- Effective date: 22 October 2026
- Company: Alonzo Digital Ltd (England & Wales)
This Consumer Health Data Privacy Policy explains how Kuzi handles consumer health data. It is written for the US state laws that protect this kind of data — the Washington My Health My Data Act, Nevada's consumer health data law (SB 370) and the Connecticut Data Privacy Act — but we make the same promises to every Kuzi user, wherever they live.
The rest of how Kuzi handles your information is in our Privacy Policy. If the two ever seem to differ on consumer health data, this policy applies.
Who we are
Kuzi is provided by Alonzo Digital Ltd, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY. You can reach us at [email protected].
What counts as consumer health data in Kuzi
In Kuzi, consumer health data is the information in the Calendar feature, which helps you track your period and cycle, and anything we work out from it. If you never turn the Calendar on, Kuzi does not collect it.
Kuzi's skin diary (face photos, notes and the self-assessment scores you give) is a beauty and self-care log, not a health record. Even so, it gets the same promises as below: we never sell it, we never share it with Meta or any other advertising platform, and you can delete it at any time.
The consumer health data we collect
Only after you give your explicit consent in the app:
- What you enter: your period start and end dates, your cycle and period length, the flow intensity you mark on period days, the symptoms you select (for example cramps, bloating or skin changes) and the notes you add to a day.
- What we work out from it: your predicted next period, your current cycle day and estimated cycle phase, how regular your cycles are, and — if you subscribe — patterns between your cycle and your skin diary scores or symptoms.
- Your consent record: whether you agreed or withdrew, when, the version of the consent text and the language you read it in.
Cycle reminders are scheduled on your device; your dates are not sent to a notification service.
Where it comes from
- From you, when you use the Calendar.
- From Kuzi's own calculations on your device or on our servers, using what you entered.
We do not buy consumer health data, get it from other companies, read it from health apps or device sensors, or use your location for it. We do not set up geofences around health care facilities.
Why we use it
We use consumer health data only to:
- show you your calendar, predictions, cycle summary and the reminders you turn on;
- show you how your cycle and your skin relate;
- keep it in your account so it syncs and comes back if you reinstall the app;
- keep a record of your consent, as the law requires.
We do not use it for advertising, ad targeting or ad measurement, for marketing, to build profiles for other companies, or to train external AI models. Kuzi's predictions are estimates. They are not for contraception, pregnancy planning or medical decisions.
Who we share it with
We do not sell consumer health data, and we do not share it with third parties. That includes Meta and every other advertising platform.
Some service providers (processors) handle it only on our behalf, under contract, and only to run Kuzi for you:
- Google LLC — Firebase (Cloud Firestore and Authentication): stores your Calendar data in your account.
- Mixpanel, Inc. and Google LLC — Firebase Analytics: receive feature-usage events about the Calendar, for example that you opened it, finished setup, or gave or withdrew consent. These events never contain your dates, cycle length, flow, symptoms, notes, cycle day, phase or predictions.
We may also disclose information when the law requires it, for example in response to a valid court order.
Your rights
You have the right to:
- Know and access: confirm whether we collect, share or sell your consumer health data, get a copy of it, and get a list of every third party and affiliate we have shared it with, with their contact details.
- Withdraw consent: at any time. Withdrawing stops collection straight away.
- Delete: have your consumer health data deleted, including from our processors and from backups.
How to use these rights:
- In the app: go to Profile › Cycle settings › Withdraw consent and delete my Calendar data. This withdraws your consent and deletes your period entries, cycle settings and daily logs at once. You can also delete your whole account from Profile › Privacy and support › Delete my account.
- By email: write to [email protected] with the subject "Consumer health data request". We may ask you to confirm you own the account before we act.
We answer within 45 days. If we need more time, we will tell you why, and we may extend this once by up to 45 more days. Requests are free up to twice a year.
Appeals: if we turn down your request, you can appeal by replying with the subject "Appeal". We will answer within 45 days and explain our decision. If you are still not satisfied, you can contact your state attorney general — in Washington at atg.wa.gov, in Nevada at ag.nv.gov, and in Connecticut at portal.ct.gov/ag.
We will not treat you differently for using any of these rights.
How long we keep it
We keep your Calendar data while your consent is active. When you withdraw consent in the app, it is deleted from your account straight away and from any backups within 30 days. If you delete your account, everything is deleted within 30 days of your request. Your consent record (which says only what you agreed to and when, not your cycle data) stays with your account until then.
How we protect it
Only you can read your Calendar data in your account; our database rules block other users. Data is encrypted in transit (HTTPS) and at rest on Google's servers. Inside our team, only people who need it to run Kuzi can reach it.
Children
Kuzi is not designed for children under 16, and we do not knowingly collect consumer health data from them.
Changes to this policy
If we change this policy in a way that affects your consumer health data, we will tell you in the app first. We will ask for your consent again before using it in a new way.
Contact
- Email: [email protected]
- Post: Alonzo Digital Ltd, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY