Consumer Health Data Privacy Notice

Last updated October 31, 2026 Draft for lawyer review

This notice explains how Kin Money, LLC, doing business as Bud (“Bud,” “we,” “us”), handles consumer health data. It’s written for Washington’s My Health My Data Act, Nevada’s consumer health data law, Connecticut’s rules on consumer health data, and similar state laws, and we follow it for everyone in the US. It adds to our Privacy Policy.

The short version

• What you log in the Bud app is not sent to us. Tests, results, reminders, protection, play and everything else stay in your journal on your iPhone, or in your own end-to-end encrypted iCloud if you turn on sync. We can’t read it.
• The health data we may hold is limited to what can be inferred from being on our email list or reading our website, and anything you choose to tell us in an email.
• We never sell consumer health data, never share it with advertisers, and never use it for advertising.

What consumer health data means

These laws define consumer health data broadly. It includes information about your physical or mental health, sexual and reproductive health, and data that could identify you as someone seeking health care, even if it’s only inferred. Because Bud is a journal about sex and sexual health, we treat the information below as consumer health data.

What we collect and where it comes from

What we don’t collect. We don’t collect anything you log in the Bud app, your test results, your location, your contacts, or biometric data. iOS handles Face ID and never shares your face data with us. Crash reports Apple sends us (if you’ve allowed it) are designed not to include what you’ve logged.

How we use it

Only for the purposes in the table above, to keep our services secure and free of spam, and to comply with the law. We collect it with your consent (by signing up or choosing Accept) or because it’s needed to give you something you asked for. We’ll ask for your consent again before using it for any other purpose.

Who we share it with

We share consumer health data only with service providers (called processors) that handle it for us under contract and only to provide their service:

• Resend, which stores our email list, sends our emails and records opens and clicks.
• Cloudflare, which hosts the website, runs the signup form and forwards emails to help@getbud.app.
• Our email provider, which stores support emails.
• PostHog and Google, which provide website analytics, only after you choose Accept.

We have no affiliates that receive consumer health data. We don’t share it with any other third party, except where the law requires it. We don’t sell it, and we’d need your separate signed authorization to ever do so, which we won’t ask for. We don’t use geofences around health care locations.

Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and access it, including a list of every third party and affiliate we’ve shared it with and how to contact them;
• withdraw your consent to collecting and sharing it;
• delete it, which we also pass on to our processors; and
• appeal if we turn down your request.

How to use them. Email help@getbud.app. You can also unsubscribe from any email, or choose Reject in Cookie settings at the bottom of any page, to stop that collection right away. To check it’s you, we’ll reply to the email address the request is about. We respond within 45 days, and if we need more time we’ll tell you why and may take up to 45 more days. We won’t charge you or treat you differently for using your rights.

Appeals. Reply to our answer with “Appeal” in the subject line. We’ll answer within 45 days and explain our decision. If we deny your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint, or your own state’s attorney general.

How long we keep it

We keep your email address until you unsubscribe or ask us to delete it, website analytics for up to 14 months, recordings for 30 days, and support emails only as long as we need them. Our Privacy Policy has the details.

Changes

If we change this notice, we’ll update the date at the top. We’ll ask for your consent before collecting or sharing consumer health data in a new way.

Contact