Consumer health data privacy policy

We never sell your data. Never have, never will.

Washington’s My Health My Data Act and Nevada’s consumer health data law protect information about a person’s health, and both count sexual health. Much of what Middlepace will handle is that kind of information. This policy is written to those laws and applies to everyone, wherever you live. Until the program opens, this site collects none of it. The privacy policy covers the rest.

What counts as consumer health data here

Information linked to you that says something about your sexual health or your relationship around it. At Middlepace that means your private answers, your quiz answers, your check-ins, the days and things you pick, and the fact that you signed up for or bought the program.

What we collect

Your private answers about desire, how often you would want it, what you would try, and what gets in the way.
Your quiz answers, and how far you are through the readings.
Your check-ins after each scheduled day, and the days and things you pick.
That you signed up for, bought, or use Middlepace.
Which pages of this site you read.

Why we collect it

To give you the program, which means working out the middle, delivering each week’s reading or quiz, scheduling days, adjusting the number, and sending reminders.
To measure which ads and pages lead to signups and purchases.
To keep the site working and secure.

We collect only what those need. Nothing from inside the program is used for advertising.

Where it comes from

From you, when you answer, check in, sign up, or buy.
From your browser, when you visit.
From our payment processor, which tells us a payment went through.
From an advertising platform, as the click id in the link when you tap one of our ads.

We do not buy data about anyone.

Who we share it with

Service providers that run Middlepace for us, for things like hosting, security, text messages, payments, and error monitoring. Our text messaging provider is SOC 2 and ISO 27001 certified, and our payment processor is PCI DSS Level 1. They handle it only on our instructions. The texts never say what the program is about.

Advertising platforms, which are third parties. When someone signs up or buys, the platform learns that it happened, with technical details like the ad that brought them and their browser. That a purchase happened counts as health data under these laws, which is why it is listed here. With your consent, the platform also gets your email address, hashed, with your purchase.

Your private answers, check-ins, and picks go to nobody, your partner included. The program shows the two of you the middle, which is worked out from both sets of answers.

We never sell consumer health data. Never have, never will. If a valid legal order requires us to hand data over, we will tell you unless the law forbids it.

Collecting what the program needs in order to work is part of using it. Anything beyond that we ask for separately, before it happens, and never as a condition of buying. Today that is one thing, the box on its own line when you make your account, which lets us send your email address, hashed, to an advertising platform with your purchase. It stays unchecked unless you check it.

To withdraw consent, write to hello@middlepace.com. We stop at once. We cannot pull back what was already sent, but we will ask the platform to delete it.

Your rights

To know whether we collect, share, or sell your consumer health data, and to get a copy of it, with a list of every service provider and third party it went to and how to reach them.
To withdraw consent.
To have it deleted. We delete it from our systems and tell every service provider and third party we shared it with to delete it too.
To use any of these without being treated differently for it.

How to use them

Write to hello@middlepace.com and say what you want. We confirm it is you, usually with a code texted to the number on the account. We answer within 45 days, for free. If we need longer, we tell you why within those 45 days and take at most 45 more.

If we turn a request down, we say why. You can appeal by replying to that email, and we answer the appeal within 45 days. If we deny the appeal, you can complain to the Washington State Attorney General.

How long we keep it

Your answers, check-ins, and picks stay for as long as you keep your account, and are deleted within 30 days of a request. Visit records are deleted after 13 months. The privacy policy lists the rest.

Contact

hello@middlepace.com
Middlepace LLC, 1500 N Grant St, Ste N, Denver, CO 80203