Consumer Health Data Privacy Policy

This policy applies to "consumer health data" that MB Technologies LLC ("we") collects through Fluffer, as defined by Washington's My Health My Data Act, Nevada's SB 370, Connecticut law and similar laws. Our Privacy Policy covers everything else.

#Consumer health data we collect, and why

• That you use Fluffer, a sexual-wellness app, and the account information linked to that use: to provide your account.
• The toys you connect (type, the names you give them, Bluetooth IDs) and your toy settings (power limits and preferences): to connect and control your toys safely.
• The patterns, vibetracks and Fluffer Audio vibration scripts you save: to store, sync and play them.
• Your toy's status (type, battery, motor state) and commands while Remote API is on: so code you connect can control your toy.
• Information in reports about intimate or exploitative content: to keep people safe and meet legal duties.

We collect this only as needed to provide the features you ask for, or with your consent. We don't sell it, use it for advertising, infer health conditions from it, use it to train AI, or use geofences.

Where it comes from: you, your phone and your toy; other users who report content; apps and code you connect.

#Who we share it with

• Service providers that host and run Fluffer: Supabase (database and storage), Vercel (servers), Sentry (crash reports), Gleap (support), and Google Cloud and Microsoft (safety scanning).
• Apps and games in the Fluffer Store that you choose to allow: an app-specific ID, confirmation that you're an adult, and access to control your toy. We share only with your separate permission for each app, and you can withdraw it in Settings → Apps with access.
• NCMEC and law enforcement, where the law requires.

We don't share consumer health data with affiliates. Our Motorbunny online shop is part of the same company, and Fluffer's consumer health data isn't shared with it or linked to shop orders. [To be confirmed]

Your rights. You can confirm whether we collect, share or sell your consumer health data; access it, including a list of every third party we've shared it with and how to contact them; withdraw your consent; and have it deleted. When you ask us to delete it, we also tell our service providers and third parties to delete it, and remove it from backups within 6 months.

We respond within 45 days, and may extend this once by 45 days if we tell you. If we decline, you can appeal and we'll answer within 45 days. If your appeal is denied, you can contact the Washington Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov) or the Connecticut Attorney General (portal.ct.gov/ag). We won't treat you differently for using these rights.

How to make a request: email privacy@fluffer.app, or in the app: Settings → Privacy → Download my data, and Settings → Delete account. We confirm requests through your signed-in account or account email.

Tracking. We don't let third parties collect consumer health data about your activity over time or across other websites or apps.

Changes. We'll post updates here, change the date above, and ask for your consent again before any material change in how we collect or share consumer health data.

Contact. MB Technologies LLC, 530B Harkle Rd, Ste 100, Santa Fe, NM 87505, USA · privacy@fluffer.app