Consumer Health Data Privacy Policy

(Washington My Health My Data Act, Nevada SB 370, Connecticut, and similar laws.)

This page is Part B of the Chuloh Privacy Policy, published separately as those laws expect.

Effective date: October 2, 2026 | Last updated: October 2, 2026

Who we are: Codexgig Web Services LLC, c/o Northwest Registered Agent LLC, 700 Narragansett Park Dr, Ste 100, Pawtucket, RI 02861, info@cgw.services.

Much of what you enter in Chuloh can be "consumer health data" about your baby or about you, because it relates to health status, bodily functions, or symptoms. We treat it as sensitive.

B.1 Categories of consumer health data we collect: feeding and sleep patterns; diaper output; growth measurements (weight, length, head size); temperature, symptoms, and other health notes; medicine names and doses; mood; milestones; appointments with health providers; baby's date of birth and optional sex; photos; and your pumping/lactation logs.

B.2 Sources: directly from you and from caregivers you invite. We do not buy health data and do not collect it from other websites or apps.

B.3 Why we collect and how we use it: only to provide the Chuloh features you ask for (record keeping, charts, reminders, sharing among your caregivers), to keep the Service secure, to bill you, to comply with law, and to respond to your requests. We do not use health data for advertising, profiling for marketing, or to build external profiles, and we do not sell it.

B.4 Who we share it with: (1) the Caregivers you invite; (2) our service providers that process it for us (Section 9 of the Privacy Policy), under contract; and (3) government authorities or others only as the law requires. We do not share consumer health data with any third party for their own purposes, and we do not sell it. We do not use geofencing around health facilities. You can withdraw consent to health-data processing at any time in Settings or by email; we then stop processing and delete it, except where law requires us to keep it.

B.5 Consent. We will ask for your separate, opt-in consent to collect and use a baby's health information before you add it ("I'm this baby's parent or legal guardian, or I have their permission, and I agree that Chuloh may collect, store, and share with the caregivers I invite the health-related information I enter, as described in the Consumer Health Data Privacy Policy"). We will ask for separate written authorization before we ever sell consumer health data (we do not). You can withdraw consent at any time (Section 12 of the Privacy Policy).

B.6 Your rights. You can (a) confirm whether we collect your consumer health data and access it, including a list of third parties and affiliates we've shared it with or sold it to (we do not sell it; third parties are our service providers), (b) withdraw consent, (c) delete your data, and (d) appeal our decision (Section 17 of Part C of the Privacy Policy). Make a request in the app (More > Your data) or at info@cgw.services. We acknowledge privacy and deletion requests within 10 days and complete them within 45 days (extendable once as the law allows). Deletion applies to our systems and service providers. Deleted data may remain in our providers' encrypted backups until overwritten on the providers' normal schedule; we do not promise a specific number of days.

B.7 Your rights: access, deletion, withdrawal of consent, and appeal. We don't sell consumer health data and don't use geofencing. Washington residents can also contact the Washington Attorney General. Nevada residents may make a request to info@cgw.services and may contact the Nevada Attorney General. State-specific sections of this Policy take effect on the same date as the Policy. Related documents: Privacy Policy, Terms of Service, Health Disclaimer, and Delete account.