Consumer Health Data Privacy Policy
IsoWindow, by Montgomery Appworks LLC · 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159 · support@montgomeryappworks.com
Effective October 25, 2026.
This policy explains how we handle "consumer health data" as defined by Washington's My Health My Data Act (RCW 19.373) and similar laws in Nevada, Connecticut and other states. It is separate from our general Privacy page.
1. Consumer health data we collect, and why
| Category | What exactly | Purpose |
|---|---|---|
| Waitlist signup (only if you join and tick the box) | Your email address, that you joined the IsoWindow waitlist, the date and time, and that you consented. Joining could suggest that you, or someone you help, are interested in isotretinoin. We do not ask for or store any medical details. | Email you when the tool launches. Nothing else. |
The IsoWindow calculator runs entirely in your browser. The dates and choices you enter are never sent to us, so we hold no health data from it.
We use consumer health data only for the purpose above. We do not use it for advertising, marketing to you about anything else, profiling, or selling.
2. Sources
We collect it only from you, through the waitlist form. We do not buy it or collect it from anyone else.
3. Who we share it with
- Processor: Cloudflare, which hosts this site and the waitlist database, handles it only to run the service.
- No one else. We have no affiliates that receive it. We do not sell consumer health data and will not.
4. Your rights
- Confirm and access: ask whether we hold your data, get a copy, and get the list of third parties it was shared with (today: only Cloudflare as our processor).
- Withdraw consent: at any time.
- Delete: have it deleted. It leaves our live database right away; our host's recovery history expires within 30 days.
- No discrimination for using these rights.
5. How to use your rights
- Delete or withdraw instantly: enter your email on the delete page. It removes your email from every Montgomery Appworks waitlist straight away. Database recovery copies kept by our host expire on their own within 30 days.
- By email: support@montgomeryappworks.com, subject "Health data request". We may ask you to confirm from the same email address so we know it's you.
We respond within 45 days. If we need more time we may extend once by 45 days and tell you why. Requests are free up to twice a year.
6. Appeals
If we decline your request, you can appeal by emailing support@montgomeryappworks.com with the subject "Appeal". We answer in writing within 45 days. If we deny your appeal, you can contact your state Attorney General: Washington, Nevada, Connecticut.
7. Other commitments
- No geofencing, around health-care facilities or anywhere else.
- Only people who need it to run the waitlist can access it, and they must keep it confidential.
- Montgomery Appworks LLC is not a health-care provider or a HIPAA covered entity, so HIPAA does not apply. We protect this information as described here.
- If we change this policy, we will update the date, and we will ask for your consent again before any new collection, use or sharing.