Washington Consumer Health Data Privacy Notice

Why this notice exists

Fieldbook is a private notebook for self-reflection. You write about what you've noticed about yourself — what you're proud of, what drains you, what you're still figuring out.

Washington's law defines consumer health data broadly, and it includes information about mental and behavioral health. Because personal reflection can touch on how you're feeling, some of what you write in Fieldbook may qualify as consumer health data under that definition, even though Fieldbook is not a health service and does not ask you health questions.

We're treating it as covered data rather than arguing about the edges.

What we collect, and why

Consumer health data: the content you write in Fieldbook — everything you write, and anything you build from it. To the extent any of this touches on your mental or emotional wellbeing, it is consumer health data.

Purpose of collection: solely to provide Fieldbook to you — to store what you write, show it back to you, and let you arrange and export it. We do not collect it for any other purpose.

We also collect, as described in the Privacy Policy: your email address (to sign you in), your age range (under 13, 13–17, or 18+ — not your date of birth), a small amount of information about the account itself, and your email notification settings (which kinds of email you've chosen to receive, and a short record of which ones we've already sent you so we don't repeat one). None of this is consumer health data.

How we count words. Fieldbook performs a simple word-frequency calculation on your own entries in order to show you which words you've repeated. This runs on your own record, for your own view. No one else sees the result, and it produces no profile, score, or classification.

Where it comes from

One source only: you. Everything in your Fieldbook was typed by you into Fieldbook. We do not purchase, license, receive, or infer consumer health data from any other source. We do not use trackers, advertising pixels, or data brokers.

Who we share it with

We do not share your consumer health data with anyone.

Our service providers process data in the course of running the service, each limited to what its function requires:

• Supabase — database and authentication. Stores your account and your content. This is where your Fieldbook lives.
• Resend — sends your sign-in emails and any notification emails you haven't turned off, like a reminder that an experiment you set up is ready to review. Receives your email address and the neutral, app-written text of those emails. It does not receive what you write in Fieldbook.

Vercel hosts and delivers the Fieldbook application itself. Fieldbook is designed so that what you write is not routed through or retained by our hosting provider, and so that it stays out of the places where information tends to get logged or retained incidentally along the way. This is a deliberate architectural choice, specifically so that our hosting provider is not a processor of your reflection content.

We do not share consumer health data with affiliates. We have no affiliates.

We do not sell your data

Vana Lab LLC does not sell consumer health data, and has never sold it.

We do not offer it for sale, exchange it for anything of value, or make it available to third parties for advertising, profiling, or any commercial purpose. Because we do not sell consumer health data, no valid authorization is required or sought.

No one reads what you write

Reading your Fieldbook is not part of how we operate it — not by Vana Lab staff, and not by contractors. Access is enforced at the database level and scoped to your own account.

This also means Fieldbook is not monitored. Nothing you write triggers an alert or a notification to anyone, and Fieldbook cannot help in an emergency. Crisis resources are at fieldbook.vanalab.com/crisis-support.

How long we keep it

Your content stays until you delete it or delete your account. There is no automatic expiry — the purpose of Fieldbook is a record that lasts.

When you delete your account, everything associated with it is permanently deleted from the database, along with your authentication record. This is a hard delete, not an archive. Deleted data is removed from backups as they cycle out.

Your rights

If you are a Washington consumer, you have the right to:

Confirm whether we collect, share, or sell your consumer health data, and to access it. You can exercise this yourself, immediately, without asking us: Settings → Download my data produces a complete copy of everything you have written. No request, no waiting.

Withdraw consent to our collection and sharing of your consumer health data. Because Fieldbook cannot function without storing what you write, withdrawing consent means closing your account: Settings → Delete account.

Have your consumer health data deleted, including from backups. You can do this yourself at any time: Settings → Delete account. Deletion is immediate and permanent.

Not be discriminated against for exercising any of these rights. We will never charge you, degrade your experience, or deny you service for doing so.

If you would rather we handle it

Email fieldbook@vanalab.com. We will respond within 45 days of receiving your request. If we need more time, we will tell you within that 45-day window and explain why, and we may extend by up to 45 additional days as the statute permits.

We may need to verify that the request comes from you — typically by confirming you can receive email at the address on the account.

If we deny your request

You may appeal by replying to our response, or by emailing fieldbook@vanalab.com with "Appeal" in the subject line. We will respond to an appeal within 45 days, explaining the action taken and the reasons for it.

If your appeal is denied, you may submit a complaint to the Washington State Attorney General at www.atg.wa.gov/file-complaint.

Changes to this notice

If we change this notice, we will update the effective date above. For changes that materially affect how consumer health data is handled, we will notify you (for example, by email or in the app) before the change takes effect, and — where the law requires it — obtain your consent before applying the change to data already collected.

Contact

Vana Lab LLC
418 Broadway, Suite N
Albany, NY 12207
United States

fieldbook@vanalab.com