How I handle information about your well-being.

Categories I collect and why

Scorecard result information. When you ask for a result-specific First LIFT guide by email, I receive your preferred name, email address, and the one result category needed to select the requested guide—Meaning, Awareness, Practice, Recovery, or Transfer. I use that information only to send the guide you requested and protect the delivery request from automated abuse. The request is transactional and does not enroll you in marketing. Your individual scorecard answers, scores, and calculations remain in your browser and are not submitted through the scorecard. You may instead download the guide directly without providing a name or email address; the website host may still process ordinary technical request data, including the result-revealing guide URL, when it serves the file.

Community application information. I receive your identity and contact information and your application answers about purpose, contribution, faith-shaped participation, accountability, disagreement, confidentiality, boundaries, immediate danger, autonomy, and leaving. These answers may reveal or support an inference about behavioral or psychological patterns. I use them only for secure email verification, private human admission review against the stated conduct and participation requirements, clarification, recording a decision, and application or community administration. I do not use the answers to diagnose applicants or assign personality traits.

Approved-member identity information. If you accept a member invitation, Supabase processes your email address, secured password credential, authentication user identifier, session, and ordinary security information. Lift With Meaning stores the authentication identifier beside the approved membership record so it can confirm that the signed-in person is still allowed to enter. Those identity functions do not require Supabase to receive your written application answers, scorecard answers, session notes, or future private journals.

Personal LIFT Session information. If you request or purchase a session, I may receive your scorecard result category, the situation or question you want to discuss, scheduling information, preparation or working notes, your seven-day plan, follow-up communication, and feedback you choose to share. Some of that information may reveal something about your physical or mental well-being. I use it to schedule, prepare for, deliver, and follow up on the service you requested.

Messages you choose to send. An email reply or other direct message may contain consumer health data if you choose to include it. I use that information only to respond, provide the requested service, or administer your relationship with Lift With Meaning.

Sources of this information

I collect consumer health data directly from you through a result-specific guide request, community application, booking or intake process, session, email, feedback, or other direct communication. For a guide request, the result category comes from the result displayed in your browser and submitted only when you choose email delivery.

I may also receive scheduling, delivery, payment, or transaction information from the service providers that help complete a request you made. I may associate your submitted result category, application answers, or session information with your contact information, but I do not use that information to build advertising profiles or make medical diagnoses.

When I collect or use it

I collect and use consumer health data only when it is necessary to provide a product or service you requested, or for a specific purpose to which you gave affirmative consent. I will not collect or use an additional category, or use existing data for an additional purpose, without first disclosing that change and obtaining affirmative consent when the law requires it.

Categories shared and who receives them

Third parties and affiliates. Lift With Meaning does not currently share consumer health data with third parties or affiliates as “sharing” is defined by the Washington My Health My Data Act. Lift With Meaning has no affiliates that receive consumer health data. I do not sell consumer health data.

Service providers acting on my behalf. The following providers process limited information as needed to perform the service you requested:

Resend and the email service you choose. Resend sends the result guide and community-application verification email. For a guide request, it receives your preferred name, email address, and a first-party Lift With Meaning guide link whose path reveals the requested result category. It does not receive your scorecard answers or score. For application verification, it receives the applicant’s preferred name, email address, and a one-time verification link, not the written application answers. The result-guide path is enabled only when Lift With Meaning has acknowledged that open and click tracking are disabled for the relevant Resend sending domain. Resend may still process ordinary delivery, security, and provider-log information under its own privacy practices. The email service you use to receive the message may also process or scan the message and its result-revealing guide link under that provider’s own practices; this disclosure occurs because you asked Lift With Meaning to send the guide to that address.

Kit. Kit is reserved for a separate, optional general Lift With Meaning marketing list. The current guide-delivery path does not send Kit your scorecard result category, answers, or score. The new generic marketing signup is not connected yet. Kit may continue to hold records for people who previously joined the email list, including legacy signup-source or form information from which a previously submitted result category may be inferred and marketing-email delivery or engagement information created under Kit’s settings. Those legacy records are not used for the current result-guide delivery path and remain subject to the access, withdrawal, and deletion process below.

