For sexual-wellness apps and connected-toy makers with users in Washington

One tick box for collecting and sharing is two consents short.

Assent keeps what Washington’s My Health My Data Act asks of a company holding sexual and reproductive health data: every version of the health-data privacy policy, each consent request checked against the four things it must say with sharing asked separately, every signed sale authorization and its expiry, and every access, delete and withdraw request on its 45-day clock.

Open the demo See pricing

Opens in this browser with an invented toy maker already in it. No account, no email address, nothing installed.

Open the free demo →

The problem

Sexual health data is consumer health data.

Washington’s law counts reproductive and sexual health information as consumer health data. Collecting it needs consent; sharing it needs a separate and distinct consent. Each request says what, why, who gets it and how to withdraw. Selling it needs a signed authorization that expires after a year. Requests are answered inside 45 days. A sexual-wellness app holds exactly this data.

Sexual health

information is named in the definition of consumer health data.

RCW 19.373.010 →

Separate

consent to share, distinct from the consent to collect.

45 days

to answer a request to see, delete or withdraw, ninety once extended.

Will not call the file in order with a stop in it.

A bundled sharing consent, a request that does not say how to withdraw, a sale running past its year, a request past its clock and a deletion not passed on to processors are each a stop. A policy version is added, never edited, so the history the regulator asks for is the history you had.

How it works

Policy, consents, sales, requests

Record each policy version

The day it took effect, the categories it discloses, and whether it is linked from the home page.

Check each consent request

What it discloses against the four required things, sharing asked separately, and each person’s yes and withdrawal.

Keep sales and requests

Signed authorizations with their expiry, and every request on its clock. Print the file.

What it will never do

It keeps the file. It asks nobody for consent.

Assent records what your product asks and what people said. It collects nothing itself.

No user data.Assent records consent events, not health data.

No app link.Nothing is sent to or pulled from your product.

It is not a lawyer.A complaint to the Attorney General goes to one. Assent is the file you take with you.

It never touches a payment.The subscription is for software.

Pricing

Priced per company

Less than one hour of a privacy lawyer a year.

Most makers

One company

$15/month

One app or connected-toy company.

Policy history, never edited
Consents checked as written
Requests on the 45-day clock

One company, yearly

$150/year

The same, two months free.

Everything in One company
Sale authorizations and expiry
Export for your lawyer

Subscription. Your bank statement says Assent Software. Refunded in full on request within 30 days. Your licence key is emailed to you within two working days of payment.

Checkout is our own bitcoin server, not a card processor — nobody we had to apply to and nobody who can close the account. The button takes you straight to it. Give your email address there — that is where your key is sent.

Questions

The ones we actually get asked

Is toy usage data health data?

Sexual health information is consumer health data under the Washington law. Assent treats your categories as you disclose them.

Why separate consents?

The law asks for consent to collect and a separate, distinct consent to share. One tick box for both is a stop.

How long is a sale authorization good for?

One year. It is kept for six. Assent shows both dates.

Is this legal advice?

No. It is the file you wish you had kept.

What do I actually get when I pay?

The demo on this page is the whole program, running on invented records. Paying gets you a licence key — one line of text, emailed to the address you give at checkout within two working days. Paste it into the program and from then on it keeps your own records. Until then, nothing you type into it is kept.

The key is checked inside the page, on your own machine. It never calls us, so there is still no account and nothing about your business goes anywhere. If you ever stop paying, your records stay exactly where they are, read-only, and Export still hands you every one of them.

Open the demo before the next release

The invented toy maker bundles its sharing consent, an ad-partner request never says how to withdraw, a sale is running a month past its year, an access request is late and a deletion was never passed on. Assent stops every one.

Open the demo See pricing