Consumer Health Data Privacy Policy
This policy is required by, and limited to, the Washington My Health My Data Act, Nevada SB 370, and comparable state consumer-health-data laws. It is separate from our Privacy Policy, which covers everything else.
Published by Qafilah Inc., a Delaware corporation.
1Categories of consumer health data we collect
None.
For completeness, the categories a user may record on her own device inside Qafilah Sisters are: menstrual-cycle start and end dates; postpartum (nifas) and pregnancy-loss track dates; free-text reflections she chooses to write; and her own selections of which optional life-stage tracks to turn on. None of it reaches Qafilah Inc.
2The purpose of collecting or sharing it
Not applicable. We do not collect it, so there is no purpose for which we do. The data a user records on her device is used only on that device, and only to provide the feature she switched on — for example, adjusting prayer and fasting guidance for her current state.
3Sources of the data
Not applicable. We obtain consumer health data from no source. Entries are made by the user, on her device, and stay there.
5We do not sell consumer health data
Qafilah Inc. has never sold consumer health data and does not sell it. We hold none to sell, so no authorization to sell can arise and we collect none.
6How it is protected on your device
These are not disclosures the Act requires of us, since we are not the holder. They are stated because they are what actually protects the information:
- Stored in the app’s private on-device database, under the operating system’s own file protection (iOS Data Protection / Android internal storage).
- Excluded from our cloud backup. An archive naming one of these tables is refused on restore.
- Behind the device’s biometric or a 4-digit PIN on every entry to the section.
- Screenshots and screen recording are blocked by the operating system while the section is open.
- Excluded from in-app search, so nothing from the section appears in results elsewhere.
- Never the subject of a notification, so nothing about it appears on a lock screen.
7Your rights
Under the Act you may ask us to confirm whether we collect, share or sell your consumer health data, to name the third parties we share it with, to withdraw consent, and to delete it. We will answer any such request, and the answer will be that we hold none. We cannot produce, transfer or delete a copy we never had.
To delete the data itself — which only you can do, because only you have it — open Qafilah Sisters → Settings → “Turn off and delete”. That immediately erases every record in the section, together with its PIN and biometric state. Deleting the app has the same effect.
To have the above confirmed in writing, or to appeal a denied request, write to contact@getqafilah.com with “Consumer health data” in the subject. We aim to respond within 30 days, and to an appeal within 45.
8Geofencing
We operate no geofence of any kind. Qafilah Sisters reads no location, so the Act’s prohibition on geofencing around health-care facilities is not engaged.
9Changes
If our handling ever changes — in particular if any of this data were ever to reach our servers — we will update this policy before that change ships, and seek separate, affirmative opt-in consent for collecting it and again for sharing it, as the Act requires. We have no plan to do so.
10Contact
Qafilah Inc., Delaware, USA · contact@getqafilah.com