Legal

Washington Consumer Health Data Privacy Policy

Privacy · Terms · Washington Health Data Privacy

Version 1.0 — Effective August 23, 2026

1. Scope

This policy supplements the Potty Watch Tracker Privacy Policy for Washington consumers and consumer health data subject to chapter 19.373 RCW, the Washington My Health My Data Act. It is maintained by the developer identified as the Seller on Potty Watch Tracker's App Store product page ("Potty Watch," "we," "us," or "our").

Potty Watch is used by an adult caregiver, but its bathroom records concern a child. A request concerning the child's data must be made by the child where legally capable or by a person legally authorized to act on the child's behalf. We authenticate the requester and may request information reasonably necessary to verify that authority.

2. Categories of consumer health data collected

Potty Watch collects the following categories of consumer health data when an authorized adult enters or generates them:

• bathroom-event timing and whether an event involved pee, poop, or both;
• toilet or accident outcome;
• optional accident details, including amount or type category, contents, and caregiver-selected likely reason;
• prompt source, including whether the physical watch, child, or caregiver prompted the visit;
• physical-watch intervals and changes;
• caregiver notes that may contain health information;
• a free-text feedback message only if a caregiver includes consumer health information despite the app's warning and automated filters;
• counts, summaries, observed-day information, and app-generated pattern or checkpoint text derived from entered records; and
• identifiers that link those records to an app account, installation, caregiver group, caregiver attribution, or subscription entitlement.

Older versions may have stored legacy care-event, medication, massage, stool-detail, or phone-timer values. Current interfaces do not create new care or medication records, but a legacy value remains consumer health data while retained.

3. Purposes for collection and use

We collect and use consumer health data only to:

• save, display, edit, delete, synchronize, and export bathroom records;
• provide history, counts, progress summaries, and physical-watch setting context;
• coordinate authorized caregivers in one household;
• maintain account, installation, family, and subscription access;
• secure the Service, prevent abuse, resolve interrupted requests, and troubleshoot operation;
• evaluate submitted product feedback and improve the app, without using bathroom records or feedback for advertising or general-purpose AI training;
• complete access, withdrawal, deletion, and appeal requests; and
• comply with law or establish, exercise, or defend legal claims.

We do not use consumer health data for advertising, cross-context behavioral advertising, marketing, data brokerage, credit, insurance, employment, research, or training a general-purpose artificial-intelligence model.

4. Sources of consumer health data

The categories of sources are:

• adult caregivers who enter or edit records, notes, or in-app feedback;
• other authorized caregivers in the same caregiver group;
• the app and Service, which generate counts, summaries, timer history, sync metadata, and security records from caregiver-entered data; and
• legacy app records retained from earlier versions.

Apple provides subscription entitlement information, not bathroom records. Potty Watch does not import health records from a clinician, HealthKit, or iCloud.

5. Consumer health data disclosed and recipients

Creating a caregiver group enables shared access for its creator. An invited caregiver gains access only after entering the group's six-digit code and confirming Join in the app. Authorized caregivers in the same caregiver group can then access existing and future bathroom records, notes, caregiver attribution, timer history, and derived summaries. Each caregiver can add, edit, delete, and export shared records according to their authorization.

Our service providers process the categories listed in section 2 only to operate, secure, support, and synchronize the Service under Potty Watch's instructions. Washington law excludes a service-provider disclosure that is consistent with the requested service from the statutory definition of "sharing," but we disclose it here for transparency.

Potty Watch does not share consumer health data with a third party or affiliate as those terms are defined in chapter 19.373 RCW. We have no affiliates that receive consumer health data. We do not send bathroom records or notes to Apple for billing. We do not sell consumer health data.

If this recipient list or the categories disclosed change, we will update this policy and obtain prior consent when required.

6. Your rights

Subject to applicable law, you may:

• confirm whether we collect, share, or sell consumer health data within the scope of the request;
• access that data;
• receive a list of third parties and affiliates, if any, with whom it was shared or sold and a way to contact them;
• withdraw consent from future collection or sharing;
• delete consumer health data; and
• appeal a refusal to act on a request.

