Consumer Health Data Privacy Policy

Effective date: 14 October 2026. Version 1.0.

This policy is for people who live in Washington State, and for anyone whose data LOOM Weather ("LOOM") collects in Washington. It is published under Washington's My Health My Data Act (RCW 19.373). LOOM is run by Riccardo Pittiglio, trading as LOOM Weather, Strassergasse 8-12/4/10, 1190 Vienna, Austria ([email protected]). Our Privacy Policy and Biometric Data Policy cover the rest.

1. The consumer health data we collect, and why

LOOM is a weather and clothing app. It does not ask for, and is not built to collect, information about your health.

The one kind of data in LOOM that the Act can count as consumer health data is biometric data: the selfie used to make an Avatar, the Avatar itself, and try-on pictures showing it.

The Avatar is not offered in Washington. We do not let anyone in Washington create an Avatar or try on with one. We decide this from four signals:

• the state you tell us you live in (on a US App Store account, the app asks you once);
• your phone's own location check, if you allowed it. The app sends us only whether the phone is in Illinois, Washington or Texas, never coordinates, and nothing about where you are is kept;
• the country of your App Store account;
• the country your connection comes from.

• If any one of them says Washington, the Avatar is off.
• On a US account with no state signal at all, it is off too.

If we still learn that we collected biometric data from a Washington consumer, for example someone who lives in Washington and made an Avatar while travelling:

• it was used only to make that person's Avatar and show try-ons on it;
• we delete it when we learn of it, unless the person asks us to keep it and gives the consent described in section 5.

Other things you might add to LOOM are not health data, and we do not use them to infer anything about your health or body:

• photos of your clothes;
• messages to the stylist (please don't send health information there);
• your city's weather, including air quality and pollen on the Forecast screen.

2. Where it comes from

Only from you: the selfie you take or upload in the app.

3. The consumer health data we share

Biometric data (selfie, Avatar, try-on pictures), only to make the Avatar and try-ons.

4. Who we share it with

These processors act only on our instructions:

• FASHN AI (United Kingdom), which makes the Avatar and try-ons;
• fal.ai (United States), which removes backgrounds and helps make the Avatar;
• Cloudflare (its servers around the world), which stores the pictures;
• Cloudinary (United States), which holds a few older pictures and emergency copies only.

LOOM has no affiliates. We never sell consumer health data.

5. Your rights, and how to use them

Under the Act you can:

• confirm whether we collect, share or sell your consumer health data, and see it;
• get a list of everyone we shared it with, with their contact details;
• withdraw consent at any time;
• have it deleted, including at our processors.

How: email [email protected], or use the app (Profile, Account & Privacy: Delete My Selfie, Withdraw Face Consent or Delete Account).

• We answer within 45 days of receiving your request. We can extend once by 45 more days when reasonably necessary, and we will tell you the reason within the first 45 days.
• It is free, up to twice a year.
• If we refuse, you can appeal by replying to our answer. Within 45 days of receiving your appeal we tell you in writing what we did and why. If we deny the appeal, we tell you how to contact the Washington Attorney General to file a complaint (atg.wa.gov).

Consent:

• We collect consumer health data only with your separate consent.
• We share it only with the processors in section 4, and only to make the Avatar and try-ons you ask for.
• We would sell it only with a signed authorisation, which we will never ask for.

6. Changes

We will not collect new categories of consumer health data, or use it for a new purpose, without telling you first and getting your consent.