Consumer Health Data Privacy

What This Notice Covers

This notice describes how KRUUSH, operated by Kruush Wellness LLC ("Company"), a Wyoming limited liability company, collects, uses, and protects consumer health data as defined under the Washington My Health My Data Act (RCW 19.373) and similar state health data privacy laws. This notice applies to all visitors regardless of location.

KRUUSH is a wellness content and community platform. We are not a healthcare provider, health plan, or HIPAA-covered entity. However, some of the information we collect may constitute "consumer health data" under applicable state laws, and we treat it with the highest level of care.

Categories of Health Data We Collect

KRUUSH may collect the following categories of consumer health data through our research survey, quizzes, and community features:

We do not collect: medical records, health insurance information, prescription data, diagnostic codes, genetic data, biometric data, or precise geolocation data.

How Health Data Is Collected

Research Survey ("The KRUUSH Report"): Anonymous survey responses about perimenopause experiences. No names, email addresses, IP addresses, or account identifiers are stored with survey answers. Each response is identified only by a randomly generated session hash. Survey data cannot be linked to any individual.

Quizzes: Self-assessment quiz responses (Intimacy Quiz, Glow Up Quiz, Body Quiz, Take It Together). Quiz results may be stored with your account if you are logged in, or locally in your browser if you are not.

Community Features: Any health-related information you voluntarily share in community posts, talk spaces, or comments. This information is shared at your discretion and visible to other community members.

Purpose of Collection

We collect consumer health data for the following purposes:

• To generate anonymous, aggregate statistics about women's perimenopause experiences
• To publish de-identified research findings that advance public understanding of women's health
• To provide personalized quiz results and content recommendations
• To improve our educational content, platform features, and services based on community needs
• To create reports, visualizations, and educational materials from aggregate data
• To share anonymous, aggregate data with researchers, healthcare organizations, employers, policymakers, and mission-aligned organizations working to improve women's health (for example, a women's health nonprofit studying symptom trends, or a university research team analyzing perimenopause data)
• To support advocacy efforts for improved women's healthcare policy and workplace accommodations

We do not sell identifiable consumer health data. We do not share identifiable health data with third parties for advertising or marketing. Revenue generated from sharing anonymous, aggregate insights with aligned partners funds the continued operation and independence of this platform.

Consent

Before collecting health data through our research survey, we obtain your affirmative, informed consent through a detailed consent screen. In compliance with the Washington My Health My Data Act, we obtain separate consent for each of the following:

• Collection consent: Permission to collect your anonymous health data across the categories described above
• Internal use consent: Permission for KRUUSH to use your anonymous data internally to generate educational content, research findings, aggregate statistics, and to improve the platform
• Third-party sharing consent: Permission to share your anonymous, aggregated data with researchers, healthcare organizations, employers, policymakers, and mission-aligned organizations working to improve women's health (for example, women's health nonprofits, university research teams, or healthcare companies developing better treatments for perimenopause)

Each consent is obtained through a separate checkbox. You must affirmatively check each element before proceeding. All three consents are currently required to participate in the research survey. Consent is recorded with a version identifier and timestamp.

The consent screen also explains: the specific categories of health data being collected, the purpose of collection, how data will be used and shared, the risks of participation, crisis resources, and your right to skip any question or withdraw at any time.

De-identification and Anonymity

Research survey data is collected in a manner consistent with the HIPAA Safe Harbor de-identification standard (45 CFR 164.514(b)(2)). Specifically:

• No names, addresses, dates of birth, phone numbers, email addresses, Social Security numbers, or other direct identifiers are collected with survey responses
• Age is collected as a range (e.g., "35 to 39"), not an exact value
• Geographic location is collected as region (e.g., "West Coast"), not state, city, or ZIP code
• No IP addresses or device identifiers are logged with survey data
• Email addresses provided for result notifications are stored in a separate, unlinked database table

Anonymous survey data cannot be linked or re-linked to any individual. It does not constitute "consumer health data" that is identifiable to a specific consumer.

Third Party Sharing

We may share anonymous, aggregate research findings and data with:

• Academic researchers and universities studying women's health
• Healthcare organizations and providers working to improve perimenopause care
• Employers and workplace policy organizations seeking to support women's health
• Government agencies and policymakers working on women's health policy
• Mission-aligned organizations such as women's health nonprofits, healthcare companies developing better perimenopause treatments, and consumer health brands focused on women's wellness. We do not share data with advertisers or data brokers.
• Media organizations and the general public through published reports

We do not share individual-level data, identifiable data, or raw survey responses with any third party. All shared data is anonymous and aggregated at a level that prevents identification of any individual respondent.

Data sharing partnerships may generate revenue that funds the continued operation and independence of this platform. This revenue model is disclosed to survey participants during the consent process.

Your Rights

Under applicable health data privacy laws, you have the right to:

• Know what categories of health data we collect and why
• Access personal health data we hold about you (account-linked data only; anonymous survey data cannot be retrieved)
• Delete account-linked health data (quiz results, community posts). Anonymous survey data cannot be deleted because it is not linked to any individual.
• Withdraw consent for future data collection at any time
• Opt out of any non-essential health data collection

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Data Security

Consumer health data is protected by encrypted connections (HTTPS/TLS), access controls, and secure database infrastructure. We limit access to health data to essential personnel only. We do not store health data on local devices or in unencrypted formats.

Data Retention

Anonymous survey data: Retained for a minimum of 10 years per NIH data sharing guidelines to support long term research value. Because this data is anonymous and cannot be linked to any individual, it does not pose ongoing privacy risk.

Account-linked health data (quiz results, community posts): Retained while your account is active. Deleted within 30 days of account deletion request.

Email addresses (newsletter, research notifications): Retained until you unsubscribe or request deletion.

Geographic Scope

The KRUUSH research survey is currently available to residents of the United States. We do not knowingly collect health data from residents of the European Union, European Economic Area, or United Kingdom, where such data would be classified as "special category data" under the GDPR and require additional protections.

Changes to This Notice

We may update this notice as laws evolve or our practices change. Material changes will be posted here with a revised date. If we make changes that affect how previously collected health data is used, we will provide prominent notice.

Contact

For questions about this Consumer Health Data Privacy Notice or to exercise your health data rights:

Email: [email protected]