Meetville. Consumer Health Data Policy

We do not operate a health service, and we do not collect data for the purpose of identifying or making inferences about your past, present, or future physical or mental health status, diagnosis, condition, treatment, or medication. We do not provide medical, diagnostic, therapeutic, reproductive, or gender-affirming care services, and we do not knowingly collect medical records, insurance information, or clinical data.

However, "consumer health data" is defined broadly under certain state laws — including the Washington My Health My Data Act (RCW 19.373) and Nevada Senate Bill 370 (NRS 603A.400 et seq.) — and can extend to information that identifies a consumer's health status by inference, including information a consumer voluntarily publishes about themselves.

Because of that breadth, some of the information you choose to provide to us, or that is generated through your use of the Services, may be treated as consumer health data under those laws. We provide this Health Data Policy to describe our practices with respect to such data, without conceding that any particular category of data constitutes consumer health data in any given case.

The following categories of information, where you choose to provide them or where they are generated through your use of the Services, may be treated as consumer health data under applicable state law:

Information you voluntarily publish on your profile or share in the Services:

• Gender identity and gender expression, including information indicating that you are transgender or non-binary, which may be treated as information relating to gender-affirming care under Washington law;
• Sexual orientation and information concerning your sexual life, which may be treated as reproductive or sexual health information;
• Relationship intentions, including whether you are seeking a sexual relationship, and preferences concerning family planning or having children, which may be treated as reproductive health information;
• Information about pregnancy, parenthood, or family status;
• Lifestyle information you elect to display, including smoking, vaping, alcohol, cannabis or other substance use, dietary practices, and exercise or fitness habits;
• Physical characteristics you elect to display, including height, body type, and similar descriptors;
• Disability, medical condition, or health status that you choose to disclose in your profile text, photographs, or messages, including disclosures relating to mental health, neurodivergence, chronic illness, or HIV or other status;
• The content of your communications with other users, to the extent it contains any of the above.

Information generated through your use of the Services:

• Precise geolocation data, where you have granted permission, to the extent such data could indicate proximity to a facility providing healthcare services;
• Inferences we generate from your profile attributes, stated preferences, and interaction behavior for the purpose of recommending other users, to the extent any such inference could be characterized as relating to health;
• Support and moderation records, to the extent you disclose health-related information when contacting customer care, or when you submit or are the subject of a safety report.

Information we do not collect. We do not collect medical records, clinical diagnoses, prescription or medication data, health insurance information, biometric identifiers for health purposes, genetic data, laboratory or test results, information from healthcare providers, or data from health, fitness, fertility, or period-tracking applications. We do not purchase consumer health data from data brokers. We do not process health data on behalf of any healthcare provider or health plan.

Information described in Section 2 is collected from the following sources:

• Directly from you, when you register, complete or edit your profile, upload photographs or videos, answer profile prompts, communicate with other users, participate in surveys or research, or contact customer care;
• Automatically from your device, in the case of approximate location derived from IP address and, where you have granted permission, precise geolocation;
• From other users, where another user submits a report or query concerning you that contains such information;
• From social authentication providers, where you elect to register or sign in using a third-party account and authorize the sharing of profile attributes; and
• By inference, where we derive recommendations or signals from the information above.

We do not obtain consumer health data from data brokers, healthcare providers, health plans, advertising networks, or public health sources.

Like other information we collect, the primary reason we use this information is to provide the Services to you and to help you connect with other users. Specifically, we use it to:

• Create, display, and maintain your profile as you have configured it;
• Recommend other users to you and recommend you to other users, based on your stated preferences and those of others;
• Enable search and discovery functionality, including filters you apply;
• Enable communication between you and other users;
• Operate safety, moderation, anti-fraud, and anti-abuse systems, including investigating reports and enforcing our Acceptable Use Policy;
• Provide customer support and respond to your requests;
• Comply with legal obligations, and establish, exercise, or defend legal claims; and
• Maintain the security and integrity of the Services.

We do not use consumer health data to serve you targeted advertising. As stated in our Cookie Policy, we do not use profile attributes that may constitute sensitive or health-related data — including sexual orientation, sexual life, gender identity, or health status — to target advertising to you, and we do not disclose such attributes to advertising partners for targeting purposes.

We do not use consumer health data to train publicly available artificial intelligence models, and we do not sell or license it for that purpose. Our use of automated systems is limited to the operational purposes described above and is further described in Section 14 of our Privacy Policy.

Basis for collection. Where required by applicable law, we collect consumer health data either (i) as necessary to provide a product or service that you have requested from us, or (ii) with your consent. Where we rely on consent, that consent is obtained separately from any other terms, is specific to the purposes described in this Section, and may be withdrawn at any time as described in Section 11.

