Scope
Deary is a private couples app, not a health service. Because answers are free text, information you choose to write may identify your physical or mental health, reproductive or sexual health, symptoms, treatment, medication, interventions or other information treated as consumer health data under Washington law.
Kreyd Labs Ltd does not infer health conditions, make health or relationship profiles, provide health advice, use health information for advertising, or sell consumer health data.
Categories and sources
The categories we may collect are:
- health, reproductive-health or sexual-health information you choose to include in a private answer or bounded reply;
- health-related information you choose to include in a custom question for your connected partner; and
- intimate-topic consent and exclusions that may indicate a broad preference concerning sensitive subjects.
The source is you, through information and choices you enter directly in Deary. We do not obtain consumer health data from data brokers, advertising networks, location providers, healthcare facilities or public records.
Why and how we use it
We use this information only as necessary to provide Deary:
- to store your private answer until the reveal condition is met;
- to reveal it to your connected partner as part of the couple ritual you requested;
- to keep your revealed memory in your private timeline;
- to apply both people's intimate-topic consent and exclusions to future question selection;
- to provide your requested export or deletion; and
- to protect the confidentiality, integrity and availability of the service.
Deary does not use consumer health data for additional purposes. If that changes, we will update this policy and obtain affirmative consent before collecting, using or sharing an additional category or using it for an additional purpose where Washington law requires.
Categories shared and recipients
A private answer or reply containing consumer health data is revealed only to your connected partner under the ritual you chose. Your connected partner may therefore receive the categories you choose to include in that revealed text.
Convex processes the same categories for Kreyd Labs Ltd as the contracted backend provider necessary to store, retrieve, export and delete the content. Convex hosts Deary's production and recovery backend in EU West (Ireland). Kreyd Labs Ltd has no affiliates with whom it shares consumer health data.
Apple provides identity, purchases and push transport, but private answer, reply and topic text is not sent in Apple push payloads or purchase data. We do not share consumer health data with advertising networks, analytics providers or data brokers.
Your Washington rights
You may ask us to:
- confirm whether we collect, share or sell consumer health data and give you access to it and a list of recipients;
- withdraw consent from future collection or sharing; or
- delete your consumer health data from our active records and notify processors and other recipients as required.
In Deary, export gives you a copy of your information, withdrawing intimate-topic consent stops future intimate questions, and account deletion removes your account and answers. You may also email privacy@kreydlabs.com. We will authenticate requests using reasonable methods and will not require you to create a new account.
We respond without undue delay and within 45 days, subject to a permitted 45-day extension with notice. Requests are free up to twice per year unless they are manifestly unfounded, excessive or repetitive. Active data is removed when deletion is confirmed; encrypted backup copies expire within 30 days.
Appeals
If we refuse a request, you may appeal by replying to our decision or emailing privacy@kreydlabs.com with “Washington privacy appeal” in the subject. We will respond within 45 days. If an appeal is denied, you may contact the Washington State Attorney General.
Security, retention and sale
Access is limited to people and processors necessary to provide the requested service. Private text is encrypted before database storage, network connections are encrypted in transit, device caches use a device-only key, and notifications and operational receipts exclude private text. We retain the information only as described in the Privacy Notice.
We do not sell consumer health data, and Deary does not use geofences around healthcare facilities or collect location information.
Contact and changes
Kreyd Labs Ltd is the business responsible for this policy. Contact privacy@kreydlabs.com or write to 133 Whitmore Road, Harrow, United Kingdom, HA1 4AG.
We will publish material changes before they take effect and obtain consent where required. The date at the top shows when this policy was last updated.