CONSUMER HEALTH DATA PRIVACY POLICY

For residents of Washington, under the My Health My Data Act, and Nevada, under Senate Bill 370. It supplements our Privacy Policy and covers only what those laws call consumer health data.

1. WHAT WE COLLECT, AND FROM WHERE

The main one is biometric data, only if you choose to verify your photos. The App sends one frame from your camera to our server, where a face-recognition model compares it with your profile photograph and a second model estimates an age from it. Both come from you.

Three optional profile fields may also count as consumer health data under Washington's definition, which is broad: whether you smoke, whether you drink, and your height. You choose whether to answer any of them, they are shown on your profile to people you are dealt to, and they are used for nothing else - no inference is drawn from them and they feed no ranking. Your gym, your sports, your training days and your location are not used to infer anything about your health.

2. WHY

To confirm that the person in your photographs is you, and to estimate your age so that under-18s are kept off the Service. For nothing else. The three profile fields above exist only to be shown on your profile.

3. CONSENT AND RETENTION

We collect it only after you consent on a screen in the App, before the camera opens. The face template lives in memory for the seconds the comparison takes and is never stored; the frame is deleted the moment the verdict is recorded. One exception: if the age model reads under 18, the frame is kept for the person who reviews that decision, and withdrawing your consent in the App deletes it even then. Everything is destroyed within three years of your last use of Pull at the outside. What survives is the verdict, when it was made, and the age that was read.

4. SHARING

We do not sell it and we share it with no third party or affiliate. Two processors act on our instructions: Hetzner, in Germany, which hosts the server, the database and the private bucket the frame is held in; and Hetzner's object storage in Nuremberg, which holds our database backups; those carry the verdict and the three profile fields above and never a frame. Nothing here leaves the European Economic Area, and no verification vendor is involved.

5. YOUR RIGHTS

You may confirm whether we collect or share consumer health data about you, access it, be given the list of third parties we share it with (none), withdraw your consent, and have it deleted. Write to privacy@pull.dating from the phone number on your account, or delete your account from Settings in the App. Withdrawing removes the verified badge and deletes any frame still held. We answer within 45 days, extendable once by 45 with notice, free of charge and without treating you differently for asking.

6. APPEALS

If we refuse a request, reply to our refusal with the word “Appeal” within 45 days. We answer in writing within 45 days, and if we still refuse we tell you how to complain to the Washington or Nevada Attorney General. You can also write or call us at the address and number on our Contact page.