පාරිභෝගික සෞඛ්‍ය දත්ත රහස්‍යතා ප්‍රතිපත්තිය (වොෂින්ටන් සහ නෙවාඩා)

Effective: 4 November 2026 (version 2026-11-04). Dates on this page are in Coordinated Universal Time (UTC).

This Consumer Health Data Privacy Policy is for residents of Washington (My Health My Data Act, RCW 19.373) and Nevada (NRS 603A.400 to 603A.550), and for anyone whose consumer health data is collected in Washington. It explains how CodeScale (Pvt) Ltd ("CodeScale", "we", "us") handles consumer health data in WheresNow. It adds to our Privacy Policy, which covers all the personal information we handle.

WheresNow is a family location-sharing app. We don't ask about your health, and the app doesn't read health or fitness data. We publish this policy because those laws say location information can be consumer health data when it could show that someone went to get health care.

1. The consumer health data we collect

Category	What it is
Precise location	Your live location and location history, which could show a visit to a hospital, clinic, pharmacy or other place where health care is provided
Places	Places that you or a member of your Circle create (for example "Grandma's clinic"), and when members arrive at or leave them
Waypoints and Gatherings	Meeting points and Gatherings that you or a member of your Circle set up, with their location and who said they were on the way or had arrived
Trips	Drive sessions: the route, speed, start and end
Safety alerts	SOS and crash-detection alerts, including your location when the alert was sent

We don't infer, label or analyse health-care visits. We don't pre-load or categorise health-care places, and we don't set up geofences around health-care facilities to identify, track or message anyone. A place you or a member of your Circle creates is used only for that Circle's alerts.

The app can suggest adding your home or your work or school as a place. It works these out from your own location history, and only you see the suggestion. It doesn't use map data about what kind of place something is, so it never labels a place as health care, but a place you visit often, such as a clinic, could be suggested as your work or school. You can ignore any suggestion; nothing is created unless you add it.

2. Where it comes from

• Your device, through the location permission you grant. The app collects location while it is open and in the background, so sharing with your Circle keeps working when the app is closed.
• You and the members of your Circles, when someone creates a place or sends an alert.

3. Why we collect and use it

We collect and use consumer health data only to provide the WheresNow features you ask for:

• showing your location to the members of your Circles and to anyone you send a share link to
• location history, trips, place arrival and departure alerts, place suggestions for you, waypoints and Gatherings, check-ins, SOS and crash-detection alerts
• keeping the service secure and working

We don't use it for analytics, advertising, marketing, research or training AI models, or for any other purpose. If we ever wanted to, we would ask for your separate consent first.

4. Who we share it with

• The people you choose. The members of your Circles see your location, history, trips, place alerts and safety alerts, as their plan allows. Anyone you send a share link to sees your location until the link expires (at most 24 hours). You decide who is in your Circles, and you can pause sharing or leave a Circle at any time.

• Our service providers, who process it only on our instructions to provide WheresNow. They are the same providers, with the same roles, as in section 6 of our Privacy Policy; these are the ones that can receive consumer health data:

  • Amazon Web Services, Inc.: hosting, our database and backups
  • Google LLC: Google Maps Platform (showing maps, searching for places, map images of shared locations and turning coordinates into addresses, so it receives the coordinates shown or shared), Firebase Cloud Messaging (push notifications, which can mention place arrivals, Gatherings and SOS alerts) and Firebase Crashlytics (crash reports, which describe the error but can include app data from the moment of the crash)
  • Functional Software, Inc. (Sentry): error reports, which can likewise include app data from the moment of the error
  • Apple Inc.: delivering push notifications to iPhone and Apple Watch

  Our other Firebase services (Authentication, App Check, Analytics and Remote Config) and Microsoft Clarity don't receive your location. Clarity never records the app's map, location, places, waypoints, Gatherings, SOS or history screens.

• Authorities, only when the law requires it or to protect someone from imminent serious harm. See our Law enforcement guidelines.

• A new owner, if CodeScale or WheresNow is merged, sold or reorganised. They must keep honouring this policy.

We have no affiliates that receive consumer health data. We don't sell consumer health data, and we don't share it with advertisers, data brokers or AI companies. No third party collects consumer health data about your activity over time and across other websites or apps through WheresNow.

5. How long we keep it

• Latest location: until it is replaced by a newer one, or you delete your account.
• Location history: deleted automatically after at most 60 days.
• Places: until the place, its Circle or your account is deleted.
• Waypoints and Gatherings: deleted automatically 24 hours after they are created; a Gathering, 24 hours after its scheduled time.
• Trips, SOS and crash alerts, check-ins: there is no automatic deletion yet. You can have them deleted at any time (section 6).

6. Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data
• access it, including a list of every third party and affiliate we have shared it with and how to contact them
• review and correct it: you can see your location history, trips and places in the app, rename, move or delete places you created, and ask us to correct anything else
• withdraw your consent to its collection and sharing (see "How to stop collection" below)
• delete it

How to stop collection. To stop WheresNow collecting your location, turn off the location permission for WheresNow in your phone's settings (and on your watch, if you use one), sign out of the app, or delete your account. Pausing sharing doesn't stop collection. It hides your live location from the Circles you pause, but the app keeps sending your location to our servers. If you've paused every Circle, we don't add it to your location history; if you've paused only some, we store it but hide it from the Circles you paused. Place alerts and check-ins may still notify your Circle while you're paused, and members may still see history from before you paused. Leaving a Circle stops sharing with that Circle, but not collection.

How to make a request. Email [email protected] from the email address on your account, and say which right you want to use. To protect your data, we act only on requests we can confirm come from you. Requests are free, up to twice a year.

For a complete deletion, email us. Deleting your account in the app (Settings › Account › Delete account) deletes your latest location, location history, trips and the Circles you created, but not yet your SOS and crash alerts and check-ins. When you ask by email, we delete all of your consumer health data together, including those records, and we tell our service providers to delete it too. We complete an email deletion request within 30 days of confirming that it comes from you, and tell you when it is done.

When we answer. We answer within 45 days. If we need more time, we may extend that once by up to 45 more days, and we'll tell you why within the first 45 days.

Appeals. If we refuse your request, you can appeal by replying to our answer. We decide an appeal within 45 days and tell you in writing what we did and why. If we deny your appeal, you can complain to the Washington State Attorney General or the Nevada Attorney General.

We won't treat you differently for using any of these rights.

7. Changes to this policy

When we change this policy, we publish the new version here with its effective date, and every earlier version stays available on this page. If a change is material, for example a new purpose or a new kind of recipient, we will tell you in the app or by email first, and ask for your consent where the law requires it.

8. Contact us

CodeScale (Pvt) Ltd Bille Watta, Wahava, Rambukkana 71100, Sri Lanka Email: [email protected] · Contact form: https://wheresnow.net/contact/