Consumer Health Data Privacy Policy

Last updated: August 1, 2026

This Consumer Health Data Privacy Policy applies to this website and the related network of websites, applications, and products operated, owned, or managed by X Enterprises, LLC, a Limited Liability Company formed in Washington, United States ("X Enterprises," "we," "us," or "our"). It supplements our Privacy Policy and describes how we collect, use, and share "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373) and similar laws, including Nevada's consumer health data law (SB 370). To the extent of any conflict with our Privacy Policy regarding consumer health data, this policy controls.

What consumer health data means

"Consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. This can include, among other things: information about health conditions, symptoms, treatments, medications, or diagnoses; bodily functions and vital signs; sleep, fitness, nutrition, or wellness measurements; reproductive or sexual health information; and inferences about your health drawn from other information, including your interactions with health-related content.

Consumer health data we collect

We do not ask you to submit health information, and our websites do not require accounts to read content. However, the following information we collect may constitute consumer health data:

Content interaction data. If you browse health, wellness, sleep, fitness, nutrition, or supplement-related content on our websites, your page-visit and interaction data (collected through cookies and similar technologies described in our Cookie Policy) may be linkable to you (for example, through your IP address or device identifier) and could support inferences about your health interests.
Product data. Where one of our products involves sleep, wellness, or similar features, information you choose to provide through that product (such as usage patterns or preferences) may be consumer health data. Any such product will present its own consent flow before collecting it.
Communications. If you email us about a health-related topic, we receive the information you choose to include.

We collect this information directly from you and through the cookies and tracking technologies described in our Cookie Policy. We do not purchase consumer health data from third parties.

We collect and use consumer health data only: (a) to provide the content, products, and services you request; (b) for security, fraud prevention, and legal compliance; and (c) with your consent obtained through our cookie consent tool, for the analytics and advertising purposes described in our Cookie Policy. Where the Washington My Health My Data Act or a similar law requires consent to collect or share consumer health data beyond what is necessary to provide something you requested, we obtain that consent before collection or sharing.

We may share consumer health data with the following categories of third parties, for the purposes described above: data storage and hosting providers; data analytics providers; consent-management providers; advertising networks (only where you have consented through our cookie consent tool); application monitoring and error tracking providers; and customer management and support systems. We do not have affiliated companies with whom consumer health data is shared; if that changes, we will update this policy to identify them.

We do not sell consumer health data. We will not sell or offer to sell consumer health data without first obtaining the separate, signed valid authorization required by applicable law.

Geofencing

We do not use geofencing around any facility that provides in-person health care services, and we do not use geofencing to identify, track, or collect data from, or send notifications to, consumers regarding their health data.

Your rights

If you are a Washington or Nevada resident (or a resident of another state with a similar law), you have the right to:

Access — confirm whether we collect, share, or sell consumer health data about you, and access it, including a list of the third parties and affiliates with whom we have shared it and an email address or other means to contact them;
Withdraw consent — withdraw any consent you previously gave for the collection or sharing of your consumer health data (for cookie-based collection, you can do this at any time through the cookie consent tool on the applicable website);
Delete — request that we delete your consumer health data, including from our archives and backups in the ordinary course, and that we instruct our processors to do the same; and
Not be discriminated against for exercising any of these rights.

Exercising your rights and appeals

To exercise any of these rights, contact us at legal@x.enterprises with the subject line "Consumer Health Data Request," or write to us at X Enterprises, LLC, 18122 3rd Dr SE, Bothell, WA 98012, USA. We will need to verify your identity before acting on your request, and we will respond within the time required by applicable law (generally 45 days, extendable once by 45 days where reasonably necessary).

If we decline your request in whole or in part, we will explain why and how to appeal. You may appeal by replying to our response with "Appeal" in the subject line; we will respond to appeals within the time required by applicable law. If your appeal is unsuccessful, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint (Washington residents) or your state's attorney general.

Changes to this policy

We may update this Consumer Health Data Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.

Contact us

If you have any questions about this policy or our handling of consumer health data, please contact us at legal@x.enterprises.