Website infrastructure and security providers. The website host transmits a guide request to the delivery service and may process ordinary technical request data, including the result-revealing guide URL, when the result PDF is opened or directly downloaded. Lift With Meaning does not store the guide request’s preferred name, email address, result category, message, or delivery record in its own application database. To deter automated abuse, the site stores only non-reversible rate-limit markers derived from the requesting IP address and email address, along with the request window, attempt count, and any temporary block time—not the raw IP address, raw email address, scorecard answers, score, or result category in that rate-limit record. Website hosting and database providers also process submitted community application and service information as needed to host the site, transmit forms, and store records. Cloudflare Turnstile processes browser-environment and interaction signals to protect guide requests and application submissions from automated abuse; it does not receive the written application answers or scorecard answers through the Turnstile widget.

Scheduling and payment providers. Google may process booking, intake, email, calendar, and online-meeting information used to arrange and deliver a session. Stripe processes payment and transaction information, which may include the service purchased; Lift With Meaning does not receive your complete payment-card number.

Member identity provider. Supabase provides approved-member invitations, email-and-password authentication, recovery, session management, and account-security records. It receives the approved member’s email address, authentication user identifier, secured password credential, and ordinary technical information required for those functions. Lift With Meaning does not send Supabase the applicant’s written answers, scorecard answers or scores, Personal LIFT notes, or future private journal content merely because the person creates an account. If a verified privacy or deletion request concerns an account, the operational request record includes Supabase so the identity record is handled along with the local membership record.

How long I keep it

Lift With Meaning does not retain the preferred name, email address, result category, message, Resend response identifier, or delivery log from a result-guide request in its own application database. Resend may retain transactional delivery or security records under its own policy. The site’s non-reversible rate-limit markers become eligible for deletion more than seven days after their temporary block has ended and are removed when the current manual retention cleanup is run; there is not yet an automatic deletion schedule.

Application, session, and transaction retention periods are described in the general Privacy Policy. I do not keep covered information merely because storage is available, and a verified deletion request may require earlier deletion unless an applicable legal exception permits retention.

Your consumer health data rights

You may ask whether I am collecting, sharing, or selling consumer health data about you and request access to that data, including a list of any third parties or affiliates with whom it was shared or sold and a way to contact them. You may withdraw consent from future collection or sharing. You may also request deletion of consumer health data about you.

I will not unlawfully discriminate against you for exercising these rights.

How I safeguard it

I limit collection to information reasonably needed for the purpose described, restrict administrative access, use encrypted connections for transmission, and use service providers that maintain their own technical and organizational safeguards. The guide email uses a first-party link without Lift With Meaning tracking parameters, and its delivery path fails closed unless the site is configured to acknowledge that open and click tracking are disabled for the relevant Resend sending domain. No online system can promise absolute security, and an email provider may still process ordinary delivery and security information, but I will review these practices as the platform changes and will not keep covered data merely because storage is available.

How to make a request

Email manuel@liftwithmeaning.com with the subject “Consumer Health Data Request” and say whether you want confirmation and access, withdrawal of consent, or deletion. This is the current manual request process; you do not need to create an account.

To protect your information, I may ask you to reply from the email address connected to your request or provide only the additional information reasonably necessary to verify your identity. Requests are free up to twice per year. I will respond without undue delay and within forty-five days. If reasonably necessary, I may extend that period once by another forty-five days and will tell you within the first forty-five days why the extension is needed.

For a verified deletion request, I will delete covered data from active records and notify the processors, contractors, or other recipients required to honor the request. When a member identity is linked, the Supabase authentication account is handled before the local identity link is removed so an external account is not accidentally left active. Deletion from archived or backup systems may be delayed for up to six months where the law permits.

How to appeal a refusal

If I refuse to act on your request, you may appeal by emailing manuel@liftwithmeaning.com with the subject “Consumer Health Data Appeal” and explaining why you believe the decision should be reconsidered. I will respond in writing within forty-five days. If the appeal is denied, the response will explain the decision and provide a way to submit a complaint to the Washington State Attorney General.

Contact

Questions about this policy or Lift With Meaning’s consumer health data practices may be sent to manuel@liftwithmeaning.com.