ToldForward Consumer Health Data Privacy Policy

Version 3. Effective 1 November 2026.

This policy covers consumer health data, as Washington’s My Health My Data Act (RCW 19.373) and Nevada’s law on consumer health data (NRS 603A.400 to 603A.550) define it. It is separate from our Privacy Policy, which covers everything else. ToldForward is a service provided by D2X Enterprises LLC, 30 S 15th St Ste 1550 PMB 852931, Philadelphia, PA 19102, USA.

1. The consumer health data we collect

ToldForward keeps a person’s life in their own words. We do not ask about anyone’s health, and we never infer it. Health information reaches us only when a member chooses to write it:

what a member writes about their own physical or mental health, conditions, treatment, medicines or care, including reproductive or sexual health, in their answers, their own writing, their family tree notes or their About you answers;
what a member writes about the health of someone in their life.

Once identity checks begin, images of a person’s face and identity document are taken by our identity provider for the check only; we receive only the result. This policy will name the provider then.

We do not collect location data, and we do not use geofences.

2. Why we collect it, and how we use it

Only to provide the service the member asked for:

to keep it, encrypted, in the member’s record, and show it to them (and to a helper they choose, for what the helper helps with);
with Archive Membership, to index it so the guide can find the member’s exact words, and to let the guide quote them;
after the member’s death and the waiting period, to give the record to the people the member designated;
if the member chooses a Historical Deposit, to send a copy to the library or archive they chose.

We never sell consumer health data, never use it for advertising, and never use it to train AI models unless the member gives a separate, standalone consent, which they can withdraw.

3. Where it comes from

Only from the member who writes it.

4. Who receives it

The people the member designates, after the member’s death and the waiting period.
A library or archive, only if the member chooses a Historical Deposit.
Processors that work for us, under contract, only to run the service:
- Anthropic, which runs the guide’s model during our soft launch (passages the guide found, processed only in the United States, not kept for training);
- Cloudflare, which hosts and runs the service and stores it, encrypted, in the United States: its network carries traffic between you and us and may decrypt it on the way; it builds the guide’s search index with an open model it runs for us, which does not keep the passages or train on them; and it keeps our encrypted backups (Privacy Policy, section 8).
Google, which keeps encrypted copies of our two newest backups in our Google Drive and cannot read them (Privacy Policy, section 8).
Anyone the law compels us to disclose to, such as under a court order.

We have no affiliates that receive it. Our website’s analytics (Google Analytics) runs only on our public pages, only if a visitor accepts it, and never receives anything a member writes.

5. Your rights

You may:

confirm whether we collect, share or sell your consumer health data, and see it;
get a list of every third party and processor we shared it with, and how to contact them;
withdraw your consent to our collecting or sharing it;
have it deleted. A member can delete any entry at once in the service. If you ask us, we delete it within 30 days of confirming who you are, and from backups within the 30 days our backups last.

Ask through toldforward.com/contact (choose “Privacy and my data”) or by mail at the address above. We answer within 45 days, and tell you if we need 45 more. If we decline, you can appeal by replying; we answer an appeal within 45 days, and if we still decline you may contact your state’s Attorney General (in Washington, atg.wa.gov/file-complaint).

A member withdraws consent in Settings: withdrawing the consent to sensitive information stops anything new being saved and deletes what was written within 15 days, after offering a copy.