Washington and Nevada Consumer Health Data Privacy Policy
Draft for review · reflect-2026-11-01-writing-2 · Not yet effective
This is the consumer health data privacy policy of A Moment To LLC, doing business as A Moment to Reflect (“Company”), for the A Moment to Reflect website and app (the “App”). The Washington My Health My Data Act and Nevada’s consumer health data law require it. It applies to Washington residents, to any person whose consumer health data the Company collects in Washington, and to Nevada consumers. It covers only consumer health data under those laws. For all other information, see the A Moment to Reflect Privacy policy.
1. Consumer health data we collect, and why
The Company collects the categories of consumer health data below, and uses each one only to provide the App to you:
Health information you include in a reflection request, such as an illness, symptom, treatment, or mental-health concern. Used to write the reflection and audio you request.
Health information in reflections you choose to save. Used to keep your saved collection available to you.
Health information you write in a private note on a saved reflection. Used to keep your note available to you. Notes are not sent to OpenAI.
Health information you include in a reflection report or support email. Used to review your report and respond to you.
The Company also uses this data to maintain, secure, and troubleshoot the App, and to comply with law. The Company processes this data by sending it to the service providers listed in section 4 to produce what you request, and by storing reflections and notes you choose to save in its database until you delete them or your account.
2. Where the data comes from
The Company collects this consumer health data directly from you. The Company does not buy consumer health data and does not collect it from data brokers.
3. Consumer health data we share
The Company shares the categories above only with the service providers that operate the App under contract, and only as needed for each one to perform its function. The Company does not sell consumer health data and will not sell it without your separate written authorization. The Company does not share consumer health data for advertising and uses no advertising SDKs, ad networks, data brokers, or tracking pixels.
4. Who receives consumer health data
Categories of third parties: service providers that host the App and store saved reflections, generate reflection text and audio, and receive support email.
Specific recipients: Cloudflare (hosting and storage), OpenAI (reflection text and audio), and Google Workspace (support email).
Affiliates: None.
No third party may collect your consumer health data over time and across different websites or online services through the App.
5. Your rights, and how to use them
You may ask the Company whether it collects, shares, or sells your consumer health data, to access that data, including a list of all third parties and affiliates that received it with an email address or other online contact for each, to delete it, and to withdraw your consent to its collection or sharing. To make any request, email privacy@amomenttoreflect.com. Nevada consumers may also ask the Company to stop collecting, sharing, or selling their consumer health data. The Company will respond within the time Washington or Nevada law allows. The Company will not deny you the core App service for exercising these rights.
If the Company denies a request, you may appeal by replying to that decision, and the Company will tell you the result of the appeal. If you disagree with the outcome, Washington residents may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint, and Nevada consumers may contact the Nevada Attorney General.
6. Consent
The Company collects and shares your consumer health data only with your consent or as Washington or Nevada law otherwise permits, and only for the purposes listed above. The Company will ask for your consent before collecting or sharing consumer health data for any purpose not listed here, and for a separate authorization before any sale.
7. Changes to this policy
The Company will post any update on this page with a new date. For a material change, the Company will email you and show a notice in the App before the change takes effect.
8. How to reach us
A Moment To LLC, doing business as A Moment to Reflect, Chicago, Illinois. Email privacy@amomenttoreflect.com.
Before writing a reflection, we also send the submitted request to OpenAI for an automated check for signs of immediate danger, including self-harm or a medical emergency. You consent to this processing in the account agreement before submitting requests. A detected danger displays a fixed support response instead of generating a reflection. This check can miss danger or misunderstand a request; it is not diagnosis, human monitoring, or an emergency service, and we do not contact emergency services on your behalf. We do not save the request or the check result in our database or application logs. A signed authorization lasting up to 10 minutes stays in page memory so the same request need not be checked again while you choose audio settings; it contains no request text. We retain daily attempt counts under our existing abuse-control practices. OpenAI response storage is disabled for these checks, but the provider retention practices described in this policy still apply.