Consumer Health Data Privacy Policy
Effective Date: July 10, 2026
Last Updated: July 17, 2026
This Consumer Health Data Privacy Policy describes how Jones Technical Enterprises, LLC (“we,” “us,” or “our”) collects, uses, and discloses consumer health data through the OIT Tracker mobile application (the “App”). It supplements our Privacy Policy and applies where U.S. state consumer-health-data laws require it.
OIT Tracker helps families organize oral-immunotherapy records. Information recorded in the App can reveal a person’s health conditions, symptoms, treatment, medication use, and treatment progress, so we treat it as consumer health data.
1. Consumer Health Data We Collect and Why
| Category | Examples | Purposes |
|---|---|---|
| Child and treatment profile information | Name or nickname, optional date of birth, allergens, treatment details, and clinician contacts | Create profiles, organize records, and provide requested App features |
| Treatment and care records | Dose history, reactions, symptoms, sickness periods, notes, care instructions, medications, schedules, and saved emergency-action information | Record and display treatment activity, synchronize records, and make records available to people the family owner authorizes |
| Action-plan documents | Page images stored on-device and information extracted from or saved from a document | Display the document and organize information the user chooses to save; if the user consents to AI-assisted entry, process an image transiently to extract information for review |
| Derived treatment information | Dose counts, consistency dates, progress measures, milestones, and related dates | Calculate progress information and maintain cross-device continuity |
| Health-related product telemetry | Treatment-related feature use, timestamps, limited dose or sickness information, App and device information, subscription tier, and identifiers | Understand feature use, diagnose problems, secure the service, and improve the App |
| Health-record identifiers | Account, App-installation, child, family, and caregiver-sharing identifiers | Authenticate users, associate and synchronize records, enforce permissions, secure the App, and respond to requests |
We do not collect precise geolocation, genetic data, biometric-identification templates, or reproductive or sexual health information as dedicated App fields. Free-text fields and documents may contain additional information a user chooses to provide. Do not enter information that is not needed to use the App.
We do not use consumer health data for targeted advertising, sell it, or use it to make treatment decisions.
2. Sources of Consumer Health Data
We collect consumer health data from these categories of sources:
- Users and authorized people: Information entered, scanned, imported, saved, or authorized by parents, guardians, adult caregivers, or authorized minors age 13 or older.
- The App and device: Technical information, identifiers, timestamps, and product telemetry generated through App use.
- User-supplied documents: Information contained in an action plan or other material a user chooses to provide. Information originating with a clinician reaches us only when a user supplies it.
- Authentication and subscription services: Account identifiers, an optional email address, and subscription status.
- Information we derive: Treatment-progress information calculated from records already supplied through the App.
We do not collect consumer health data about a user’s activities over time across unaffiliated websites or online services.
3. Consumer Health Data We Disclose
Depending on the features a user chooses, we disclose or make available the following:
| Recipient Category | Consumer Health Data | Purpose |
|---|---|---|
| Cloud hosting and operations processors | Account-linked health records, derived treatment information, health-related telemetry, and record identifiers | Host, secure, process, and synchronize the App |
| Optional AI document processor | An action-plan image and extraction response, only when the user requests and consents to AI-assisted entry | Extract information for the user to review; the information is not used to train models and is not retained after processing except for limited security-related processing |
| People selected by the family owner | Child and treatment records allowed by the selected role and visibility settings | Provide family sharing requested by the owner |
| Legal and regulatory recipients | Only the consumer health data legally required in the circumstances | Comply with valid legal process or applicable law |
We do not sell consumer health data or disclose it for targeted advertising. We do not share consumer health data with an affiliate.
Family sharing is opt-in. An authorized person may view, add, change, download, print, or otherwise retain consumer health data according to the permissions selected. Revoking access prevents future access through our systems but cannot recall information the person already viewed or retained.
4. Your Consumer Health Data Rights
Subject to applicable law, you may:
- Confirm whether we collect, share, or sell consumer health data concerning you or a child for whom you are authorized to act
- Access that consumer health data
- Review and correct inaccurate consumer health data
- Request a list and available contact information for third parties and affiliates with whom the data was shared or sold
- Withdraw consent to future collection or sharing when processing is based on consent
- Request deletion from our records, including applicable archives and backups, and require notification to processors and other recipients when the law requires it
- Appeal a refusal to act on a request
A parent or legal guardian may exercise applicable rights for a child. We may take reasonable steps to verify the requester’s identity, authority, and relationship to the data. We will not require you to create a new account to submit a request, but we may ask you to use an existing account or provide information reasonably necessary to authenticate it.
How to Submit a Request
Email support@oittracker.com with the subject Consumer Health Data Request and state the right you want to exercise. Do not send health records or identity documents through unencrypted email unless we ask you to use an approved secure method.
You may also use these in-App controls:
- Delete your account and account-linked records through Settings → Account → Delete Account
- Revoke family-sharing access from the Account screen
- Stop future product telemetry through Settings → Privacy & Data by switching off Share Anonymous Analytics
- Choose whether to use AI-assisted action-plan entry and withdraw that choice for future documents
We will respond without undue delay and ordinarily within 45 days. When reasonably necessary, we may extend the response period once by another 45 days and will explain the extension within the initial period. Access information is provided without charge up to twice per year, except where applicable law permits a reasonable fee or refusal for manifestly unfounded, excessive, or repetitive requests.
Deletion from an archive or backup may be delayed only as permitted by law. Deletion cannot remove a copy independently retained on another person’s device, in an export, printout, screenshot, or outside our systems.
Appeals
If we refuse to act, email support@oittracker.com with the subject Consumer Health Data Appeal and explain why the decision should be reconsidered. We will respond in writing within 45 days. If we deny the appeal, we will explain the decision and provide a way to contact the appropriate state attorney general.
We will not unlawfully discriminate against you for exercising consumer health data rights.
5. Changes Affecting Consumer Health Data
Before collecting, using, or disclosing a category of consumer health data not described here, or using disclosed data for a materially different purpose, we will update this policy and obtain affirmative consent when required. We will change the “Last Updated” date and provide an in-App notice of material changes. Any legally required consent will be presented separately from general terms or privacy disclosures. Where the law requires separate consent to share consumer health data, that consent will be distinct from consent to collect it.
6. Contact
Jones Technical Enterprises, LLC
Email: support@oittracker.com