Consumer Health Data Privacy Policy
Effective Date: June 1, 2026 | Last Updated: June 1, 2026
This Consumer Health Data Privacy Policy ("Health Data Policy") supplements MeetPositives' general Privacy Policy and applies specifically to consumer health data we collect, process, and share in connection with your use of MeetPositives.com and related services (collectively, the "Platform"). MeetPositives is operated by Positive Group LLC, a Florida limited liability company.
1. Why This Policy Exists
MeetPositives is a community platform for people living with herpes (HSV), HIV, HPV, hepatitis, and related conditions. By nature of that purpose, we collect and process health-related personal information — including STI/STD status, diagnoses, and related lifestyle information that members choose to share on their profiles.
Several U.S. states have enacted laws that specifically govern consumer health data outside of HIPAA. This policy is designed to comply with:
- Washington My Health My Data Act (RCW Ch. 70.372), effective March 31, 2024
- Nevada Revised Statutes Chapter 603A (NRS 603A.400–603A.920), Nevada Health Data Privacy provisions
- Colorado Privacy Act (CRS § 6-1-1301 et seq.), as it applies to sensitive health data
- Connecticut Data Privacy Act (Public Act No. 22-15), as it applies to sensitive health data
If you reside in one of these states, this policy governs your rights with respect to your consumer health data. All other members should also read this policy to understand how we handle health information.
2. What Is Consumer Health Data?
For purposes of this policy, "consumer health data" means personal information that identifies or could reasonably be linked to a specific consumer and relates to:
- A past, present, or future physical or mental health condition, including STI or STD status
- Diagnoses, symptoms, or treatment information shared on your profile or in communications
- Health-related profile fields (e.g., condition type, viral load status, treatment status)
- Any health information you voluntarily submit to us or that we infer from your use of the Platform
This does not include:
- Information that is publicly available without restriction
- De-identified or aggregated information that cannot be linked back to you
- Information regulated exclusively by HIPAA (we are not a HIPAA-covered entity)
3. What Consumer Health Data We Collect
We collect consumer health data only that which you choose to provide. This may include:
Profile information you enter voluntarily:
- Condition type (e.g., HSV-1, HSV-2, HIV positive, HPV, hepatitis)
- Treatment or medication status (if you choose to share)
- Any other health details included in your profile bio or fields
Account and usage data associated with health context:
- Profile creation date and activity on the Platform
- Messages or content you send or post (stored on our servers)
- Search and filter preferences that relate to health matching
Technical data collected automatically:
- IP address, device type, and browser information (used for security and fraud prevention, not health profiling)
- Session and analytics data (see our Cookie Policy)
We do not collect clinical health records, insurance data, genetic data, biometric data, or precise geolocation data tied to healthcare facilities.
4. How We Use Consumer Health Data
We use your consumer health data only for the following purposes:
- To provide the Platform: Matching you with other members based on shared conditions, displaying your profile, and enabling communication features
- To personalize your experience: Filtering search results and recommendations based on the preferences you have set
- To maintain platform safety: Reviewing flagged content, investigating abuse reports, and enforcing our Community Guidelines
- To communicate with you: Sending service notices, support responses, and account-related notifications
- To improve the Platform: Aggregate, de-identified analytics to understand how the Platform is used (no individual health data is used for this purpose)
- To comply with law: Responding to valid legal process as described in our Law Enforcement & Safety Requests policy
We do not use your consumer health data for:
- Targeted advertising or behavioral advertising
- Sale to third parties
- Sharing with data brokers
- Transfer to affiliate networks or partner dating sites
5. Who We Share Consumer Health Data With
We treat your health information with the highest degree of confidentiality. We share it only in the following limited circumstances:
| Recipient | Purpose | Notes |
|---|---|---|
| Hosting & infrastructure providers | Platform operation | Bound by data processing agreements |
| Payment processors (PayPal) | Processing membership payments | Payment data only; health data not shared |
| Support platform (support.meetpositives.com) | Customer support | Limited to data needed to resolve your request |
| Legal authorities | Valid legal process only | See Law Enforcement & Safety Requests |
We do not sell, rent, license, or share your consumer health data with:
- Advertisers or ad networks
- Other dating platforms or affiliate sites
- Data brokers or data aggregators
- Research institutions (without separate opt-in consent)
6. Your Rights by State
Washington Residents
Under the Washington My Health My Data Act, you have the right to:
- Confirm whether we collect, share, or sell your consumer health data
- Access a copy of the consumer health data we hold about you, including a list of all third parties with whom it has been shared
- Delete your consumer health data (subject to legal retention obligations)
- Withdraw consent you previously provided
- Appeal a denial of any of the above rights
To exercise these rights, submit a request via support.meetpositives.com and select "Health Data Request." We will respond within 45 days (extendable by 45 additional days if we notify you). We do not sell your consumer health data.
Nevada Residents
Under Nevada Revised Statutes Chapter 603A, you have the right to:
- Confirm whether we collect your consumer health data
- Access the consumer health data we hold about you
- Delete your consumer health data
- Correct inaccurate consumer health data
- Opt out of the sale of your consumer health data (we do not currently sell this data)
Submit requests via support.meetpositives.com. We will respond within 60 days (extendable by 30 days with notice).
Colorado Residents
Under the Colorado Privacy Act, health data is classified as sensitive data requiring your affirmative opt-in consent before we collect or process it. You provided this consent by creating a profile and voluntarily entering health information. You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your personal data
- Data portability — receive your data in a portable format
- Opt out of targeted advertising, profiling with legal effects, and data sales (we do not engage in any of these)
Appeals: If we deny a rights request, you may appeal by contacting us at support.meetpositives.com within 30 days of our denial. We will respond within 45 days.
Connecticut Residents
Under the Connecticut Data Privacy Act, you have the same categories of rights as Colorado residents above (access, correction, deletion, portability, opt-out). The same appeal process applies.
All Other Members
Regardless of your state of residence, you may request a copy of the health-related information on your profile, delete your account per our Account Deletion & Data Retention policy, or contact us with any questions about how your data is handled.
7. Data Retention
We retain consumer health data for as long as your account is active. Upon account deletion:
- Profile health fields are deleted within 30 days
- Backup systems are purged within 90 days
- Data required to be retained by law (e.g., billing records, fraud investigation records) is retained for the legally required period and then deleted
See our Account Deletion & Data Retention policy for full details.
8. Security
We implement reasonable administrative, technical, and physical safeguards to protect consumer health data, including:
- Encryption of data in transit (TLS) and at rest
- Access controls limiting which personnel can access member health data
- Regular review of data handling practices
- Processor agreements requiring equivalent protections from third-party service providers
No security system is perfect. If you become aware of any unauthorized access to your data, please notify us immediately at support.meetpositives.com.
9. Children
MeetPositives is strictly for adults aged 18 and over. We do not knowingly collect any personal or health data from individuals under 18. If we discover that a minor has created an account, we will delete the account and all associated data immediately.
10. Changes to This Policy
We will update this policy when our data practices change or when new state laws require updates. We will notify you of material changes by posting a notice on the Platform and updating the "Last Updated" date above. Continued use of the Platform after notice constitutes acceptance of the updated policy.
11. Contact Us
To submit a health data rights request, ask questions about this policy, or raise a concern:
- Support Portal: support.meetpositives.com
All requests are processed within the timeframes stated in Section 6 by state.
This policy does not modify or supersede any other agreement between you and MeetPositives. For the full scope of our data practices, please also review our Privacy Policy and Terms of Service.