Washington Consumer Health Data Privacy Policy

This policy explains how PruneSocial LLC (“PruneSocial”) handles “consumer health data” as defined by Washington’s My Health My Data Act. It is separate from, and supplements, our Privacy Policy.

Categories of consumer health data we may collect

PruneSocial isn’t a health product. We don’t ask for health information, medical records, or access to any health account. But the social media content you choose to upload can contain health-related statements you made in the past. Depending on what you submit, that can include information about:

• physical or mental health conditions, symptoms, or diagnoses;
• therapy, counseling, treatment, or medical procedures;
• medication;
• substance use, addiction, or recovery;
• pregnancy, reproductive health, or sexual health;
• gender-affirming care; and
• other health-related statements in your text.

It can also include health information that our automated analysis recognizes or infers from the text you submit while deciding whether an item matches one of PruneSocial’s screening categories. Posts you’ve liked or reposted are included too, and since those were written by other people, they could contain someone else’s health-related statements.

Sources of consumer health data

Consumer health data comes only from the account-export files you choose to provide from accounts you own or control: the text of your posts, comments, liked posts, video titles and descriptions, Pinterest Pins and boards, group posts and comments, and the bio, About text, or job descriptions from your profile. Some supported text inside those exports may have been written by other people, such as the text of a post you liked or reposted, or a Pin you saved from someone else’s board. If you turn on the optional on-device image reader, the words it finds in images you posted, such as memes and screenshots, are also submitted as text. The images themselves stay on your device. We never collect private messages or private bookmarks, such as posts saved on Facebook, Instagram, or X, and we exclude Pinterest secret boards. PruneSocial does not obtain medical records or health information from health care providers, insurers, pharmacies, health applications, or data brokers.

Why we collect it and how we use it

Only to create the private report you asked for. Your content is scored against published employment-screening behavior categories. Our scoring rules are designed so that a health condition, disability, pregnancy, treatment, recovery status, or other protected characteristic is never, by itself, a reason for a flag. An item that contains health information may still be flagged if it independently matches a separate non-health screening category. We don’t use health information for advertising, profiling, or any other purpose, and we never sell it.

You give your consent by ticking the separate health information checkbox on the scan page, before anything is sent to us. That box is separate from the Terms checkbox. The text beneath it describes the categories above, the purpose, who processes the data, and how to withdraw.

Who we share it with

Categories of consumer health data shared under Washington law: none. PruneSocial doesn’t sell consumer health data and has no affiliates with which it shares consumer health data. To provide the Service, we disclose submitted information to contracted processors that act on our behalf and under our instructions, solely to deliver the service you requested:

• Anthropic, whose AI model scores your content. Under Anthropic’s commercial terms, API inputs aren’t used to train models by default, and we don’t opt your content into any training or feedback program. Anthropic keeps API inputs and outputs under the retention terms for the model and account we use, currently generally up to 30 days, subject to exceptions described in its policies.
• Netlify, which hosts the site and temporarily holds submitted content while your report is generated.
• Resend, which emails you a private link to your finished report. The email contains the link, not the report or any of its text. Resend keeps a copy of each email for 30 days, and can delete one earlier on request. If a report can’t be stored for the link, it is never sent as an email attachment. The report attempt fails, your run is restored, and we tell you.

These processor disclosures are not treated as “sharing” under Washington’s My Health My Data Act when they are made consistently with the disclosed purpose and the applicable processor requirements. If an item in your report is flagged for a non-health reason, such as a threat, its text may appear in your private report, including any health information it contains. We never provide consumer health data to employers, recruiters, data brokers, or background-check companies.

How long we keep it

Submitted content is deleted from PruneSocial’s systems when your report is emailed, or when a report attempt fails. If processing is interrupted before that cleanup can run, or an upload never becomes a report, an automated cleanup deletes it within about a day. Your finished report is stored encrypted for 14 days so you can download it from the private link we email you, then deleted. You can delete it sooner from the download page. The key that opens it is only in your link, and we don’t keep it, so we can’t read the stored copy. Our email provider, Resend, keeps a copy of the delivery email (the link, not the report) for 30 days, and Anthropic keeps API data for a limited time as described above.

Your rights, and how to use them

You can ask us to confirm whether we collect, share, or sell consumer health data about you, to give you access to it, to list any third parties or affiliates we have shared or sold it to, to delete it, and you can withdraw your consent to future collection or sharing at any time. Withdrawing consent applies to future processing and doesn’t affect processing that already happened.

Email hello@prunesocial.com with the subject “Consumer Health Data Request,” ideally from the address you used with us. You don’t need an account. When you ask us to delete, we will delete it from our records and notify our service providers as required by law. One exception: Anthropic does not delete API data on request. It deletes inputs and outputs automatically within about 30 days of receipt or generation, subject to the exceptions described above. In practice we usually hold nothing once your report is sent, but we’ll confirm that for you. If a longer period applies to archived or backup copies, we’ll tell you. We’ll respond within 45 days, and may extend that once where the law allows, with an explanation.

If we decline your request, you can appeal by replying with “Appeal” in the subject line. We’ll respond to appeals within 45 days and explain our decision. If you’re not satisfied with the outcome, you can contact the Washington State Attorney General’s Office.

Changes

If we change how we handle consumer health data, we’ll update this page and its effective date before the change takes effect. If we ever want to collect more categories, or use or share consumer health data for another purpose that needs your consent, we’ll ask for it first.