GanzyJoin Team Ganzy

Ganzy Consumer Health Data Privacy Policy

Effective 27 October 2026

This policy is published by Ganzy Limited (company number 807542), 11 Eastgate Way, Little Island, Co. Cork, T45 TD77, Ireland. It adds to our Privacy Policy at ganzy.app/privacy.

Some information you give Ganzy could be "consumer health data" under Washington, Nevada and Connecticut law. Ganzy is a planning app. We don't diagnose or treat anything, and we don't ask whether you have a diagnosis. Because Ganzy is designed for students with ADHD, the law may treat the following as health data.

1. Health data we may collect, and why

CategorySourceWhy
The fact that you use an app designed for students with ADHDYou, by signing upProviding Ganzy
Dread ratings (1–5)YouCalculating points
Skip reasons and chat messages that mention health, mood or wellbeingYouDeciding whether to swap your Main Quest
Inferences from your activity, such as which tasks you tend to skipOur app, from your useOrdering your tasks and calculating points
Safety flags from our crisis screenOur safety featureShowing crisis resources; checking the feature works

We collect this only to provide the features you ask for, and only after you agree on a separate consent screen in the app. We won't collect it for any other purpose without your separate consent.

2. Who we share it with

We disclose health data only to processors that handle it for us under contract:

  • OpenAI (OpenAI Ireland Limited and OpenAI, L.L.C.), for AI processing;
  • Amazon Web Services EMEA SARL (hosting; data stored in Ireland) and Cloudflare, Inc. (network security);
  • Zoho (Zoho Mail), for account emails only.

We have no affiliates that receive it. The activity report we send parents never includes health data. We don't "share" health data with third parties as the law defines sharing, and we won't without your separate consent. We don't sell consumer health data. We don't use geofencing around any health-care location.

3. Your rights

You, or your parent if you're under 18, can:

  1. confirm whether we hold your health data, and see it;
  2. get a list of every third party and processor we've disclosed it to, with their contact details;
  3. withdraw your consent at any time;
  4. have it deleted, including from our backups and our processors' systems (backups are cleared within 35 days).

To make a request, use Settings > Privacy or email privacy@ganzy.ie. We'll respond within 45 days, and if we need more time, we'll tell you and take at most 45 more. If we refuse, you can appeal by replying to our decision. We'll answer the appeal within 45 days and tell you how to contact your state Attorney General if you disagree.

4. Who can access it at Ganzy

Only staff who need it to run or fix the service can access health data, and every access is logged.

5. Contact

Ganzy Limited, 11 Eastgate Way, Little Island, Co. Cork, T45 TD77, Ireland · privacy@ganzy.ie