River — Consumer Health Data Notice
Version: 2026-07-09 Effective date: 2026-07-09
This notice applies to residents of Washington (My Health My Data Act), Nevada (SB 370), Connecticut (CTDPA), and Colorado (CPA). It supplements the River Privacy Policy.
River is a personal wellness app that runs entirely on your device. We do not operate a server that stores your data, we do not require an account, and we cannot see anything you log.
1. Categories of consumer health data River handles
Depending on which modules you enable, River holds the following categories of consumer health data locally on your device only:
- Medications, doses, and injection sites (including hormones)
- Cycle and symptom logs, including menstrual and reproductive health data
- Lab results you enter
- Body change measurements and photos you take or import
- Voice recordings and pitch measurements derived from them
- Surgery plans and post-op notes
- Appointments and insurance details
- Journal entries, mood logs, and social/transition milestones
- Gender-affirming care information generally
2. Why we handle it
Solely to provide each tracking module you choose to enable. There is no secondary use — no advertising, no profiling, no model training, no research.
3. Who we share it with
Nobody. River has no server, and production builds contain no analytics, crash reporting, or third-party SDKs that receive information about your use of the app. We do not sell consumer health data, and we have not sold it in the past. We do not share it with affiliates, processors, or third parties.
4. How long we keep it
Until you delete it. Data stays on your device until you delete individual records, delete your profile, or uninstall the app. We have no copy.
5. Your rights
Because River runs entirely on your device, you exercise these rights directly in the app — no request form or identity verification is needed:
- Confirm whether River holds your consumer health data: open the app and view it.
- Access your data: Profile → Export Data (JSON) or Track → Doctor Export (PDF).
- Withdraw consent for a category of collection: disable that module in Profile → Modules; you can also delete the module's existing data.
- Delete your data: delete individual records, or delete your profile, which cascades deletion to all dependent data and removes encrypted media files. Uninstalling the app also removes all data.
Because we hold no copy of your data, there is nothing for us to delete on our side and no list of third parties to notify.
6. We do not sell your data
River does not sell consumer health data. No authorization to sell your data will ever be requested because no sale occurs.
7. We do not geofence
River does not use geofencing of any kind, including around facilities that provide in-person health care services.
8. State-specific information
- Washington: This notice is provided under the My Health My Data Act (chapter 19.373 RCW). Enforcement is available through the Washington Attorney General, and the Act provides a private right of action under the Washington Consumer Protection Act.
- Nevada: This notice is provided under SB 370. Enforcement is available through the Nevada Attorney General.
- Connecticut: This notice is provided under the Connecticut Data Privacy Act. Enforcement is available through the Connecticut Attorney General.
- Colorado: This notice is provided under the Colorado Privacy Act. Enforcement is available through the Colorado Attorney General.
9. Contact
Questions or concerns about this notice: privacy@river.lgbt
If you are a Washington resident and believe we have not resolved your concern, you may contact the Washington Attorney General at www.atg.wa.gov/file-complaint.