Washington Consumer Health Data Privacy Notice

Effective October 4, 2026

This Notice supplements the OneThing Privacy Policy and addresses information covered by Washington's My Health My Data Act.

OneThing is not a medical provider and does not provide medical or mental-health treatment. However, because OneThing allows people to describe how they feel and what support they need, some information may qualify as consumer health data under Washington law.

Consumer health data we collect

Depending on your use, this may include:

• a mood or emotional state you select;
• text describing how you are doing or what happened;
• needs or support you request;
• relationship responses that reflect how an interaction affected you; and
• classifications or suggestions derived from that information that may reflect an emotional or mental-health state or need.

Sources

We may receive this information:

• directly from you;
• through a response your paired partner creates in connection with your interaction; or
• through information generated from the features you use, including optional AI-assisted processing.

Purposes

We use consumer health data as necessary to provide the OneThing service you request, including to:

• let you communicate how you are doing;
• help identify or communicate what you need;
• deliver a submitted check-in to your partner;
• allow your partner to respond;
• personalize the applicable experience;
• provide optional AI assistance;
• operate, diagnose, repair and secure the features you use; and
• respond to privacy requests.

At launch, we do not maintain a secondary corpus of check-in text for model training, secondary model evaluation or marketing.

Disclosures and processors

Submitted partner-facing check-ins are delivered to the paired partner you selected as part of the service.

Supabase processes consumer health data on our behalf as OneThing's database and backend provider.

Anthropic processes applicable mood and check-in information on our behalf when you have enabled AI assistance.

OneThing does not send the text you type in a check-in to Anthropic merely because you are typing it. A draft you abandon without invoking AI or submitting the check-in is not sent to Anthropic.

Under Washington law, disclosure to a processor acting consistently with the purpose for which the information was collected is excluded from statutory “sharing.”

OneThing does not sell consumer health data.

OneThing does not currently share consumer health data with advertisers or data brokers.

Your Washington rights

You may have the right to:

• confirm whether OneThing collects, shares or sells consumer health data concerning you;
• access consumer health data concerning you;
• obtain applicable information about recipients;
• withdraw consent for future processing where consent is the legal basis; and
• request deletion of consumer health data concerning you.

Requests may be sent to info@thebaregroup.com.

You may also use OneThing's in-app deletion function.

We will act without undue delay and generally within 45 days of receiving a request. Washington permits one additional 45-day extension when reasonably necessary and properly disclosed to the consumer.

Deletion from archived or backup systems may take longer where Washington law permits.

Appeals

If OneThing refuses to act on a Washington consumer-health-data request, send an appeal to info@thebaregroup.com with the subject Washington Privacy Appeal.

OneThing will respond in writing within 45 days. If an appeal is denied, the response will provide a method for contacting the Washington Attorney General.

Contact

The Bare Group, LLC
info@thebaregroup.com