and what we can and cannot yet promise about backups.
• Appeal. If we refuse a request, we will tell you why and how to appeal it. Write to hello@leelalu.com and a person answers. We respond within 45 days and will say so if we need the extension the law allows.

You may also complain to the Washington State Attorney General.

Changes.

When this policy changes, the date above changes with it, and we do not apply a new use to data already collected without asking you again.

Leelalu, Inc., 1301 N Broadway STE 93372, Los Angeles, CA 90012. hello@leelalu.com.