FonticWashington Consumer Health Data Notice
This notice supplements the Fontic Privacy Policy for Washington consumers when a habit entry or its associated history identifies or could reasonably identify a person's physical or mental health status.
Categories, sources, and purposes
Fontic lets you type habit names, including potentially health-related habits such as exercise, sleep, avoiding alcohol, or quitting vaping. The associated habit type, start date, reminders, and completion or streak history may also reveal health-related behavior. You provide habit entries directly through the app; completion history is generated when you mark a habit done. We use this information only to show your habit, record progress, create reminders on your device, and, if you sign in, sync it across your devices. We do not connect health wearables, access Apple Health, request medical records, or infer diagnoses.
Categories disclosed and recipients
Without an account, habit entries and progress are kept on your device and are not synced to Fontic's database. If you choose Sign in with Apple, your habit names, type, dates, reminder settings, and completion history are stored with Supabase, our database processor, to provide the sync you requested. Apple provides account sign-in; it does not receive habit names from us. Local reminders are generated on your device. Habit names and free text are not sent in optional PostHog analytics events and are filtered from Sentry error reports. We do not sell consumer health data. We do not disclose habit content to advertisers, data brokers, or unrelated third parties. No specific affiliates receive habit content for their own purposes. We may disclose information when legally required, as described in the main Privacy Policy. Categories of health data disclosed to our processor are the health-related entries and associated progress described above.
Collection, consent, and control
You choose the habit information you enter. Syncing that information is optional and begins only if you sign in. Washington law permits collection or sharing when necessary to provide a service you request; where consent is required, it must be specific and obtained before collection or sharing, with separate consent for sharing. Agreeing to general Terms is not health-data consent. Contact us if you want to withdraw a consent you previously provided. You may stop future synced storage by deleting your account; that does not cancel an Apple subscription. We will disclose new health-data categories or uses and seek affirmative consent where required before making such changes.
Your rights and requests
Washington consumers may request to confirm whether we collect, share, or sell their covered health data; access that data and a list of third parties and affiliates to whom it was disclosed; withdraw applicable consent; and request deletion. In the app you can export your data or delete an account from Settings → Privacy Settings. For other requests, including local-only data questions, email support@fontic.app. You do not need to create a new account to ask. We may reasonably verify your identity. We respond without undue delay, generally within 45 days of receiving a request, with one additional 45-day extension where permitted and explained within the first period. Requests are free up to twice annually, subject to the law's exceptions. A deletion request may also require notice to applicable processors and deletion from backups, subject to the statutory backup period and exceptions.
If we refuse a request, appeal by replying to our decision or emailing support@fontic.app with “Health data appeal” and the decision you are appealing. We respond to appeals in writing within 45 days. If we deny an appeal, we will explain how to contact the Washington Attorney General.
Choices and contact
You can request help with local data or privacy choices at support@fontic.app. Fontic is operated by Jackson Crabbe. We restrict access to account data to those who need it to provide the service and use security measures appropriate to the data. This notice describes our current practices; it does not replace consent where the law requires it.