Consumer Health Data Privacy Policy
This policy is written for Washington's My Health My Data Act and applies to everyone who uses Enforso, wherever they live. It covers only consumer health data: information that is linked to you and identifies your past, present or future physical or mental health. The Privacy Policy covers everything else we hold, and the two say the same thing where they overlap.
Enforso is provided by DOINGA LTD, a private company limited by shares registered in England and Wales (company number 17477068), whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom . Write to privacy@enforso.com about anything here.
The consumer health data we collect, and why
We collect it only to provide the service you asked for — to remind you on time and to keep the record of what you did — and only after you give your explicit consent on a screen of its own in the app.
Reminders
What: What you write into a reminder — its name, icon and colour, its schedule, the tags it is bound to, your vacations and your snoozes. A reminder's name may reveal health information, such as the name of a medicine, and we treat it as health data.
Why: This is the service: storing your reminders and sending them on time.
Who receives it: Our hosting provider and Apple.
History and scheduling state
What: When each reminder was due, and whether and when it was completed, missed or postponed — together with the scheduling state the service derives from that.
Why: To show your history, to decide what is due next, and to keep every one of your devices in agreement.
Who receives it: Our hosting provider.
Location triggers
What: The latitude, longitude, radius and place name of each location you choose to attach to a reminder. Your device decides when you arrive or leave; we do not receive your location as you move.
Why: To complete or fire a reminder when you arrive at or leave a place you chose.
Who receives it: Our hosting provider.
Health triggers
What: Which kind of Apple Health measurement — such as a blood-pressure reading or a workout — may complete a reminder. Only the kind: the measurement itself never leaves your device.
Why: To let a measurement you take complete a reminder.
Who receives it: Our hosting provider.
Service logs
What: For each request your device makes: the device and account it came from, the time, the address it called and how it ended. For a short time, the request and response themselves, with secrets masked — which can include reminder content. And the records the service keeps of what it did on your behalf.
Why: To diagnose delivery failures and to keep the service secure.
Who receives it: Our hosting provider and Sentry.
Where it comes from
- From you, in the app: what you write into a reminder, the places you choose, and each time you mark a reminder done, missed or postponed.
- From your device: when a reminder was due and completed, and — only if you turn it on — which kind of Apple Health event may complete a reminder. The measurement itself never leaves your device.
- From the person you care for, if you are a carer in Care: only the reminders that person chose to share with you.
We do not buy consumer health data and do not collect it from anyone else.
Who we share it with
- Companies that run the service for us, each named above against what it receives. They process it only on our instructions, for the purposes above.
- The person you choose, in Care. If you join someone's Care group, you decide, one reminder at a time, whether that person sees it. Each reminder starts unshared, and sharing is switched on only after a consent of its own. What they then see is described in the Privacy Policy; you can stop at any time with the reminder's switch, by leaving Care, or by deleting your account.
We have no affiliates that receive it. We do not sell consumer health data, we do not use it for advertising, and we do not set geofences around places where health care is provided.
Your rights
- To know and to access: whether we collect, share or sell your consumer health data, a copy of it, and the list of everyone it was shared with.
- To withdraw your consent to its collection and sharing. Switching off sharing on a reminder withdraws it for Care at once. Withdrawing the consent to collection is deleting your account: without it there is nothing the service may do with your reminders.
- To delete it: in the app, without writing to anyone (what deletion removes), or by writing to us. We pass the deletion on to the companies that process it for us.
Write to privacy@enforso.com from the address on your account, or with your device's identifier from the app, so that we can tell the request is yours. We answer within 30 days, free of charge for at least two requests a year. The Act allows 45 days; we answer sooner.
Appeals
If we refuse a request, you can appeal by replying to our answer or writing to privacy@enforso.com with “Appeal” in the subject. We answer an appeal within 45 days and explain the decision. If the appeal is refused, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint.
Changes
This policy carries a version and the date it applies from, shown at the top. We will not collect or share consumer health data for a new purpose without asking for your consent first.