Consumer Health Data Privacy Policy

Why This Page Exists

Some states, including Washington, require companies that handle consumer health data to publish a separate policy describing exactly how that data is treated. This page is that policy. It applies to everyone who uses MacKree, not only Washington residents — if a state gives you a right worth having, we would rather just give it to everyone.

It supplements our general Privacy Policy; where this page is more specific about health-related data, this page controls.

What "Consumer Health Data" Means in MacKree

MacKree is a family coordination app, not a health app. It has no health features: no connection to Apple Health or HealthKit, no medication, dosage, or adherence fields, and no analytics that examine what you type.

But MacKree lets you name your own checklists and items — and if you name an item after a medication ("Nitroglycerin, 8 AM"), that text may reveal something about health. Under laws like Washington's My Health My Data Act, that can make it consumer health data. So we treat it with the care that label deserves. Specifically, the categories we may hold are:

• Checklist and item names you choose to type, when the words you choose relate to health — for example, a medication name. You control this entirely; MacKree never asks for it.
• Confirmation and overdue records for those checklists — that a checklist was confirmed, by whom, when, whether the assigned person said "On it," and whether an overdue notice was sent. If the checklist's name relates to health, these records inherit that sensitivity.

That is the complete list. MacKree does not collect biometric data, precise location, health conditions, diagnoses, treatments, or anything from any health provider, device, or app.

Where It Comes From

One source: you. Every piece of potentially health-related data in MacKree is text a person typed into a checklist on purpose. We do not buy data, import it, receive it from third parties, or infer it. We do not analyze your checklist content to guess anything about your health.

Why We Collect It, and How We Use It

One purpose: making your checklist work. The text you type is stored so it can appear on the phones of the people you shared it with — on screen, and in the notifications that remind them; confirmation records exist so those same people can see that the checklist was done. That is the entire use.

We do not use this data for advertising, marketing, profiling, research, AI training, or analytics — and we will not use it for any new purpose without telling you first and asking your permission.

Where It Appears

Health-related item names appear in three places, all of which you control by what you type:

1. On screen, in the app, for the people the checklist is shared with.
2. In notification text — the reminder to the assigned person names up to three items, and that text is visible on the lock screen of that phone. Overdue notices to the organizer and watchers name the checklist, not the items.
3. In transit through our processors (below), on the way to those phones.

Who It Is Shared With

The people you choose. A checklist is visible only to the specific family members you shared it with — the person it's assigned to and any watchers you added. Server-side security rules enforce this. No other MacKree user can read it.

Our service providers (processors). Like nearly every app, MacKree runs on infrastructure operated by others, under contracts that limit them to providing that service:

• Google LLC (Firebase) — database, authentication, and notification sending. Checklist content is stored here, encrypted at rest, in the United States. Google's crash-reporting service (Crashlytics) receives diagnostic data only — never checklist names, item names, or notes; we treat that as a fixed constraint on how the app is built.
• Apple Inc. — push-notification delivery to iPhones (every notification, including its text, passes through Apple's Push Notification service) and Sign in with Apple.

Nobody else. We do not sell consumer health data — to anyone, for anything, ever. We do not share it with advertisers, data brokers, analytics companies, or affiliates. Elphi, LLC has no affiliates.

No Geofencing

MacKree does not collect location data at all, and we do not use geofencing of any kind — including around any health care facility.

Your Rights

You have the right to:

• Confirm whether we hold consumer health data about you, and access it — including a list of the third parties it has been shared with;
• Withdraw consent for our collection or sharing of your consumer health data;
• Delete your consumer health data. You can delete any checklist or item yourself in the app at any time, and you can delete your whole account in the app (Settings → Delete Account); the general Privacy Policy describes exactly what that removes. You may also simply ask us.

To exercise any of these rights, email [email protected] from the email address associated with your account. We will respond within 45 days. We will never treat you differently for exercising a right.

Appeals. If we decline a request, we will explain why, and you may appeal by replying with "Appeal" in the subject line. A decision on your appeal comes within 45 days, with an explanation. Washington residents may also contact the Washington Attorney General if an appeal is denied.

A Practical Suggestion

The least sensitive data is data that never exists. If "morning meds" works as well for your family as a specific drug name and dose, use "morning meds." MacKree works identically either way — and the words you choose are the words that show up on a lock screen. This is a genuine recommendation from us, not a disclaimer.

Changes to This Policy

If we ever collect new categories of consumer health data or use them for new purposes, we will update this page first and ask for your affirmative consent before doing it. The effective date and version above always reflect the current text.

Contact

Elphi, LLC · Maryland, USA

[email protected]

Messages sent to our earlier elphiapp.com addresses are forwarded and still reach us.