Consumer Health Data Privacy Policy

Kream and Sugar Dating LLC. Last Updated: August 27, 2026

This policy is provided for residents of Washington State under the Washington My Health My Data Act and for residents of Nevada under Nevada's consumer health data law (Nevada Revised Statutes chapter 603A), and it is available to all users of the Service. It supplements, and should be read together with, our Privacy Policy. Where this policy and the Privacy Policy overlap, the more specific statement in this policy governs for the data it describes.

1. What This Policy Covers, and What We Do Not Collect

Kream and Sugar is a dating service. We do not collect medical records, diagnoses, medications, treatment history, or health conditions, and we never ask about your physical or mental health. We do not use any data described in this policy to infer your physical or mental health status, diagnosis, or condition.

Two entirely optional features involve data that Washington and Nevada law may treat as "consumer health data" because it is biometric in nature. Both are off by default, both require your separate, affirmative opt-in consent before any collection occurs, and declining either has no effect on your ability to use the Service.

2. Consumer Health Data We Collect (Opt-In Only)

Age verification (optional). If you choose to verify your age, we collect a verification selfie and generate a face vector (a numerical representation derived from the selfie) used solely to confirm that you are at least eighteen years of age, to prevent duplicate or fraudulent verifications, and to display the "Verified" badge you requested. If we cannot confirm your age from the selfie alone, an identity document is required to complete verification; in that case we collect images of the document and extract only the fields needed to confirm your date of birth. Full detail, including the separate written consent presented before capture, is in Section 14.3 of the Privacy Policy.
Voice analysis for matchmaking (optional). If you separately opt in to voice analysis, we retain cafe voice audio (raw audio for no more than sixty days) and derive communication-style features from it, used only to train and improve the Company's own matchmaking model. We do not create a voiceprint, and we do not use your voice to identify you. Full detail is in Sections 6.8 and 14.3.7 of the Privacy Policy.

3. Sources

All data described in this policy comes directly from you, through your own device's camera or microphone, and only after you have affirmatively opted in.

4. Purposes

Age-verification data is used only for age confirmation, prevention of duplicate and fraudulent verification, and the display of the Verified badge. Voice-analysis data is used only to improve our own matchmaking model. Neither category is used for advertising, sold to anyone, or used to train any third party's machine-learning models.

5. Sharing

Verification selfies and identity-document images are processed on our behalf by Amazon Web Services, Inc. (the Amazon Rekognition and Amazon Textract services), acting as our processor under a contract that prohibits any other use of the data. They are stored in dedicated Company-controlled cloud object storage.
Voice-analysis audio and the features derived from it are processed entirely on Company-controlled infrastructure and are shared with no third party.
We do not sell consumer health data, and we will not sell it. We do not seek, and will not request, the authorization that Washington or Nevada law would require for such a sale.

6. Retention

Verification selfies and document images are automatically deleted after thirty days. The face vector is retained while your account is active, with an outer limit of three years from your last interaction with the Service. Raw voice-analysis audio is retained no more than sixty days; derived features are retained only while your opt-in consent remains in effect. All of it is deleted when you withdraw consent or delete your account, as described in Sections 6.4 and 14.3 of the Privacy Policy.

7. Your Rights

You may, at any time and free of charge:

Confirm and access the consumer health data we hold about you, including the categories described above and the third parties with whom they are shared (listed in Section 5);
Withdraw consent to voice analysis in Settings, Privacy & Data, or withdraw biometric-verification consent as described in Section 14.3.6 of the Privacy Policy, which stops further collection and triggers the deletion described in Section 6;
Delete your consumer health data, together with your account, in Settings, Privacy & Data, Request permanent deletion, or by emailing [email protected];
Not be discriminated against for exercising these rights: both features are optional, and declining them never restricts your use of the Service (the Verified badge, by its nature, appears only for verified accounts).

To exercise any right, use the in-app controls above or email [email protected]. We will verify your identity and respond within the timeframes required by applicable law. If we decline a request, you may appeal by replying to our response or emailing the same address with the subject line "Appeal"; if your appeal is unsuccessful, Washington residents may contact the Washington Attorney General and Nevada residents may contact the Nevada Attorney General.

8. Safety Moderation Audio Is Not Collected for Health Purposes

Separately from the optional features above, voice content may be processed transiently for safety moderation, for example when a report is filed, as described in Section 2.1.4 of the Privacy Policy and Section 4.2.5 of the Terms. That processing exists solely to enforce our safety rules. It is never used to identify you by your voice, never used to assess anything about your health, and never used to infer your physical or mental state. We have scoped this policy deliberately: the opt-in features in Section 2 are listed because their data is biometric in nature; safety moderation is listed here so that the boundary is explicit.

9. Contact

Kream and Sugar Dating LLC, [email protected]. Postal correspondence may be sent to the address listed in Section 16 of the Privacy Policy.