Consumer Health Data Privacy Policy

Last updated Oct 20, 2026.

This policy explains how Indigo Unlimited (“we”), which runs NoWhereElse, handles “consumer health data” as defined by Washington’s My Health My Data Act (RCW 19.373). It adds to our main Privacy Policy.

1. What health data we collect

• Mood check-ins: a number from 1 to 5, an optional word, and the date.
• Journal entries: title, text, an optional mood, and when you wrote or edited them. Journals can include anything you choose to write about your feelings or health.
• Your safety plan: what you type in each step (like warning signs, coping steps, and people to call) and when you saved it.
• Comfort kit reasons, only if you press “Save to my account.”
• Crisis-word flags: if a story (or, once the friends feed is turned on, a post or comment) uses words about suicide, self-harm, or abuse, the server marks it so a moderator sees it first and crisis lines are shown. This is a yes/no mark on that item. Journals are never scanned.
• Anonymous stories you choose to send for review, and posts and help messages once those features open. They may include health information you choose to share.

Things you use without logging in, like the breathing guide or a safety plan you don’t save, stay in your browser and aren’t sent to us.

2. Where it comes from

Only from you, when you type and save it. We don’t buy data, and we don’t collect health data from other companies, devices, or trackers.

3. Why we use it

• To save it to your account and show it back to you (for example, your mood over 30 days).
• To moderate posts and show crisis lines when someone may be at risk.
• To keep the site secure and to follow the law.

We don’t use it for ads, profiling, or research, and nobody at NoWhereElse reads private journals.

4. Who we share it with

• We never sell consumer health data.
• Processors: Cloudflare, Inc. hosts our website and database and stores the data for us under contract. It doesn’t use it for its own purposes.
• Moderators see posts and comments you submit to the feed or as stories, but never your journal, mood check-ins, safety plan, or comfort kit.
• When the law requires it, such as a valid court order, or to protect someone in immediate danger. See “If someone may be in danger” in our Terms of Use.

We don’t share health data with any other third parties or affiliates.

5. Your consent

We only collect health data with your consent. You give it when you agree to this policy at sign-up and then choose to save a check-in, journal entry, safety plan, or comfort kit reason. Saving is always optional. You can withdraw your consent anytime by deleting that data or your whole account.

6. Your rights

• See your data: log in to see all of your saved check-ins, journals, safety plan, and comfort kit. You can also ask us to confirm what we hold and who we’ve shared it with.
• Delete it: delete check-ins on the check-in page or in Settings, delete journal entries in your journal, or press “Delete my account” in Settings to erase everything at once. Deleting happens right away in our database. Copies in Cloudflare’s backups are removed on their normal schedule.
• Withdraw consent: stop saving data, or delete it as described above.
• Ask for help: email [email protected]. Because accounts don’t use email or real names, we may ask you to confirm it’s your account (for example, by asking you to make the request while logged in). We’ll answer within 45 days.
• Appeal: if we say no to a request, you can appeal by emailing [email protected] with “Appeal” in the subject. If you’re still unhappy, you can contact the Washington State Attorney General.

7. Contact

Indigo Unlimited, which runs NoWhereElse: [email protected].

Privacy Policy · Terms of Use