Potty Watch does not sell consumer health data, so there is no sale authorization to revoke.

7. How to exercise rights

Use the available Privacy & Account controls for self-service export, individual-record deletion, consent withdrawal, or caregiver-account deletion. For any other request, including one covering all records concerning the child, email support@pottywatchtracker.com with the subject "Washington Health Data Request." State whether the request concerns the adult caregiver's information, caregiver-account deletion, or all records concerning the child. For an appeal, use the subject "Washington Health Data Appeal."

We use reasonable methods to authenticate that the request is made by or on behalf of the consumer entitled to exercise the right. We may request additional information reasonably necessary to authenticate the identity and authority of the requester. We will not require creation of a new account solely to submit a request.

We respond without undue delay and ordinarily within 45 days of receipt. When reasonably necessary because of request complexity or volume, we may extend once for up to 45 additional days and will explain the extension within the first 45 days. Responses are free up to twice each year unless a request is manifestly unfounded, excessive, or repetitive as permitted by law.

If we refuse a request, we will explain the decision and provide an appeal route. We respond to an appeal within 45 days. If an appeal is denied, we provide a way to contact the Washington Attorney General at https://www.atg.wa.gov/file-complaint.

8. Deletion

Caregiver-account deletion removes the requesting caregiver's cloud identity, in-app feedback, and attributed records from active app tables, but it is not necessarily a request to delete every record concerning the child. Records entered by other caregivers may remain only when another active caregiver keeps the family, and timer history may remain without caregiver attribution, unless the authenticated request covers the child's consumer health data. In-app feedback is otherwise removed at 365 days by a daily job, normally within approximately 365 to 366 days, or earlier where a verified deletion right requires it.

When an authenticated caregiver deletes an individual bathroom record, Potty Watch temporarily keeps a private integrity receipt containing the caregiver's app-account identifier, the deleted record's random event identifier, and the deletion time. It does not contain the bathroom outcome, event time, notes, child or family identifier, caregiver name, or device identifier. The caregiver account link is scheduled for removal after 90 days by a daily retention job, normally within approximately 91 days, or immediately when that caregiver account is deleted. The random event identifier remains without that link only until the daily retention job removes it less than six months after the original record deletion. This limited processing confirms interrupted retries and prevents offline or restored local data from recreating the deleted record.

For an authenticated whole-child request made by a person authorized to act for the child, we delete consumer health data concerning the child from our network within the scope required by law and notify processors, contractors, and other recipients that must honor the request. Data that remains linked or reasonably linkable to the child or family is not treated as deidentified merely because caregiver attribution is removed.

If consumer health data is stored in an archived or backup system, deletion may be delayed only to support restoration and will be completed no later than six months after authentication of the request. A restored system must have completed deletion requests reapplied before it is returned to service.

9. Withdrawing consent

Use Withdraw Health Data Consent in Privacy & Account to stop future collection, or email the address above. To end a caregiver's shared access, leave the caregiver group or remove that caregiver in the app. These changes take effect after the server confirms them.

After collection consent is withdrawn, Potty Watch stops accepting new bathroom records and stops ordinary background receipt, upload, and synchronization of consumer health data for that scope. A limited privacy route remains available to export or delete data, and requests may still be submitted by email. After a caregiver leaves a caregiver group or is removed, that caregiver's future authorized access and synchronization stop for the group, subject to server confirmation.

Withdrawal does not itself delete previously collected data and does not cancel an App Store subscription. The app provides separate export, deletion, and Apple subscription-management choices.

10. Security

We restrict consumer health data access to the people and processors that need it for the purposes described in this policy. We maintain administrative, technical, and physical safeguards designed for the sensitivity, volume, and nature of the data. No security measure eliminates all risk.

11. Changes

We will not collect, use, or disclose an additional category of consumer health data, or use it for an additional purpose, without first updating this policy and obtaining affirmative consent where required. The current version and effective date appear above, and prior versions are archived.

12. Contact

Use the available Privacy & Account controls in Settings for self-service actions. Email other questions, rights requests, and appeals to support@pottywatchtracker.com. Use "Washington Health Data Request" or "Washington Health Data Appeal" in the subject line.