Consumer Health Data Privacy Policy

CONSUMER HEALTH DATA PRIVACY POLICY

For people in Washington, Nevada, Connecticut and other US states with consumer health data laws

Effective date: 31st October 2026

Why this page exists

If you live in Washington, Nevada, Connecticut or another US state with a consumer health data law, this page is for you. It explains, in plain words, what health information we collect, where it comes from, who we share it with, and how you stay in control of it. It is written to meet Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370) and the consumer health data protections in the Connecticut Data Privacy Act.

We are The Thompson Method (The Trustee for the 4 Good Unit Trust, ABN 85 145 868 031), a maternal health company in Queensland, Australia. This page covers The Thompson Method program and Academy, the My Milk Map app, our AI chat (The Thompson Method AI Care Assistant), Breastfeeding Rescue consultations and Fine Tuning Sessions. It sits alongside our Privacy Policy and our AI Chat Privacy Policy.

The short version. We never sell your personal information, including your health information. If you choose to join the Infant Feeding Index, we may license de-identified information, which can't be linked back to you, for research, sometimes for a fee. We never share it with advertisers, and there are no advertising pixels or trackers inside the My Milk Map app. We ask for your consent before we collect your health data, and we ask again, separately, before we share any of it for research.

The health data we collect, and why

Your pregnancy and your baby. For example your due date, your baby's date of birth and how you hope to feed. We use it to show you the lessons and support that fit your stage.
Your map. Your daily wellbeing check-ins, feeds per day, wet and dirty nappies, and how you use the Wellness Centre. We use it to build your feeding map and show you your own patterns.
Your notes. Anything you write in the app. We keep it for you.
Your chat messages. The questions you ask The Thompson Method AI Care Assistant, in the app or on thethompsonmethod.com. We use them to answer you, to point you to the right lessons, and so a member of our team can check the quality of the answers.
Consultation records. Notes and photos from a Breastfeeding Rescue consultation with a certified Thompson Method Practitioner, IBCLC or midwife, and notes from a Fine Tuning Session with one of our Advanced Practice Educators. We use them to look after you and to keep the records the law requires. Consultations and sessions are never recorded.
What you've bought. That you bought a program or subscription, and your progress through lessons. On its own this can suggest you are pregnant or breastfeeding, so we protect it in the same way as your other health data.
Your device. Device type, app version and your approximate country or region worked out from your internet address, to keep the app working and secure. We never collect your precise location.

We use your health data only for these purposes. If we ever want to collect something new, or use it in a new way, we'll tell you first and ask for your consent.

Your consent comes first

In the My Milk Map app, your feeds, check-ins and notes stay on your own phone until you choose to turn on cloud sync. Before you do, we show you a screen that explains how we handle your health information and ask for your consent. If you choose "Not now", everything still works on your phone and nothing is stored with us. Sharing for research is a separate choice, on its own screen, and it is off unless you turn it on (see "The Infant Feeding Index" below).

Where the data comes from

You. Most of what we hold is what you type or tap into the app, the chat or a form.
Your use of the app. For example, which features you open.
Our practitioners and educators. They write notes during a Breastfeeding Rescue consultation or a Fine Tuning Session that you book.
Payment providers. Stripe and Kajabi Payments tell us whether a payment went through and which plan you're on. Your card number never reaches us.
Partners who refer you. If a partner app or service refers you to us, they pass us only the details needed to welcome you, and only with your permission.

Who we share it with

We share consumer health data only with the service providers who help us run our services, only on our instructions, and only what each one needs.

Amazon Web Services (AWS). Hosts and stores everything in the app and the chat, encrypted, in the United States (US East).
Anthropic (Claude) and Cohere, through Amazon Bedrock on AWS. The AI models behind the chat. They receive your chat messages with identifying details such as names and contact details removed first. AWS does not share your messages with them, and your messages are never used to train AI.
Cliniko. Our clinical records system, for consultation notes and photos.
Zoom. For Care and Connect calls and Fine Tuning Sessions. It knows you attended, and nothing is recorded.
Stripe and Kajabi Payments. Purchase and subscription details.
Kajabi. Your name, email and course access. Never your map, your notes or your chats.
Google Workspace. Our team email, if you email us about your health.
Our professional advisers. Our lawyers, accountants and insurers, only what they need and only when they need it.

Our related businesses. We do not share your consumer health data with any affiliate or related business.

When the law requires it. We may disclose information if a valid law or court order requires us to, and we'll only give what that law or order requires.

The Infant Feeding Index (only if you choose)

The Infant Feeding Index is our research into how women prepare for and feed their babies. It's completely your choice, on its own screen in the app, and it's off unless you turn it on. If you say yes:

We give your records a new random code with no link back to you, and remove your name, your email and anything else that could identify you before your information goes into the Index. Your notes and chat messages never go in.
We may share or license this de-identified information, sometimes for a fee, with health organisations, researchers, universities, government bodies and insurers, to help improve care for mothers and babies. This may include summary findings and individual de-identified records.
Everyone who receives it must agree in writing never to try to identify you, and never to use it for advertising.
You can turn it off at any time in Settings. We then stop adding your information from that moment. Information already used in research can't be taken back, because it no longer carries any link to you.

Our public surveys are separate from My Milk Map and are never linked to your account. Sponsored research studies are separate again, and have their own consent form.

What we will never do

Sell your personal information, including your consumer health data.
Share your health data with advertisers or advertising platforms.
Put advertising pixels or trackers inside the My Milk Map app or our AI chat, including the chat on thethompsonmethod.com.
Use geofencing around clinics, hospitals or any health care provider to track you or send you ads.

Your rights, and how to use them

You can ask us to:

Tell you what we hold, and give you a copy. We'll confirm whether we collect or share your consumer health data, give you a copy, and give you a list of every third party and affiliate we've shared it with, with an email address or other way to contact each one.
Delete it. We delete your consumer health data within 30 days of confirming your request, and tell every service provider we've shared it with to delete it too. Our backups clear on a rolling 90-day cycle, and deleted information is never restored from them.
Withdraw your consent to us collecting or sharing it. Some features may stop working, and we'll explain which.
Correct it, if you live in Connecticut, or anywhere we can do it for you.
Appeal if we say no to any request.

How to ask. Use the privacy settings in the app, email privacy@thethompsonmethod.com, or write to us at PO Box 13, Rainbow Beach QLD 4581, Australia. You don't need to create an account, and we'll check it's really you before we act.

How long it takes. The law gives us 45 days, which we can extend once by another 45 days in a complex case if we tell you why within the first 45. Our own goal is 30 days. Requests are always free.

Appeals. Email privacy@thethompsonmethod.com with "Appeal" in the subject line. We'll reply in writing within 45 days, explaining what we did and why. If we still say no, you can complain to your state Attorney General. In Washington, that's the Washington State Office of the Attorney General, which has an online complaint form at atg.wa.gov.

Changes to this page

If we change how we handle your health data, we'll tell you in the app or by email before it takes effect, and ask for your consent again where needed. The effective date at the top shows when this page last changed.