We may share information that may be treated as consumer health data with the following categories of third parties, only where necessary for the purposes described in Section 4:

Other users. You share information with other users when you voluntarily disclose it on the Services for others to see — for example, on your public profile or in messages you send. Information you publish on your profile is visible to other users, and once you have shared it, neither you nor Meetville can control what a recipient does with it.

Service providers. We share information with vendors who help us operate the Services, including data hosting and maintenance, content delivery, customer care, content moderation, identity and age verification, fraud prevention, error monitoring, and security operations. These vendors are contractually bound to process the information only on our documented instructions and for the specified purpose.

Affiliates. We may share information with affiliates who assist us in data processing operations as service providers. This assistance may include data hosting and maintenance, customer care, data security, and combating spam, abuse, fraud, and other wrongdoing.

Parties to a corporate transaction. We may disclose your information if we are involved, in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control.

Law enforcement authorities and legal process. We may disclose your data to: (i) comply with legal process, such as a court order, subpoena, search warrant, government or law enforcement investigation, or other legal requirement; (ii) assist in the prevention or detection of crime; (iii) protect the safety of any person; and (iv) establish, exercise, or defend legal claims.

Where a specific disclosure requires your consent under applicable law, we will obtain that consent separately before making the disclosure. Consent to collection does not constitute consent to sharing.

We do not disclose consumer health data to advertising networks, data brokers, analytics partners for advertising purposes, or any third party for that party's own independent commercial purposes.

Sequoia Network, Inc. does not sell consumer health data, and has no plans to do so.

We do not exchange consumer health data for monetary or other valuable consideration. Accordingly, we do not obtain, and do not require, the separate signed valid authorization that the Washington My Health My Data Act requires before any sale of consumer health data may occur.

If this practice ever changes, we will update this Health Data Policy, provide notice, and obtain a valid authorization meeting all statutory requirements — including a separate signed document specifying the data to be sold, the purchaser, the purpose, and your right to revoke — before any sale takes place. No sale will occur on the basis of this Health Data Policy alone, or on the basis of your continued use of the Services.

Access to information that may constitute consumer health data is restricted to personnel who require it to perform their job functions, under role-based access controls implementing the principle of least privilege. The categories of personnel and contractors who may have such access are:

• Trust and safety and moderation personnel, in order to review reported content and conduct, investigate safety incidents, and enforce the Acceptable Use Policy;
• Customer care personnel, in order to respond to your inquiries and requests;
• Engineering and infrastructure personnel, in order to operate, maintain, secure, and troubleshoot the Services;
• Security and fraud prevention personnel, in order to detect and respond to abuse, fraud, and security incidents;
• Privacy and legal personnel, in order to process rights requests, respond to legal process, and establish, exercise, or defend legal claims; and
• Contractors and service providers performing the functions listed in Section 5, subject to contractual confidentiality and data protection obligations.

All personnel and contractors with such access are bound by confidentiality obligations and receive training appropriate to their role. Access is reviewed periodically and revoked upon role change or departure.

Product, marketing, analytics, and advertising personnel do not have access to consumer health data in identifiable form.

We do not implement, operate, or permit any geofence around any facility that provides in-person healthcare services — including hospitals, clinics, reproductive health facilities, gender-affirming care providers, mental health or substance use treatment facilities, or pharmacies — for the purpose of identifying or tracking consumers seeking healthcare services, collecting consumer health data, or sending notifications, messages, or advertisements relating to consumer health data or healthcare services.

Where you have granted location permission, precise geolocation is used solely to show you other users near you, calculate distance between users, and enable location-dependent features, as described in our Privacy Policy. You may revoke location permission at any time through your device settings.

Information that may constitute consumer health data is retained in accordance with the retention provisions of our Privacy Policy, and no longer than necessary for the purposes described in Section 4.

In summary:

• Profile information is retained while your account is active. Information you remove from your profile ceases to be displayed immediately, and is deleted or anonymized following account deletion and expiry of the applicable safety retention window;
• Following account deletion, a safety retention window of six (6) months applies, extended to twelve (12) months where an account was closed following a ban;
• Messages and communications are deleted or anonymized following account deletion and expiry of the safety retention window, subject to the fact that messages you sent to another user form part of that user's conversation history;
• Moderation and enforcement records are retained for two (2) years following the enforcement action; and
• Precise geolocation is not retained beyond what is necessary to operate the location-dependent feature for which it was collected.

Longer retention applies only where required by law, where necessary to establish, exercise, or defend legal claims, or where necessary to protect the vital interests or safety of any person, as set out in Section 9.5 of our Privacy Policy.

We apply the technical, administrative, and physical safeguards described in Section 8 of our Privacy Policy to information that may constitute consumer health data, including encryption in transit and at rest, role-based access controls, audit logging, and network monitoring.

