Consumer Health Data Privacy Policy

Before Funeral Funnel enables private planning tools that can collect sensitive or consumer health data, we present a separate affirmative consent. It is not bundled into the Terms of Service. The disclosure identifies the categories, the purpose of collection and use, the categories of processors or authorized people who may receive the information, and how to withdraw consent.

If you withdraw that consent in Privacy & account settings, private planning and further collection must stop until valid consent or another applicable legal basis permits processing. This includes application, database, private-document, built-in AI, and connected external-AI access. Any feature that cannot enforce the applicable restriction remains unavailable. Withdrawal does not itself delete data already stored. You may separately delete a plan or account or submit a verified deletion request.

Depending on what you choose to enter or upload, consumer health data may include information that identifies or can reasonably be linked to a living person and concerns that person's past, present, or future physical or mental health status or health-related services. The separate consent covers categories including:

• Health, end-of-life, care, disability, or cause-of-death planning information.
• Insurance, benefits, veteran, military-service, or healthcare-related eligibility information.
• Religious, cultural, family, or personal preferences when they reveal or are used to infer health information.
• Health, insurance, identity, advance-directive, or other sensitive documents you upload.
• Messages, notes, tasks, AI requests, or drafts that contain consumer health data.
• Technical and account information linked to use of a health-related planning feature.

Information solely about a deceased person may not be covered by every consumer-health law, but Funeral Funnel applies the same private-access, security, and deletion controls to that information where practicable.

• You, when you create a plan, answer questions, write notes, upload documents, or use an AI feature.
• Family members or collaborators whom a plan owner separately invites and authorizes to contribute.
• Your sign-in provider and your interactions with the service, for account and security information.
• Government, benefits, regulatory, or provider sources that you ask us to use or that support published guidance.
• Service providers that return operational or security information while processing data for Funeral Funnel.

New plans about another living person are paused pending a verified and legally sufficient consent or authority process. The account holder's own checkbox is not proof that another living person consented. Do not enter such a person's health information into a different plan, free-text field, attachment, or AI prompt as a workaround. Previously stored information remains subject to privacy protections, and the person it concerns (or their legally authorized representative) may make a privacy request without an account.

• Provide the planning, document, checklist, reminder, budget, family-sharing, and drafting features you request.
• Authenticate users, enforce permissions and consent gates, prevent abuse, and investigate security incidents.
• Respond to support, access, correction, consent-withdrawal, and deletion requests.
• Operate built-in AI features only when you choose to use them and send only the limited context needed for the request.
• Allow a connected external AI app to use approved Funeral Funnel plan/task tools only after your separate OAuth approval and while current sensitive-data consent remains active.
• Comply with law, protect rights and safety, and establish or defend legal claims.
• Retain limited AI writing inputs and drafts for product improvement only when optional retention is enabled.

Funeral Funnel does not sell consumer health data, use it for targeted advertising, or use geofencing around healthcare facilities to identify or message people. We do not materially expand the categories or purposes described here without updating the disclosure and obtaining any consent required by applicable law.

When law requires separate consent to share consumer health data with a third party or affiliate, that consent must be specific to the sharing, separate from consent to collect the data, and obtained before sharing. Some disclosures may instead be necessary to provide a service the consumer whose information is involved requested, where the applicable law expressly permits that exception.

Accepting the Terms and the existing sensitive-data collection/use checkbox does not, by itself, supply a separate sharing consent. Inviting a helper or connecting an external AI app is a deliberate action, but does not authorize sharing another living person's consumer health data without that person's legally sufficient permission or a valid statutory basis. If an applicable sharing requirement cannot be met, the affected access must remain restricted. You can revoke collaborator access or disconnect an external AI app separately from withdrawing collection consent, and can ask privacy@funeral-funnel.com about disclosures concerning you.

The Family & helpers sharing flow, when enabled, requires a separate affirmative choice to share a plan about yourself, and a specific authorization for each helper's invited email address. The plan-level scope covers sharing health or end-of-life details, religious and cultural preferences, benefits and financial details, documents and notes with those helpers for planning, as well as limited event and response details with invited RSVP guests for coordination. In the free release, the public guest RSVP form records only an attendance choice and party size, not meal, medical, allergy, religious or accessibility notes. Guests should contact the organizer directly for individual accommodations rather than entering health details in RSVP. It records the decision, recipient, disclosure version and time. Previous invitations do not automatically count as this authorization.

You can refuse without losing access to your own private planning tools, withdraw the plan-wide choice in Family & helpers, or remove a specific helper. Withdrawing plan sharing revokes the existing helper authorizations, stops new service-based reads and invitations, and requires fresh individual decisions before sharing is restored. Copies already downloaded or delivered cannot be recalled. This does not authorize sharing a third person's health data, and external AI apps and provider introductions require separate lawful permissions. Sharing is unavailable until the required permissions and database controls are active. A previously issued invitation is not evidence of new consent.

You may review consumer health data available through your plan and account tools and request correction of inaccurate consumer health data by updating available fields or submitting a privacy request. We may verify identity or authority before changing information that concerns another person or cannot safely be changed through the app.

Funeral Funnel does not permit a third party to collect consumer health data about your activities over time and across different Internet websites or online services when you use Funeral Funnel for advertising or cross-site tracking. The current release does not use advertising pixels or cross-site consumer-health tracking.

If this policy changes materially, we will update the effective date and provide a prominent notice in the service before the change takes effect when reasonably practicable. We will provide any additional direct notice required by applicable law and obtain affirmative consent before newly disclosed collection, use, or sharing when required.

