Your health-related information.

What we collect and where it comes from

We collect the assessment answers and check-ins you enter about stress, sleep, energy, capacity, illness, emotions, barriers, and whether an attempt is safe. Your behavior goals, action outcomes, Recovery answers, free-text notes, and help or feedback messages may also contain health-related information. Account identifiers connect these records to you.

The sources are your own entries and records the app derives from those entries and your action history: patterns, summaries, and behavior hypotheses about what may be making action difficult. These hypotheses are not medical diagnoses. We do not obtain your medical records from a clinician or insurer.

Why we use it

We use this information to keep the record you ask us to keep, help you plan and review actions, show your history and patterns, respond when you ask for help, and pause normal action prompts when a safety answer puts a situation outside the service’s scope. We collect and share information necessary to provide the service you request; where consent is required for other collection or sharing, we must obtain it first. Consent to sharing must be separate from consent to collection.

Optional product research has a separate consent choice in Settings. If you opt in, data with identifying details removed may be used to study and improve the product. Using the service or choosing Founder Beta is not research consent. Research consent is not permission to publish your identity or personal story.

Who can receive or access it

You can access your own record. Michael, the founder, and authorized administrators can access records to operate the service, address support and safety issues, and handle data requests. Base44 hosts the application and processes its stored records on our behalf.

Optional Founder Beta gives the founder limited support alerts after you consent; it does not give him a full assessment, private Recovery text, or health or safety answers through those alerts. If you create a public card or choose to share a summary with a partner, the information you choose to share can reach that audience. Review it before sharing. Founder Beta and partner or public sharing are separate from optional research.

Stripe processes billing and payment identifiers, not your private assessment, check-in, or Recovery record. If you opt into available text reminders, Twilio processes your number, verification, and reminder messages; those texts do not contain your private behavioral notes. Email delivery providers process the reminder and support messages sent through them. Limited information may also be disclosed when legally required. We do not sell consumer health data or share it with advertisers or data brokers, or use it for targeted advertising.

Your choices and requests

You can request confirmation of whether we collect, share, or sell your consumer health data; access and a copy, including a list and contact information for the third parties and affiliates with whom it was shared where applicable; correction of inaccurate information; deletion; and withdrawal of consent to collection or sharing. We do not sell it. You can appeal a refusal. Applicable law determines the scope of each right.

Settings provides a data export and a reviewed deletion request, including when your membership is read-only. You can correct editable information in the app. For other corrections, a health-data copy or sharing history, consent withdrawal, an inaccessible account, or an appeal, email support@followthroughprotocol.com with the subject “Health data request” or “Health data appeal.” Please describe the request and use your account email if possible. Do not send extra health details or identity documents unless we explain why they are needed. We may verify your identity before releasing or changing a record.

Turn off optional product research in Settings to withdraw that consent. Read-only members can also turn off research and Founder Beta in Settings without paying again. If you cannot access your account, email us. Withdrawal applies to future consent-based use; it does not undo a use already lawfully made. Withdrawing consent is not the same as deleting your record. If you want essential collection to stop, contact us to end the affected features or close the account; the service cannot keep providing features that need those records without collecting them. This requires review and is not an automatic stop-collection switch.

Response times and appeals

Requests are handled manually. We will respond without undue delay and within 45 days after receiving your request as required by applicable law. If a legally permitted extension is needed, we will notify you within the initial 45 days with the reason and the extension period, up to 45 additional days. If we refuse a request, we will explain why and how to appeal. Email an appeal to the same address; we will give you a written decision and reasons within 45 days of receiving it.

If your appeal is denied, you can file a complaint with the Washington Attorney General. You do not need an active paid membership to make a request or appeal.

Retention and deletion

We keep your record while your account exists so it stays available to you. Settings submits a deletion request for review; it does not immediately erase the account. We will handle a valid health-data deletion request under applicable law, including directing relevant processors and recipients to delete covered data. Limited billing, security, or other records may remain where law permits or requires it. Any permitted delay for archived or backup data will be explained in the response; covered Washington data in those systems must be deleted within six months after authentication of the deletion request. Do not assume deletion is complete until you receive confirmation.

Changes and contact

This policy is run by Michael, the founder of the Follow Through Protocol, in Arizona. Email support@followthroughprotocol.com for any health-data question or request.

We will notify you by email or in the app before a material change takes effect. A policy update alone does not permit a new use of previously collected health data. Additional categories or purposes requiring consent need that consent before the new collection, use, or sharing begins.