Consumer health and data policy
Effective date: October 22, 2026 · Version: 1.0
This policy covers "consumer health data" under the Washington My Health My Data Act (RCW 19.373), Nevada SB 370 (NRS Chapter 603A) and Connecticut's consumer health data law. It supplements our Privacy Policy.
"We" means Dr. Lee Long LLC, 2421 West 7th Street, Fort Worth, TX 76107, provider of the WAIT app and website.
1. Consumer health data we collect
Self-assessment data
Your 1–5 ratings of statements about your emotions, inner life and relationships.
The scores and profiles calculated from those ratings (Comprehension, Blocker and Application profiles, and Gap), including retakes.
Reflective writing
Your reflections and weekly thread entries.
This is encrypted on your device. We hold a recovery key, so we are technically able to decrypt it (see Privacy Policy, Section 4).
Exercise responses
Your choices in sorting and selection exercises, including items you type.
Progress and usage
Which chapters you have completed and when.
If you turn on "Help improve WAIT", events such as opening the Grounding Toolkit.
Inferences
Any conclusion about your emotional wellbeing that could be drawn from the data above, such as a score profile.
Linked identifiers
Your email address, account ID, installation identifier, and the IP address used when your app connects.
We do not collect precise location. We do not use geofencing around health care facilities.
2. Sources
We collect this data from you and from your device as you use WAIT. We do not obtain it from other companies.
3. How we process it and why
We collect and use consumer health data only:
As necessary to provide the WAIT workbook you ask for. This means storing, encrypting, syncing and restoring your answers and writing, and calculating and showing your scores.
To keep WAIT secure and working. Crash reports are configured to exclude your answers, writing and the screens you were using.
With your consent, if you turn them on: usage analytics ("Help improve WAIT") and internal group statistics about scores.
Before you begin, we ask for your consent to process this data for these purposes.
How the data is processed.
It is stored with our database provider in the United States.
Your writing is encrypted on your device before upload.
Each account can access only its own data.
What we never do. We do not use consumer health data for advertising. We do not sell it, and we do not use it to train AI models.
4. Who receives it
We share consumer health data only with your consent, or as necessary to provide the Service you request. These recipients act as our processors, except Apple and Google, which act under their own terms.
Supabase, Inc. (supabase.com/privacy): database, authentication and server functions. Receives all categories in Section 1 (writing in encrypted form only).
650 Industries, Inc. (Expo) (expo.dev/privacy): app updates. Receives an installation identifier and IP address.
Vercel Inc. (vercel.com/legal/privacy-policy): web hosting. Receives IP address.
Resend (Plus Five Five, Inc.) (resend.com/legal/privacy-policy): account emails. Receives email address.
Functional Software, Inc. (Sentry) (sentry.io/privacy): crash reporting. Receives account ID, installation and device information (no answers or writing).
PostHog, Inc. (posthog.com/privacy): usage analytics, only if you opt in. Receives account ID and usage events, such as "toolkit opened".
Apple Inc. (apple.com/legal/privacy) and Google LLC (policies.google.com/privacy): app stores and purchase notifications. Receive account ID and the purchase status of your WAIT subscription.
This list answers your right to see recipients. It is the list of third parties referred to in Section 5. We have no affiliatesthat receive consumer health data.
We do not sell consumer health data. We would not do so without your valid signed authorization.
No third-party tracking. No third party collects consumer health data about you over time, or across other websites or online services, through WAIT.
5. Your rights
Confirm and access. You can confirm whether we collect, share or sell your consumer health data. You can also access that data, including the list of third parties in Section 4.
Use Settings → Export my data for the data on your device.
Email us for a complete copy.
Review and change. You can view and edit your answers in the app. Email us to correct anything else.
Withdraw consent. You have three options:
Turn off analytics or group statistics in Settings → Your privacy.
Choose "Withdraw health-data consent". This deletes your workbook data but keeps your account.
Delete your account.
Delete. You can delete your account and all of its data in two ways:
In the app: Settings → Delete my account and everything in it.
At drleelong.com/support, or by emailing info@drleelong.com.
When you delete, we delete the data from our systems and tell our processors to delete it. It is removed from backups within 30 days.
How to make a request
Where: in the app, at drleelong.com/support, or by emailing info@drleelong.com from the email on your account.
Verification: we confirm that you control that email address.
Timing: we respond within 45 days. We may extend this once by 45 days when reasonably necessary, and we will tell you why.
Cost: requests are free. We may decline or charge for a request that is manifestly unfounded, excessive or repetitive, where the law allows.
Appeals
If we decline your request, email info@drleelong.com with the subject "Appeal". We will respond in writing within 45 days and explain what we did or did not do.
If you disagree with the outcome, you can contact your Attorney General:
Washington: atg.wa.gov/file-complaint
Nevada: ag.nv.gov
Connecticut: portal.ct.gov/ag
We will not discriminate against you for exercising these rights.
6. Changes to this policy
We will notify you in the app or by email at least 30 days before a material change. We will ask for your consent where required.
7. Contact
Dr. Lee Long LLC · 2421 West 7th Street, Fort Worth, TX 76107 · info@drleelong.com