Consumer Health Data Privacy Notice

Effective Date: July 21, 2026

This notice supplements the Actually Privacy Policy and applies to consumer health data covered by Washington's My Health My Data Act and Nevada's consumer health data law. Actually is a dating service, not a health-care provider. Because these laws define health data broadly, information you choose to share for dating, matching, messaging, or safety may still qualify as consumer health data.

Consumer Health Data We May Collect

Depending on what you choose to provide or make visible, the categories may include:

• Identity and relationship information such as gender, gender identity, dating preferences, sexual orientation that you state or that those preferences may reveal, relationship history, and whether you have or want children.
• Substance-use information such as the alcohol, tobacco, and cannabis preferences you add to your profile.
• Health-related content you choose to share in an About section, profile photo, video or audio recording, private message, report, or support request. Free-form content can reveal physical or mental health, disability, treatment, medication, reproductive or sexual health, or other sensitive information even though Actually does not ask for a medical record.
• Account and activity information connected to the categories above, such as the profile, match, message, block, or report to which the information relates.

We do not connect to HealthKit or other medical-record systems, ask for or import genetic data, or create facial or voice templates. As with any free-form content, a member could still volunteer information we did not request. We do not diagnose you or infer an unrelated medical condition. We may make the limited relationship and matching inferences needed to apply the preferences you request.

Where It Comes From

• You, when you complete profile fields, set matching preferences, create or upload content, send messages, submit a safety report, or contact us.
• Other members, when they send information in a message or include it in a report concerning an interaction with you.
• Our service systems, when they connect the information above with your account and the feature you requested, such as a match, message, block, or report.

We do not purchase consumer health data from data brokers.

How and Why We Process It

We collect, store, organize, display, transmit, and delete consumer health data only as reasonably necessary to provide the product or feature you request, with your consent where required, including to:

• create and display the profile details you choose to make visible;
• apply your matching preferences and recommend potential matches;
• deliver member-to-member messages and other content;
• investigate reports, preserve moderation evidence, enforce our rules, prevent abuse, and protect members;
• operate, secure, troubleshoot, and support the service; and
• comply with law and establish, exercise, or defend legal claims.

We do not use consumer health data for targeted advertising, sell it, or use it to make decisions about eligibility for employment, housing, insurance, credit, or health care.

How We May Share It

We may share the categories described above only as follows:

• Other members when you place information in a visible profile or send it in a message. This may include identity, relationship, substance-use, health-related content, and the account context you chose to share. Recipients may save or reshare what they receive.
• Microsoft Azure, which processes the categories we store as our contracted cloud hosting, database, identity, and media-storage provider.
• Safety and legal recipients when reasonably necessary to protect a person, investigate abuse or illegal activity, comply with valid legal process, enforce our Terms, or establish, exercise, or defend legal claims.
• A successor in a business transaction if Actually is involved in a merger, financing, reorganization, or sale, subject to applicable notice, consent, and use restrictions.
• Others at your direction or with your consent.

We do not sell consumer health data. Actually Mobile Software, LLC has no affiliates with which it shares consumer health data as of the effective date of this notice. We do not permit a third party to collect consumer health data over time across Actually and unrelated websites or online services. We do not use geofences around health-care facilities to identify or target people seeking care.

Your Rights

Subject to applicable law, you may:

• confirm whether we collect, share, or sell your consumer health data and access that data;
• receive a list of the third parties and affiliates with whom it was shared or sold and available contact information for them;
• review and correct consumer health data through your profile settings or by contacting us;
• withdraw consent and ask us to stop future collection or sharing; and
• request deletion of consumer health data, including notice to processors and other recipients that must honor the request.

You may remove optional information in the app or delete your account in Settings. You may also email admin@actually.dating with "Consumer Health Data Request" in the subject line. Tell us your state of residence and the right you want to exercise, but do not email medical details or identity documents. We will provide a secure way to supply any additional information reasonably needed to authenticate the request.

We will respond without undue delay. For Washington requests, we will respond within 45 days after receipt; for Nevada requests, within 45 days after authentication. If permitted, we may take one additional 45-day extension and will explain why. For an authenticated Nevada deletion request, we will delete covered data from active systems and notify recipients within 30 days, subject to lawful exceptions. We ordinarily process requests without charge; a reasonable fee may apply only where the law permits for manifestly unfounded, excessive, or repetitive requests.

If we deny or do not act on a request, you may appeal by replying to our decision with "Consumer Health Data Appeal" in the subject line. We will respond to the appeal in writing within 45 days. If the appeal is denied, Washington residents may contact the Washington Attorney General, and Nevada residents may contact the Nevada Attorney General. Withdrawing consent may prevent us from providing a feature that depends on the information. We will not unlawfully discriminate against you for exercising a right.

Deletion, Retention, and Security

We retain consumer health data only while reasonably necessary for the purposes described above, including the life of your account, safety and moderation review, dispute resolution, and legal obligations. A deletion request covers our active records and recipients as required by law. Deletion from restored archives or backups may be delayed only as permitted by applicable law—up to six months after authentication for Washington data and up to two years for Nevada data.

We limit employee and processor access to what is reasonably necessary and use administrative, technical, and physical safeguards appropriate to the nature and volume of the information. No method of storage or transmission is completely secure.

Changes to This Notice

We will post an updated notice here and change the effective date. For a material change, we will also provide notice through the app or another appropriate channel before the change takes effect. We will disclose and obtain affirmative consent before collecting or sharing additional categories, sharing with additional categories of recipients, or using consumer health data for materially new purposes when required by law.

Contact Us

Actually Mobile Software, LLC
3772 Last Best Pl
Missoula, MT 59808
admin@actually.dating

This notice describes Actually's current product and data practices. If another notice gives you greater rights, the more protective provision applies.