Consumer health data privacy policy

How the Exhibit Log app handles health information.

This policy is written for the state consumer health data laws of Washington (RCW 19.373), Nevada (NRS 603A.400 to 603A.550), Connecticut (Conn. Gen. Stat. 42-515 et seq.) and Virginia (Va. Code 59.1-200, reproductive and sexual health). It sits alongside the privacy policy.

Sealed on your device

What you type and your labels are sealed on your device with your passphrase (AES-256) before they are saved. Exhibit Log stores the sealed text but cannot read it, and cannot reset your passphrase. Your recovery code is the only other way in. Because the sealed text is still stored, Exhibit Log treats it as health information it collects.

What Exhibit Log keeps

1. What you type, sealed: links, accounts, dates, what happened, labels, the rules you pick and the reports you log. This may include health information, such as physical or mental health, reproductive or sexual health, or details about intimate images.
2. For each file: its size, type, SHA-256 fingerprint, timestamp and your label (sealed). Not the file’s name. The file itself only if you choose sealed copies, and then only locked on your device first, so Exhibit Log cannot open it.
3. A change log of every change, stored as fingerprints, not words.
4. Your email address, to send sign-in codes.

What Exhibit Log never collects

1. Your photos and videos in a form anyone else can open. Your files stay on your device unless you choose sealed copies, which are locked on your device first.
2. Your location, contacts or biometric data.
3. Advertising or analytics trackers. There are none in the app.

Why

Only to keep your record and to build the packets and bundles you download. Text in your files is read on your device, never by a server.

Who receives it

1. Supabase stores what you type, sealed, and any sealed copies you choose to keep, as Exhibit Log’s database provider, under contract. It cannot read or open them either.
2. Resend sends sign-in codes and receives your email address only.
3. FreeTSA and DigiCert receive fingerprints only, to timestamp them.
4. Vercel hosts the app’s code. What you type goes from your device to the database, not through Vercel.

Exhibit Log does not sell health information and does not share it with anyone else.

Consent

Exhibit Log asks for your consent to collect health information before you start, separately from anything else. You can withdraw it at any time in Settings.

Your rights

1. See everything: download the originals bundle from Packet. Its manifest holds everything you typed and everything Exhibit Log recorded.
2. Delete everything: Settings, Delete my account. It is removed from the live database at once. Copies in the database provider’s automatic backups are deleted when those backups expire.
3. Questions, requests and appeals: privacy@exhibitlog.com. Answered within 45 days.

Security

Sealed on your device, and encrypted in transit. Only people who know the passphrase can read the record: you, and colleagues you share a firm passphrase with. Staff access is limited to what is needed and covered by a duty of confidentiality.