Washington Consumer Health Data Privacy Policy

Last updated October 25, 2026

This policy explains how Duolicious handles consumer health data, as defined by Washington’s My Health My Data Act. Consumer health data is personal information that identifies your past, present or future physical or mental health. It includes biometric data, such as face imagery that can identify you. Our Privacy Policy explains how we handle the rest of your data.

Consumer Health Data We Collect

  1. Biometric data: your verification selfie and the profile photos we compare it with. We use them to check that your selfie shows you and to decide which verification badges you get.
  2. Q&A answers about your health, such as whether you’ve lived with a mental illness. We use them to recommend people to you and to let other members filter their searches by them, and other members can see the ones you answer publicly.
  3. Health details you add to your profile, such as whether you smoke, drink, use drugs or exercise, or anything about your health in your self-summary. We show them on your profile, and other members can filter their searches by some of them.
  4. Health information you include in messages. We deliver it to the people you message. Our automated tools check messages for content that breaks our rules, and we use past messages to train those tools.
  5. Health information in reports, when you report someone or someone reports you. We use reports to keep Duolicious safe and enforce our rules.

Where We Get It

  1. From you, when you take a verification selfie, answer questions, edit your profile or send messages
  2. From other members, when they message or report you

Who We Share It With

  1. Other members, when you show health information on your profile or send it in a message. If you make your profile public, anyone can see your profile.
  2. Service providers that process it for us, including cloud hosting providers and AI providers that help us verify selfies and moderate content. They can receive any of the categories above.
  3. Authorities, when the law requires it.

We don’t sell consumer health data.

Your Rights

You can ask us to:

  1. Confirm whether we collect, share or sell your consumer health data, and give you a copy of it, a list of the third parties we’ve shared it with and a way to contact them
  2. Stop collecting or sharing it, by withdrawing any consent you’ve given us
  3. Delete it

To make a request, email [email protected] from the email address on your account. We may ask for more information to confirm it’s you. We’ll respond within 45 days, or let you know within that time if we need up to 45 more days.

If we turn down your request, you can appeal by replying to our answer. We’ll respond to your appeal in writing within 45 days. If we turn down your appeal, you can complain to the Washington State Attorney General at www.atg.wa.gov/file-complaint.

We won’t discriminate against you for using these rights.