Connecticut Consumer Health Data Privacy Policy

This policy explains how PruneSocial LLC (“PruneSocial”) handles “consumer health data” as defined by Connecticut’s consumer health data law (the Connecticut Data Privacy Act’s consumer health data provisions). It is separate from, and supplements, our Privacy Policy. Washington and Nevada residents can read our Washington and Nevada policies.

Categories of consumer health data we collect, and how we use them

PruneSocial isn’t a health product. We don’t ask for health information, medical records, or access to any health account. But the social media content you choose to upload can contain health-related statements you made in the past. Depending on what you submit, that can include information about:

• physical or mental health conditions, symptoms, or diagnoses;
• therapy, counseling, treatment, or medical procedures;
• medication;
• substance use, addiction, or recovery;
• pregnancy, reproductive health, or sexual health;
• gender-affirming care; and
• other health-related statements in your text.

It can also include health information that our automated analysis recognizes or infers from the text you submit while deciding whether an item matches one of PruneSocial’s screening categories. We use it only to create the private report you asked for.

Sources of consumer health data

Consumer health data comes only from the account-export files you choose to provide from accounts you own or control. Some supported text inside those exports may have been written by other people, such as the text of a post you liked or reposted, or a Pin you saved from someone else’s board. If you turn on the optional on-device image reader, the words it finds in images you posted, such as memes and screenshots, are also submitted as text. The images themselves stay on your device. We never collect private messages or private bookmarks, and we exclude Pinterest secret boards. PruneSocial does not obtain medical records or health information from health care providers, insurers, pharmacies, health applications, or data brokers.

How we process it

Your export ZIP files and the activity files inside them are opened and read in your browser, on your own device. Only the extracted text items (each with its date, its type, and a link to the item when the export includes one) are sent to us, over an encrypted connection, when you run a free preview or a report. They are held briefly in temporary storage on our hosting provider while your report is generated, scored by an AI service on our behalf, and turned into a private PDF that you download from an encrypted link we email you. We don’t use consumer health data for advertising, profiling, or any other purpose, and we never sell it. A health condition, disability, pregnancy, treatment, recovery status, or other protected characteristic is never, by itself, a reason for a flag. An item that contains health information may still be flagged if it independently matches a separate non-health screening category, and its text may then appear in your private report.

You give your consent by ticking the separate health information checkbox on the scan page, before anything is sent to us. That box is not part of the Terms checkbox, and you can use the Service only if you tick it. The text beneath it describes the categories above, the purpose, who processes the data, and how to withdraw.

Who we share it with

Categories of consumer health data shared: none. PruneSocial doesn’t sell consumer health data and has no affiliates. To provide the Service, we disclose submitted information to contracted processors that act on our behalf and under our instructions, solely to deliver the service you requested:

• Anthropic, whose AI model scores your content. Under Anthropic’s commercial terms, API inputs aren’t used to train models by default, and we don’t opt your content into any training or feedback program. Anthropic keeps API inputs and outputs under the retention terms for the model and account we use, currently generally up to 30 days, subject to exceptions described in its policies.
• Netlify, which hosts the site and temporarily holds submitted content while your report is generated.
• Resend, which emails you a private link to your finished report. The email contains the link, not the report or any of its text. Resend keeps a copy of each email for 30 days, and can delete one earlier on request. If a report can’t be stored for the link, it is never sent as an email attachment. The report attempt fails, your run is restored, and we tell you.

We never provide consumer health data to employers, recruiters, data brokers, or background-check companies.

We do not sell consumer health data. We also don’t use geofencing to track you near any health facility. PruneSocial does not permit advertising or analytics companies to collect consumer health data from the scan or report workflow over time and across unrelated websites or online services.

How long we keep it

Submitted content is deleted from PruneSocial’s systems when your report is emailed, or when a report attempt fails. If processing is interrupted before that cleanup can run, or an upload never becomes a report, an automated cleanup deletes it within about a day. Your finished report is stored encrypted for 14 days so you can download it from the private link we email you, then deleted. You can delete it sooner from the download page. The key that opens it is only in your link, and we don’t keep it, so we can’t read the stored copy. Our email provider, Resend, keeps a copy of the delivery email (the link, not the report) for 30 days, and Anthropic keeps API data for a limited time as described above.

Your rights, and how to use them

You can ask us to confirm whether we collect, share, or sell consumer health data about you, to give you access to it, to delete it, and to review it and request changes. You can withdraw your consent to future collection or sharing at any time, and we will stop processing within the time Connecticut law allows, which is no later than 15 days after we receive your request. Withdrawing consent applies to future processing and doesn’t affect processing that already happened.

Email hello@prunesocial.com with the subject “Consumer Health Data Request,” ideally from the address you used with us. You don’t need an account. When you ask us to delete, we will delete it from our records and notify our service providers. Anthropic does not delete API data on request; it deletes inputs and outputs automatically within about 30 days of receipt or generation, subject to the exceptions described above. We aim to finish within 30 days, and we will respond within the time Connecticut law requires. In practice we usually hold nothing once your report is sent, but we’ll confirm that for you, and we’ll tell you if a longer period applies to archived or backup copies.

If we decline your request, you can appeal by replying with “Appeal” in the subject line. We’ll respond to appeals in writing and explain our decision. If you’re not satisfied with the outcome, you can contact the Connecticut Attorney General’s Office.

Changes to this policy

If we change how we handle consumer health data, we’ll update this page and its effective date before the change takes effect, and we’ll post a notice on the scan page. If we ever want to collect more categories, or use or share consumer health data for another purpose that needs your consent, we’ll ask for it first.