Consumer Health Data Privacy Policy

"Consumer health data" means personal information that identifies your past, present or future physical or mental health. Because Little C is a breast cancer companion, we treat everything linked to your account as consumer health data. We collect it only with your consent, and use it only for the purposes below.

• Account information linked to health context

  Name, email address, and the fact that you use a breast cancer care app. Because of what Little C is for, we treat these as health data.

  How we use it: Create and secure your account, sign you in, and contact you about your account.

• Diagnosis and treatment

  Cancer type, stage, tumor markers and receptor status, diagnosis date, treatment status, care team and hospital names, menopausal status.

  How we use it: Personalize your dashboard, timeline, learning content, and features you choose to use.

• Symptoms, medications and appointments

  Symptom logs, severity and notes; medication names, doses, schedules and adherence; appointment details, questions and visit notes.

  How we use it: Record, chart and remind you about your care, and prepare appointment summaries you request.

• Mental and emotional wellness

  Mood entries, journal content, meditation sessions and wellness check-ins.

  How we use it: Provide the emotional wellness tools you use.

• Nutrition and bodily functions

  Meal and food descriptions, water intake, and related notes.

  How we use it: Provide nutrition tracking and recipe features.

• Reproductive and fertility health

  Fertility preservation plans, notes and related entries in the fertility section.

  How we use it: Provide the fertility planning tools you choose to use.

• Medical documents and AI outputs

  Documents you upload for analysis, the extracted findings, Navigator conversations and attachments, and AI-generated summaries or suggestions.

  How we use it: Explain documents and answer questions, but only after you turn on AI processing.

• Inferences about your health

  Summaries, symptom patterns, urgency flags and suggested questions derived from your data by Little C or its AI features.

  How we use it: Show you insights you request. We do not use inferences for advertising.

• Insurance and financial assistance

  Insurance provider and plan, policy details you store, claims and financial aid applications.

  How we use it: Help you organize coverage and assistance paperwork.

• Care circle and community

  Caregiver names and roles, care tasks and notes, community profile fields (diagnosis, stage, treatment, hospital, ZIP code), posts and messages.

  How we use it: Coordinate care with people you invite and connect you with communities you join.

• Approximate location

  ZIP code you enter. We do not collect precise device location and do not geofence around health care facilities.

  How we use it: Find nearby clinical trials and resources, and set daylight-based schedules.

• Technical and billing records

  IP address, browser details, request and security logs, AI usage records, and purchase records for paid features.

  How we use it: Keep the service secure, prevent abuse, operate billing, and fix problems.

We also use consumer health data to secure the service, prevent fraud and abuse, and comply with the law. We do not use it for advertising, and we do not use it for research unless you give separate consent.

• You, when you enter information, upload documents or use AI features.
• People you invite into your care circle, when they add tasks, notes or updates.
• AI assistants you connect, but only for categories you grant and actions you approve.
• Little C and its AI features, which derive inferences from your information.
• Your browser or device, which sends technical information such as IP address.

We do not sell consumer health data. We have no affiliates that receive it. Service providers receive it only to perform services for Little C. AI providers receive it only after you give separate consent by turning on AI processing. Other people receive it only when you choose to share with them.

No third party collects your consumer health data over time and across other websites or online services through Little C: we do not use advertising pixels or cross-site trackers. We do not collect precise location and do not geofence around places where people receive health care.

You have the right to:

• Confirm and access whether we collect, share or sell your consumer health data, get a copy, and get a list of every third party and affiliate that received it, with a way to contact each one.
• Withdraw consent to collection or sharing at any time.
• Delete your consumer health data. We pass deletion requests on to our service providers and to third parties that received the data. Copies in backups are removed within 6 months.
• Correct inaccurate information.
• Be free from discrimination for using these rights.

How to make a request

• In the app: Settings → Privacy & Data. Export My Data includes the recipient list. You can also withdraw consent, delete your account, or open Privacy requests for anything else.
• By email: privacy@littlec.health. We verify requests by confirming control of the email address on your account. You may use an authorized agent where your state allows it.

Requests are free up to twice in any 12-month period. We respond within 45 days. If we need more time, we will tell you why within that period and may extend once by up to 45 days.

Appeals

If we decline your request, we will tell you why. You can appeal from your Privacy requests page or by emailing privacy@littlec.health with "Appeal" in the subject. We respond to appeals within 45 days and explain our decision. If your appeal is denied, you may contact your Attorney General:

• Washington Attorney General
• Nevada Attorney General
• Connecticut Attorney General

We will post changes here and update the effective date. Before we collect or share consumer health data in a new way, or for a new purpose, we will ask for your consent in the app. Questions: privacy@littlec.health.