We share only categories reasonably needed for the following purposes:

• Hosting, database, storage, authentication, and security providers: information needed to host, authenticate, store, and protect the private service.
• Built-in AI service providers: the text and limited plan context needed only for a built-in AI request you initiate. Operational logs do not retain AI chat prompt or response bodies.
• External AI apps you connect: plan or checklist information returned by the specific Funeral Funnel tools you separately approve. Current sensitive-data consent and normal plan permissions are required for each private tool call, and the external app has its own privacy and security practices.
• Email and communications providers: recipient email address, generic outward-facing invitation or reminder text, private action links, and delivery metadata when those features are enabled. The neutral email renderer does not include plan names, task titles, dates, or health details in outbound message bodies. Internal queues and access links can still contain or expose private information and require their own protections.
• Support and incident-response providers: limited account, technical, support, or affected health information only when reasonably necessary to resolve a request or incident.
• People you separately authorize: plan information and documents shared only when permitted by applicable law and the plan's enforced sharing policy. Plans about another living person, or without a verified subject, cannot be shared using family or RSVP features under the restricted sharing rules.
• Legal and safety recipients: information reasonably necessary to comply with law or protect people, rights, property, or the service.
• Transaction participants: information subject to appropriate protections during a merger, financing, reorganization, or sale.

Email delivery is used only for the invitation, RSVP, and reminder features described above. Private invitation and RSVP links are intended only for their recipient and should not be forwarded. Email delivery may be delayed, filtered, or exposed through a recipient's email provider or device, so users should avoid putting unnecessary sensitive detail into any field, link, or message that may reach an unintended recipient.

Specific affiliates with whom Funeral Funnel shares consumer health data: none at this time.

Sensitive-data consent does not automatically authorize any family member or collaborator, and an account holder cannot consent on behalf of another adult merely by choosing a plan setting. Sharing requires a permitted plan subject and independently granted access. Withdrawing current sensitive-data collection/use consent blocks future collaborator and sharing-link access to your plans when the required enforcement controls are active, including access held by existing helpers. That does not erase previously disclosed copies or automatically delete your stored data. You can separately remove individual family invitations and access grants through Privacy & account. Collection/use consent still does not replace any legally required separate sharing consent.

Where applicable, you may ask to:

• Confirm whether we collect, share, or sell consumer health data about you and access that data.
• Review and request correction of inaccurate consumer health data.
• Receive a list of third parties and affiliates with whom the data was shared, including an active email address or other available contact method for each when required by law.
• Withdraw consent to future collection or sharing where processing relies on consent.
• Delete consumer health data from active systems and direct applicable processors and recipients to delete it where required.
• Appeal a refusal to act on your request.

Submit a request or appeal from the Privacy & account area while signed in, or email privacy@funeral-funnel.com. You do not need to create a new account. We may request information reasonably necessary to authenticate your identity and authority without demanding sensitive plan details in ordinary email. For requests covered by Washington's My Health My Data Act, we must respond without undue delay and within 45 days of receipt, subject to an extension and timely notice where allowed. For Nevada consumer-health requests, the usual response deadline is 45 days after authentication, subject to a permitted extension and timely notice. Nevada additionally requires deletion from active systems and notification to relevant recipients within 30 days after authenticating a covered deletion request. Other applicable laws may require an earlier deadline.

If an appeal is denied, the response will explain the reason and provide an available method to contact the appropriate regulator or attorney general.

• Deleting a plan removes it from the active app and revokes ordinary user access.
• The current product does not automatically purge all restricted recovery copies on a timer. Retention remains subject to verified deletion rights and applicable statutory deadlines, even where backups require a restoration cycle.
• Restricted recovery copies of private files may be held for limited recovery purposes, but must be deleted or rendered inaccessible as applicable law requires after a verified deletion request. No indefinite-backup exception is promised.
• When optional product-improvement retention is enabled, limited AI writing inputs and drafts may remain in restricted storage until you opt out or an authorized deletion process removes them.
• Retained AI-writing copies keep restricted source-account lookup information solely so Funeral Funnel can honor a later opt-out or verified deletion request. Those lookup fields and retained payloads are outside normal browser access.
• Turning optional product-improvement retention off removes linked retained AI-writing copies through the current opt-out deletion flow.
• Per-plan analytics are not retained after plan deletion.
• Provider-managed backup copies may persist temporarily within a controlled restoration lifecycle. When applicable, Washington limits the backup-system deletion delay to six months after authentication of the request, while Nevada permits only the restoration-related exception in NRS 603A.515(3), for no more than two years. No unrestricted or indefinite backup exception applies.
• We notify applicable processors and recipients of verified consumer-health deletion requests where required.
• Security, fraud-prevention, legal, tax, or dispute records may be retained only when reasonably necessary or legally required.

We use private storage, row-level access controls, signed download links, upload restrictions, authentication controls, and monitoring intended to protect consumer health data. Sensitive-data sharing remains unavailable unless the database and application enforce the necessary consent and permissions. No system can guarantee absolute security. We investigate suspected unauthorized access or disclosure and provide notices to affected people and regulators when applicable law requires them.

Material policy changes follow the notice process described above. We update the effective date and obtain consent before materially expanding collection, use, or sharing where required. Questions and privacy requests can be submitted through the Privacy & account area or by emailingprivacy@funeral-funnel.com. You do not need to sign in to send an email request.