No system is completely secure, and we cannot guarantee absolute security. If you believe your account or information is no longer secure, contact us immediately at [email protected].

If you are a resident of Washington, Nevada, or another state whose consumer health data law applies to you, you have the following rights with respect to consumer health data:

Right to know and to access. You have the right to confirm whether we are collecting, sharing, or selling your consumer health data, and to access such data, including a list of all third parties and affiliates with whom we have shared it, together with contact information for each such third party.

Right to withdraw consent. You have the right to withdraw your consent to the collection and to the sharing of your consumer health data. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Right to delete. You have the right to request deletion of your consumer health data. Upon receiving a verified deletion request, we will delete the data from our records, including from archived and backup systems in accordance with our backup rotation schedule, and we will notify all affiliates, processors, contractors, and other third parties with whom we have shared the data of the deletion request and instruct them to delete it.

Right of non-discrimination. We will not discriminate against you, deny you goods or services, charge you a different price, or provide a different level or quality of service because you exercised any of these rights.

Limits on deletion. We may decline a deletion request, in whole or in part, only where retention is required by law, where the data is necessary to establish, exercise, or defend legal claims, where deletion would prevent us from detecting or investigating fraud or safety violations, or where the data also constitutes another user's personal data and deletion would infringe that user's rights. Where we decline in part, we will delete everything we are able to delete and explain the basis for any retention.

Note on deletion and account closure. Because much of the information described in Section 2 is contained in your profile and communications, deleting your account will result in the deletion of that information in accordance with Section 9. You may also delete specific profile fields at any time without deleting your account.

These rights are in addition to, and do not replace, the rights described in Section 10 of our Privacy Policy.

Submit your request by email to: [email protected]

Suggested subject line: "Consumer Health Data Request."

Please include:

• Your full name and, where applicable, your username;
• The email address or telephone number associated with your account;
• Your state of residence;
• The specific right you wish to exercise; and
• Sufficient detail for us to locate your information.

Verification. For your protection and that of other users, we may ask you to provide information sufficient to verify your identity before we respond. We will not use information provided for verification for any other purpose.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's authorization and verification of your identity.

Response times. We will respond within forty-five (45) days of receipt of your request. Where reasonably necessary, we may extend this period by an additional forty-five (45) days, and we will notify you of the extension and the reason for it within the initial forty-five-day period.

No fee. We do not charge a fee for responding to requests, except where a request is manifestly unfounded or excessive, in which case we will explain the basis before proceeding.

If we decline to act on your request, you may appeal. Send your appeal to [email protected] with the subject line "Consumer Health Data Appeal", within a reasonable period after receiving our decision, and include the original request and the basis on which you believe our decision was incorrect.

We will respond in writing within forty-five (45) days of receipt of the appeal, setting out the action taken or not taken, together with a written explanation of the reasons.

If your appeal is denied, we will provide you with a method for contacting the Attorney General of your state to submit a complaint.

Washington residents. The Washington My Health My Data Act is enforceable by the Washington State Attorney General under the Washington Consumer Protection Act, and also provides a private right of action, meaning you may be able to bring a claim directly. You may submit a complaint to the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.

Nevada residents. Nevada's consumer health data law is enforced by the Nevada Attorney General. You may submit a complaint at https://ag.nv.gov/Complaints/File_Complaint/.

Direct contact encouraged. Before submitting a regulatory complaint or commencing proceedings, we encourage you to contact us at [email protected] so that we may attempt to resolve your concern directly.

Note on dispute resolution. The dispute resolution provisions of our Terms of Use do not limit any right or remedy available to you under an applicable consumer health data law, including any private right of action, and do not require you to arbitrate any such claim.

We may update this Health Data Policy from time to time. When we do, we will revise the "Last Updated" date above.

We will not collect, use, share, or sell consumer health data for any purpose materially different from those described in this Health Data Policy without first obtaining your affirmative consent, separately from any other terms. Continued use of the Services does not constitute consent to a materially different purpose.

For material changes, we will provide notice to the email address associated with your account at least thirty (30) days before the change takes effect, where feasible, together with conspicuous notice within the Services.

Email: [email protected]

Legal Entity: Sequoia Network, Inc. Registered Address: 1470 Civic Ct Ste 309, Concord, CA 94520-5230 Incorporation: Delaware, United States Website: https://meetville.com

Data Protection Officer: reachable at [email protected].

Response time: We acknowledge inquiries within ten (10) business days and respond substantively within the timeframes set out in Sections 12 and 13.

Related documents: This Health Data Policy supplements the Meetville Privacy Policy and should be read together with our Cookie Policy, Acceptable Use Policy, and Terms of Use.