Consumer Health Data Privacy Policy

We never ask your HIV status. There is no field for it, no field for any test result, and no plan to add one. It would have been easy to stop there and tell you we hold no health data at all.

That would not be true. The law defines consumer health data broadly enough to include information about sexual activity, and information that can be inferred from other things you give us. A European regulator has already held that simply being a member of a gay app says something about a person’s sexual orientation, whatever their profile does or does not say. We think that is correct, and we would rather write this page than argue our way out of it.

• That you are here at all. Membership in JUST2BUCKS LLC’s app implies something about your sexual orientation. We treat that as the most sensitive fact we hold about you.
• What you say about sex. The role field, if you fill it in, and any tags or profile text you write that touch on sex, kink, or health. All of it is optional.
• Where you are, approximately. The blurred location that places you on the map. Location can imply visits to clinics or other health services, so we treat it as health data even though we use it only to show you who is nearby.
• Your photos and messages. Anything sexual you choose to send or post, which can imply health information about you.

We use your data to run the app: place you on the map, show you people nearby, let you filter and be filtered, deliver your messages, and keep people safe (acting on reports, and finding and reporting illegal material as the law requires).

We do not sell consumer health data. We do not share it with advertisers. We run no third-party trackers, pixels, or advertising SDKs of any kind, which is why there is no long list of ad partners on this page and never will be. Review our Charter to learn more about how we aim to make certain promises permanent.

The only outside companies that ever touch it are the infrastructure providers that keep the app running, listed in full in the Privacy Policy: Vercel, Supabase, Resend, Cloudflare, komoot (Photon). They have no right to use it or share it. We may also disclose information where the law genuinely compels us, such as a valid warrant.

We never use location to target you near a clinic or any other health facility, and we do not build or buy geofences around such places.

We ask for your agreement to collect this data separately from the terms of use, because the law says burying it in a terms checkbox is not consent, and because we agree with the law on that. You give it when you join, and you can withdraw it at any time in Settings.

To be very direct, revoking your consent does make this app impractical for you to use, because we erase the data that can carry health information: your role, your tags, and your headline. It also stops us asking for them again. Withdrawing from everything else the app processes while your account is open (your blurred map location, the messages you have sent) means deleting your account, which you can do yourself in Settings at any time.

• Confirm and access. Ask us whether we hold consumer health data about you, and what it is, and which third parties (from the list above) it has been shared with. Email us and a human answers.
• Withdraw consent. In Settings, any time, without giving a reason. It clears your role, your tags, and your headline.
• Delete. Self-serve in Settings, which deletes your profile, photos, and conversations, and propagates to our infrastructure providers. A short list of things survives, and we say what they are in the Privacy Policy (safety reports and their evidence, material the law requires us to preserve, and signals that keep a banned user from signing up again).
• Appeal. If we refuse a request, write to us and we will review it again.

Everything above goes to hello@just2bucks.app. We answer within 45 days, usually much sooner.

If you are a Washington resident, or your consumer health data is collected in Washington, the My Health My Data Act gives you the rights above and lets you enforce them under the state’s Consumer Protection Act. If you are a Nevada resident, SB370 gives you the equivalent, enforced by the Nevada Attorney General. We do not sell consumer health data.