Consumer Health Data Privacy Policy

This policy applies to consumer health data that Oles Didukh, trading as Etappi collects through the Etappi website and apps. It supplements our Privacy Policy.

Mental-health information you enter: mood check-ins, emotions and triggers, GAD-7 and PHQ-9 answers and scores, thought records, worries, plans, exposure practice, journal entries, coping cards and your safety plan.

Information that could reveal you use a mental-health app: your account and the fact that you have one.

We use this data only to provide the app's features to you: saving entries, showing your history, recommending a next step and building summaries you choose to share.

Feedback you choose to send: the text you type may include health information if you choose to write it. We use it only to fix and improve the app. It is linked to your account, included in your data export and deleted with your account, and the beta join date, if you join the private beta, is cleared when you leave it or delete your account.

Usage analytics, only if you opt in: which screens and tools you open and finish, with the app version, platform and a random identifier for your device, linked to your account while you are signed in. It also records account steps such as signing up, finishing onboarding and giving health-data consent, including the dates of a sign-up or onboarding that happened before you opted in. This data is pseudonymous, not tied to your name or email address but linkable to your account. It never includes what you write, your mood ratings or your questionnaire answers. It is first-party: kept in our own database, and no analytics company receives it. We use it only to see which parts of the app get used and to find bugs. You can turn it off at any time in Settings (Usage data and crash reports); turning it off deletes the usage analytics we hold for you.

Crash reports, only if you opt in on your device: the error type, a shortened message with identifiers and email addresses masked, the code location, the page you were on and your recent navigation and network steps (page or API paths with identifiers removed, request method and status code), your device's language and time zone setting, and coarse device details such as device model and operating system. Error reports from our servers are de-identified: the error type, the masked message, the code location, the page or API path with identifiers removed, the request method and the name of the server function that failed, with no account identifier, IP address, request content or entries.

Directly from you, when you type or select it in the app. We do not buy or receive health data from anyone else.

We share it only with processors that store and serve it on our behalf: Supabase (database), Vercel (hosting), Sentry (crash reports; stored in the EU), Resend (transactional email: trial reminders). They may not use it for their own purposes. Resend receives your email address with the reminder, which reveals that you have an Etappi account.

Paddle.com, our reseller for web purchases, learns that you bought a plan for Etappi, a self-help app, and receives your account identifier with the purchase. Paddle uses checkout data under its own privacy notice.

We share it with anyone else only if you do so yourself (for example, by printing or sharing your two-week summary), or if the law requires it.

We do not sell consumer health data, and we do not use or share it for advertising.

Confirm and access: Settings → Export my data downloads everything we hold. Delete: Settings → Delete my account erases it. Withdraw consent: Settings → Withdraw health-data consent.

You can also email privacy@etappi.app. We respond within 45 days. If we decline a request you may appeal by replying to our answer; if the appeal is denied you may contact the Washington State Attorney General.

Until you delete it or your account. Account deletion erases your entries immediately. They can remain in our database provider's encrypted backups for up to 7 days, which we use only to recover from a failure. When you delete your account we keep only its random account identifier for 14 days in a separate log, so that if we ever restore a backup we can delete your account again.

Sentry deletes crash reports after at most 90 days.

Usage analytics is kept for up to 13 months and then deleted automatically. Turning it off, withdrawing health-data consent or deleting your account deletes the usage analytics we hold for you.

privacy@etappi.app