Qafilah قافلة ← Back to site

Consumer Health Data Privacy Policy

Effective: 7 October 2026  ·  Last updated: 7 October 2026

This policy is required by, and limited to, the Washington My Health My Data Act, Nevada SB 370, and comparable state consumer-health-data laws. It is separate from our Privacy Policy, which covers everything else.

Published by Qafilah Inc., a Delaware corporation.

Qafilah does not collect consumer health data. The app contains an optional section, Qafilah Sisters, in which a user may record menstrual-cycle, postpartum and pregnancy-related dates and notes. That information is written to storage on the user’s own device and is never transmitted to us. We hold no copy of it at any time.

1Categories of consumer health data we collect

None.

For completeness, the categories a user may record on her own device inside Qafilah Sisters are: menstrual-cycle start and end dates; postpartum (nifas) and pregnancy-loss track dates; free-text reflections she chooses to write; and her own selections of which optional life-stage tracks to turn on. None of it reaches Qafilah Inc.

2The purpose of collecting or sharing it

Not applicable. We do not collect it, so there is no purpose for which we do. The data a user records on her device is used only on that device, and only to provide the feature she switched on — for example, adjusting prayer and fasting guidance for her current state.

3Sources of the data

Not applicable. We obtain consumer health data from no source. Entries are made by the user, on her device, and stay there.

4Categories of data shared, and with whom

None, and no one. We share no consumer health data with any third party, affiliate, processor, service provider, advertiser, analytics provider or data broker, because there is nothing to share.

Within Qafilah Sisters specifically there is no advertising, no analytics, and no crash-report content: crash reports from that section are reduced to a bare stack trace, with the message, breadcrumbs and user identity removed before anything leaves the device.

5We do not sell consumer health data

Qafilah Inc. has never sold consumer health data and does not sell it. We hold none to sell, so no authorization to sell can arise and we collect none.

6How it is protected on your device

These are not disclosures the Act requires of us, since we are not the holder. They are stated because they are what actually protects the information:

7Your rights

Under the Act you may ask us to confirm whether we collect, share or sell your consumer health data, to name the third parties we share it with, to withdraw consent, and to delete it. We will answer any such request, and the answer will be that we hold none. We cannot produce, transfer or delete a copy we never had.

To delete the data itself — which only you can do, because only you have it — open Qafilah Sisters → Settings → “Turn off and delete”. That immediately erases every record in the section, together with its PIN and biometric state. Deleting the app has the same effect.

To have the above confirmed in writing, or to appeal a denied request, write to contact@getqafilah.com with “Consumer health data” in the subject. We aim to respond within 30 days, and to an appeal within 45.

8Geofencing

We operate no geofence of any kind. Qafilah Sisters reads no location, so the Act’s prohibition on geofencing around health-care facilities is not engaged.

9Changes

If our handling ever changes — in particular if any of this data were ever to reach our servers — we will update this policy before that change ships, and seek separate, affirmative opt-in consent for collecting it and again for sharing it, as the Act requires. We have no plan to do so.

10Contact

Qafilah Inc., Delaware, USA · contact@getqafilah.com