Consumer Health Data Privacy Policy

Last updated: 8 October 2026

This policy is for people in US states with consumer health data laws, such as Washington (My Health My Data Act), Nevada and Connecticut. It explains what consumer health data STI collects, why, who it’s shared with, how long we keep it, and how to use your rights. It adds to our Privacy Policy, which covers everything else.

STI plans to launch in the European Union and the European Economic Area first. This policy applies to anyone these state laws protect who uses STI, and it will apply in the same way once STI is available in the United States.

STI is run by Replee (sole proprietorship, owner: Seungheon Lee), [business address: street and number, postcode city], Germany. Contact: admin@sti-health.com.

The consumer health data we collect, and why

Test results you upload, and what’s on them: your name, date of birth, test date, the tests and their results, and the clinic or lab. Why: to check that a result is genuine, yours and recent.
What our reviewer records from an approved result: for each infection the lab tested (HIV, syphilis, chlamydia, gonorrhoea, hepatitis B, hepatitis C, herpes, Mycoplasma genitalium, trichomoniasis, HPV), negative or positive; for a positive one, whether it’s managed (for HIV, only with a lab-confirmed undetectable viral load), treated (with the date of a negative test of cure) or not yet. Why: so your card can say exactly what a checked result found.
Your verified status and test date, which we work out from approved results — “Verified”, or “Verified · managed”, “Verified · treated” or “Verified · positive result” if a result isn’t all negative. Why: to show it on your card for 90 days from the test.
Which infections you name on your card, only if you choose to, with a separate consent. Why: to show them to people who have your card.
Whether you take PrEP, if you choose to add it. Why: to show it on your card.
Information that can reveal your sexual health or sex life: that you have an STI account, your card, whose cards you have and who has yours, your likes, the cookies you send and receive, your matches, whether you’re in Discover, messages, reports, blocks and check-ins. Why: to run STI.
Your approximate location, only if you turn on distance (Discover turns it on). Why: to show roughly how far away people in your deck are, in whole kilometres, and — only if you turn on Discover — to work out who is within about 50 km of you and show a coarser distance there, in 5 km steps, worked out from areas of about 5 by 5 km. We never use it to find out whether you visited a clinic or any other place, and we never set up geofences.

We collect consumer health data only with your consent, given in the app — a separate box that you tick yourself for each purpose — or as needed to provide the features you ask for. We never use it for advertising, we never sell it, and we don’t use AI to read or check it.

Where it comes from

From you: your uploads, your card, your choices in the app.
From your phone: your approximate location, if you turn distance on.
From our review: the decision, your test date and what was found for each infection tested, which a person on our review team works out from your result.

What we share, and with whom

We share consumer health data only with your separate consent — the “Show my status to people I share my card with or send a cookie to” box (which covers “managed”, “treated” or “positive result” only if given to the documents of 8 October 2026 or later), the separate “I agree that my card names the conditions I choose” box for naming an infection, and, for Discover, the separate “Show me to people near me in Discover” box and, for your status there, the separate optional “Also show my verified status to people in Discover” box — or as needed to provide what you ask for:

Your verified status, test date and PrEP answer: with people who scan your card code, people you share your card with — including by sending them a cookie — your matches, Apple Wallet on your phone if you add your card to it (once that’s available) and, only if you’re in Discover and have also ticked “Also show my verified status to people in Discover”, other STI users in Discover within about 50 km of you — only plain “Verified”: while a result isn’t all negative, Discover shows no status for you, and never an infection. Without that box, people in Discover see your card without your status.
The infections you choose to name: only with people who have your card (people who scan your code, people you share your card with or send a cookie to, your matches) — never in Discover, never on a Wallet pass. Turn a name off, or withdraw that consent, in Settings → Privacy: it comes off your card and off every copy people keep, straight away. You can switch it off at any time in Settings → Show my status in Discover; it stops straight away, and leaving Discover or withdrawing your health consent switches it off too.
Our service providers (processors), who may process it only on our instructions — listed below.

Our service providers:

Supabase — hosting, storage and server functions (stored in the EU, Ireland).
Cloudflare — runs our reviewers’ console and carries your sealed upload, your card’s name and age and your first card photo to the reviewer’s browser, without storing them; it can’t open the sealed upload.
Google Workspace — our email, including the emails with your sign-in codes, and anything you email us about your health data.
GitHub — encrypted backups of our database, which it can’t read (USA).

Apple (notifications, Sign in with Apple, purchases, and Apple Wallet if you add your card to it) and Google (Google Sign-In) receive what you use of theirs under their own privacy policies. Apart from a Wallet pass you add yourself, they don’t get your status, test date or PrEP answer, and our notifications never name anyone or say anything about your health. No AI provider receives anything from STI. We have no affiliates, and we don’t share consumer health data with anyone else.

How long we keep it

Uploaded result files: deleted 30 days after the review decision, or 30 days after the upload if there’s no decision.
A result that isn’t approved: the file and the whole record are deleted 30 days after the decision.
An approved result: the reviewer’s checks, notes and reasons, and any message to you, are deleted after 30 days; that it was approved, the test date, what was recorded for each infection tested and the dates stay until you withdraw your consent or delete your account. If a later result of yours is declined because it can’t be verified or looks edited, the earlier approval stops counting at once and is deleted 30 days later.
Location: deleted when you switch distance off, and after 14 days without an update.
Everything else in your account: until you delete it or your account — or until we delete an account that hasn’t been used for 24 months.
Backups: deleted after 30 days.

The Privacy Policy lists every time limit, including the few things kept for a limited time after an account is deleted.

Your rights

Confirm and access: ask whether we collect, share or sell your consumer health data, and get a copy of it, with a list of all third parties and affiliates we’ve shared it with and how to contact them. Settings → Privacy → Download my data gives you a copy in the app.
Withdraw consent: in Settings → Privacy — this deletes your uploads, what was recorded from them, your status and PrEP answer, and un-names anything named on your card — or by deleting your account. To stop naming infections only, turn the names off or withdraw that consent in Settings → Privacy → What your card says about your result. To stop showing your status in Discover only, switch off Settings → Show my status in Discover.
Delete: in Settings → Delete account, which deletes everything straight away. We also tell our processors to delete it. Backups are deleted after 30 days, and if we ever have to restore one, we delete your data again first.
Appeal: if we turn down your request, reply to our answer. Someone who wasn’t involved in the first answer reviews it and answers within 45 days. If you’re still unhappy, you can contact your state’s Attorney General — in Washington, at atg.wa.gov/file-complaint.
No discrimination for using your rights.

How: in the app, or email admin@sti-health.com from the email address you sign in with. We answer within 45 days. If we need more time, we’ll tell you why and answer within another 45 days at most. Requests are free, up to twice a year. If we can’t confirm it’s you, we may ask a question to check.

Sale

We don’t sell consumer health data, and we never will without your separate, signed authorization as the law requires.

Changes

If we change this policy, we update the date above, tell you in the app, and ask for your consent again before any new collection or sharing.