1. Categories we may collect
Consumer health data may include:
- Domains or hostnames that identify or suggest a health care provider, pharmacy, health application, treatment, condition, reproductive or sexual health service, mental-health service, substance-use service, or other health-related information or service.
- The date and time of the DNS request, source IP address, family and device identifiers, DNS record type, connection protocol, and whether the request was allowed, blocked, or rewritten.
- Health-related domain classifications, household rules and settings, and family-member or device assignments selected by the adult account holder.
- Reports, summaries, or other inferences derived from the preceding information when they are linked or reasonably linkable to a person, family, household, account, or device.
A DNS request does not establish who used a device, whether a person received health care, or the person’s physical or mental condition. The Service does not ordinarily receive the contents of a webpage, message, medical record, or communication with a health professional.
2. Sources
We collect or derive these categories from:
- DNS requests sent by devices configured to use the Service.
- The adult account holder’s family profiles, device assignments, filtering choices, and support communications.
- Domain classifications and filtering information produced by our systems, service providers, and domain-information sources.
3. Why we collect and use it
We use potentially health-related DNS information to:
- Resolve DNS requests and apply the household’s filtering rules.
- Show allowed and blocked activity, categories, reports, and family analytics requested by the adult account holder.
- Detect configuration problems, respond to support requests, secure accounts and infrastructure, prevent abuse, and improve domain classification and Service reliability.
- Comply with law and protect the rights, safety, and integrity of people and the Service.
We collect and process this information only as necessary to provide the Service requested by the adult account holder or with legally required consent. We will disclose additional categories or purposes and obtain affirmative consent before materially expanding this processing when required by law.
4. Disclosures and recipients
We do not sell consumer health data. We do not disclose it to data brokers, advertising networks, or affiliates, and FAIM currently has no affiliate with which it shares consumer health data.
Processors may handle information on our behalf only as needed to provide the Service and under applicable contractual or other restrictions. These processor categories include cloud hosting, databases, authentication, DNS and network infrastructure, security, error diagnosis, customer support, and domain classification. Material processors are described in Section 6 of our Privacy Policy.
In our limited Anthropic-assisted classification workflow, the input does not include a customer, child, family, or device identifier or a source IP address. The workflow is described more fully in the Privacy Policy. We may also disclose information when legally required, to protect a person from serious harm, to protect the Service, or as part of a qualifying business transfer, as described in that Policy.
5. Your rights and how to exercise them
Subject to applicable law, a consumer, authorized adult account holder, or verified parent or legal guardian may ask us to:
- Confirm whether we collect, share, or sell consumer health data and provide access to applicable data and recipient information.
- Withdraw consent from future collection or disclosure.
- Delete applicable consumer health data.
- Appeal our refusal to act on a request.
Email [email protected] with the account email and the request you are making. Do not email raw DNS history, passwords, or sensitive health details. We may use the existing account or other reasonable steps to authenticate the requester and verify authority. You do not need to create a new account to make a request.
We generally respond within 45 days, or sooner when required. To appeal, reply to our decision with “Health data privacy appeal” in the subject line. Requests are provided free of charge as required by law, subject to lawful limits for manifestly unfounded, excessive, or repetitive requests. We will not unlawfully discriminate against you for exercising a right.
6. Deletion and withdrawal
When applicable law requires us to honor a deletion request, we will delete the covered consumer health data from our active systems and notify processors and other recipients that must honor the request. Data in archived or backup systems will be deleted through the normal restoration or expiration process and, for a request governed by Washington law, no later than six months after authentication unless a lawful exception applies.
Withdrawal or deletion may require us to stop filtering and analytics for the affected device. The adult account holder remains responsible for removing or replacing the easyfamilyfilter DNS configuration; leaving it installed after Service stops may interrupt connectivity.
7. Retention and security
Raw DNS query events are deleted from active telemetry systems no later than 90 days after collection. Other retention periods and our security practices are described in Sections 8 and 11 of the Privacy Policy.
8. Contact us
Questions and consumer health data requests may be sent to [email protected].
FAIM LLC, Utah, United States.