Privacy & Health Data Consent

Last Updated: 2026-06-13

This consent is between you and BxConnect, LLC ("BxConnect," "we," "us"). By checking the consent box and accepting, you give your affirmative, informed consent for BxConnect to collect and process the behavioral and health-related information described below, for the purposes described below. This consent works together with the BxConnect Privacy Policy (available in the app's legal settings and at www.bxconnect.net), which describes our practices in more detail.

What this means (plain-language summary)

  • What we collect: the behavioral and health information you choose to enter about yourself or your child — plus your account details and basic technical data.
  • What we use it for: showing your own data back to you — charts, reports, goals, and progress. Nothing else without asking you first.
  • What we never do: we never sell your health data. We never use it for advertising. We never share it except with the service providers that run our platform, people you choose to share with, or when the law requires.
  • You're in control: you can export your data, delete your account and data, or withdraw this consent at any time, in the app or by emailing support@bxconnect.net.

The summary above is part of this consent; the sections below add detail and control if anything differs.

1. What We Collect

With your consent, we collect:

  1. Health and behavioral information you enter — observations, behaviors, goals, session records, notes, charts, and similar information about you or a child in your care. This is "consumer health data" under laws like Washington's My Health My Data Act.
  2. Account information — your name, email address, and authentication credentials (held by our identity provider).
  3. Technical and usage data — IP address, device and browser information, and logs of app activity, used for security and to operate the service.

We collect only what is reasonably necessary to provide the service. We do not collect health data from your device's sensors, from other apps, or from data brokers.

2. How We Use It

We use the information above only to:

  1. provide the service to you — recording, displaying, charting, and reporting your own data back to you and to anyone you explicitly invite to it;
  2. operate, secure, and troubleshoot the service (including fraud and abuse prevention);
  3. respond to your support requests; and
  4. comply with legal obligations.

We do not use your identifiable health data for advertising, for marketing segmentation, or to train artificial-intelligence models. We may use de-identified or aggregated data that can no longer reasonably identify you or your child to analyze and improve the service; we will not attempt to re-identify it.

3. Consent for a Child's Data

If you record information about a child:

  1. You represent that you are the child's parent or legal guardian, or otherwise have legal authority to consent to the collection of the child's information, and you provide that consent on the child's behalf.
  2. BxConnect accounts are held by adults. We do not knowingly permit children under 13 to create accounts or collect information directly from them; information about a child is entered and controlled by you. Where the Children's Online Privacy Protection Act applies, your consent under this section is the verifiable parental consent for that collection.
  3. When a child becomes old enough to manage their own information under applicable law, they (or you) may contact us to transfer or delete it.

4. Sharing

We share your information only:

  1. with our service providers that host and operate the platform — currently Amazon Web Services (cloud hosting) and Okta/Auth0 (sign-in) — under contracts limiting them to processing it for us;
  2. with people you choose — sharing in the app happens only through invitations and access you control;
  3. when required by law — e.g., a valid subpoena or court order, in which case we will notify you unless legally prohibited; or
  4. in a business transfer (merger or acquisition), in which case this consent and the Privacy Policy continue to protect your data and we will notify you of any change in control.

We never sell your health data, and we never share it for advertising. A sale of consumer health data would require your separate, explicit authorization under laws like the My Health My Data Act — and we do not ask for one because we do not sell data.

5. Your Rights & Choices

You may, at any time and without penalty:

  1. Access and export your data using the app's export features or by emailing us;
  2. Correct information by editing it in the app;
  3. Delete your data by deleting individual records or your entire account in the app's account-deletion flow (or by emailing us) — deletion removes your data from active systems, with backups expiring in the ordinary course and limited legal-compliance records (like this consent's acceptance evidence) retained as required;
  4. Withdraw this consent by deleting your account or emailing support@bxconnect.net — withdrawal stops all further collection and processing; because the service cannot operate without processing the data you enter, withdrawal ends your use of the service. Withdrawal does not affect processing that happened before it.
  5. Exercise any additional rights your state's law provides (e.g., under Washington's My Health My Data Act or the California Consumer Privacy Act), including the right not to be discriminated against for exercising them. We will respond to rights requests within the time your state's law requires (and in any case within 45 days). If we deny a request, we will explain why and how to appeal by replying to our response.

6. Security

We protect your data with safeguards including encryption in transit and at rest, column-level encryption of sensitive fields, strict per-family data isolation enforced at the database layer, authenticated access, and audit logging. No system is perfectly secure; if a breach affecting your unsecured health data occurs, we will notify you as required by law, including the FTC's Health Breach Notification Rule.

7. Data Retention

We keep your data while your account is active. When you delete data or your account, we delete it from active systems as described in Section 5.3. We retain the record of this consent (the text you accepted, when, and by whom) for at least six (6) years, as evidence of authorization, even after account deletion.

8. Changes

New versions of this consent are published with a new version number through the in-app agreement system. A material change is presented to you for fresh acceptance before continued use — your prior consent stays in force until you accept the new version, and we never expand how we use your data without asking first.

9. Contact

BxConnect, LLC — support@bxconnect.net