MAWA Consumer Health Data Privacy Policy

Effective date: October 19, 2026

Operator: Amir Schechter. Postal address: Laskish 128, Shoham 6081343, Israel.

Privacy contact: amir.schechter@thekoliapp.com

This separate notice explains speech and related consumer health information provided through MAWA’s parent questionnaire. It supplements the general Privacy Policy and describes rights under Washington’s My Health My Data Act where that law applies. MAWA’s waitlist is intended for parents and legal guardians in the United States.

1. Categories and sources

We collect information supplied by a parent or legal guardian about a child’s stuttering, speech difficulties, speech therapy or other professional support, speaking goals and approaches already tried. Free text may contain additional speech or health details. We associate answers with the parent’s name, email, child age category, consent and questionnaire record. We receive this information from the parent through the form, not directly from the child or from a health care provider.

2. Purposes

We use these answers to understand families’ needs, develop MAWA, manage early access interest, maintain the requested questionnaire and respond to requests. The website does not diagnose or treat stuttering or make individual clinical decisions. We do not sell consumer health data or use it for targeted advertising. Additional categories or purposes require updated disclosures and any consent required by applicable law.

3. Access, disclosures and processors

Amir Schechter alone is authorized to use MAWA’s administrative area. Cloudflare processes website requests for hosting and security. Supabase stores and processes the questionnaire and associated records. Resend processes the parent’s email and welcome delivery records; welcome messages do not include questionnaire answers. These providers process information to operate the service, rather than receiving permission from MAWA to use questionnaire answers for their own independent purposes.

We do not share consumer health data with independent third parties for their own purposes or with affiliates. We do not sell this data. If a new disclosure requires separate sharing consent, we will obtain it before that sharing. The selected database is in Oregon, United States; hosting, support and provider operations may involve other locations, including access by the operator in Israel.

4. Consent and withdrawal

Before saving speech and support answers, the questionnaire shows a specific notice and Privacy Policy link above Continue. Continuing after entering the required parent details records consent to collect and use the speech information for the purposes described here. Optional MAWA updates and tips have a separate choice. You can decline to continue or email amir.schechter@thekoliapp.com to withdraw consent to future collection and use. Withdrawal and deletion are distinct requests; tell us if you also want existing records deleted.

5. Requests and appeals

Where Washington law applies, you can confirm whether we collect, share or sell your consumer health data, access it and applicable disclosure information, withdraw consent and request deletion. A legally authorized parent can make a request concerning their child. Email amir.schechter@thekoliapp.com with “Health data privacy request” and the registration email. We verify the request before disclosure; a new account is not required.

For applicable Washington requests, we respond without undue delay and within 45 days of receipt. When reasonably necessary, we may extend once by 45 days and explain the extension during the initial period. To appeal a refusal, reply to our decision or email the same address with “Appeal.” We respond to an appeal within 45 days with reasons. If denied, we provide a route to submit a complaint to the Washington Attorney General. We do not discriminate for exercising these rights.

6. Retention, deletion and protection

Saved drafts and completed records do not automatically expire because of inactivity. We keep information for the purposes described above and applicable security or legal needs. Valid deletion rights take precedence over retained submission history. We handle verified requests across associated live records and notify applicable processors. Where Washington law applies, deletion from archived or backup systems may be delayed for restoration purposes, but not beyond six months after authenticating the deletion request.

We restrict application access, use HTTPS and database access controls, and keep an encrypted application backup. These controls reduce risk but cannot guarantee complete security. Email amir.schechter@thekoliapp.com for privacy requests, withdrawal or questions.

7. Changes

We update the date and provide additional notice or consent when required before materially changing the categories, purposes or disclosures described here. This notice is linked separately from the homepage and from the general Privacy Policy.