Moth

Washington Consumer Health Data Privacy Policy

Effective September 26, 2026

This is Moth Self Care LLC's consumer health data privacy policy under Washington's My Health My Data Act. It applies to consumers covered by that law.

Categories collected and purposes

Depending on how you use Moth and what you choose to write or do, Moth may collect the following categories of consumer health data for the purposes described here:

• reflections, Memory Jar entries, quest responses, and quest history that contain information about mood, stress, sleep, body image, health, wellness, relaxation, or similar topics, to provide the reflection, writing, history, and other self-care features you choose to use;
• custom affirmations and custom quests containing comparable information, to provide the customization and self-care features you choose to use;
• category choices, reading or interaction information, and personalization signals that reveal health or wellness interests, to provide personalization, progress, and other requested app features;
• account-linked progress or usage context when it reveals or is associated with health or wellness information, to provide requested account continuity, progress, and app features;
• private self-care content that you choose to place in optional cloud backup, to provide backup, synchronization, and restoration after you separately enable that feature; and
• health or wellness information you choose to include in a support or privacy request, to respond to that request.

Sources

Moth receives consumer health data directly from you when you write, choose, save, respond to, or interact with Moth features. Moth may also derive limited app context from those interactions when needed to provide the feature you requested. Moth does not currently obtain consumer health data from data brokers or external health-record services.

Categories shared and recipients

The category of consumer health data Moth may share under the Washington My Health My Data Act is content that you intentionally choose to send through your device's sharing feature when that selected content contains consumer health data.

The category of third parties that may receive that shared data is the third-party app or service that you select through your device's sharing feature.

Moth does not currently have any affiliate with whom it shares consumer health data. Moth does not currently share any other category of consumer health data with third parties or affiliates as those terms are used in the Washington My Health My Data Act.

Your Washington rights

You may ask Moth to:

• confirm whether Moth is collecting, sharing, or selling consumer health data concerning you and provide access to that data, including the information about third parties and affiliates required by Washington law;
• withdraw consent from future collection or sharing of consumer health data where Moth relies on consent; and
• delete consumer health data concerning you.

To exercise a Washington consumer-health right, email support@mothselfcare.com with the subject Washington Consumer Health Data Request and tell us which right you want to exercise. If the request concerns an existing Moth account, include the email address associated with the account or another identifier needed to locate it. Please do not send the text of a private reflection, diagnosis, symptom, or other health detail just to verify your identity.

Moth may take commercially reasonable steps to authenticate the request. Moth will not require you to create a new account to exercise these rights, although Moth may require you to use an existing account when appropriate. If you are signed in and want to delete your Moth account and associated cloud data, you may also use Moth's authenticated Delete Account control.

Moth responds to authenticated Washington consumer-health requests without undue delay and within 45 days of receipt. When reasonably necessary, Moth may extend that period once by up to 45 additional days and will tell you within the initial period why the extension is needed. Information supplied in response to a request is free up to twice annually, subject to the limits Washington law allows for manifestly unfounded, excessive, or repetitive requests.

For a deletion request, Moth deletes responsive consumer health data from Moth-controlled records and notifies applicable affiliates, processors, contractors, and other third parties as required by Washington law. If responsive data is stored in an archived or backup system, deletion may be delayed only as allowed by Washington law and not beyond six months from authentication of the request.

If Moth refuses to act on your request, you may appeal by emailing support@mothselfcare.com with the subject Washington Consumer Health Data Appeal and briefly identifying the earlier request. Moth will respond to the appeal in writing within 45 days. If an appeal is denied, Moth will provide a way to contact the Washington Attorney General; you can also use the Attorney General's consumer complaint process.