Consumer Health Data Privacy Policy

This policy is published by LIVE TULANI, LLC ("Tulani," "we," "us") under the Washington My Health My Data Act. It describes only our handling of consumer health data. Our general Privacy Notice describes our other information practices.

This policy applies to the tulani.com website. Our mobile application and health service are not yet available.

1. The consumer health data we collect, why we collect it, and how we use it

We collect one item of information: your email address, and only if you choose to join our waitlist.

Because Tulani's forthcoming service is for people living with diabetes and prediabetes, we treat the email address you give us as consumer health data, even though you do not tell us anything about your health.

We collect it for one purpose: to notify you when our service becomes available. We use it only to send you that notification. We do not use it for any other purpose, and we do not analyse, score, segment, or profile the people on our waitlist.

2. Where we get consumer health data from

Directly from you, through the waitlist form on tulani.com.

We do not obtain consumer health data from any other source. We do not buy it, receive it from data brokers, obtain it from affiliates, or derive it from your activity on other websites.

3. The consumer health data we share

None. We do not share any consumer health data.

4. Third parties and affiliates who receive consumer health data

None. There are no third parties or affiliates with whom we share or sell consumer health data.

Our website makes no requests to third-party services. We use no analytics, advertising, or tracking technologies.

5. How to exercise your rights

You have the right to:

• Confirm and access — ask whether we are collecting, sharing, or selling consumer health data about you, and get a copy of it, together with a list of any third parties and affiliates who have received it and a way to contact them.
• Withdraw consent — withdraw your consent to our collection and sharing of your consumer health data.
• Delete — ask us to delete your consumer health data.

To make a request, email us at privacy@tulani.com. You do not need to create an account. Because your email address is the only information we hold about you, sending your request from that address is normally all we need to identify you. If we cannot identify you from your request, we may ask you for further information.

Our response. We will respond within 45 days of receiving your request. If your request is complex, we may take up to a further 45 days — if so, we will tell you why within the first 45 days. Responses are free, up to twice a year.

If we refuse your request, you may appeal by replying to us at the same address, privacy@tulani.com. We will tell you in writing what we have decided, and why, within 45 days of receiving your appeal. If we deny your appeal, we will give you a way to submit a complaint to the Washington State Attorney General.

If you ask us to delete your data, we will delete it from our records, including from backup systems. Deletion from backups may take longer, but never more than six months.