Hubba Baba Consumer Health Data Privacy Policy
Last Updated: August 30, 2026
This Consumer Health Data Privacy Policy explains how Hubba Baba, operated by JMP, an independent sole trader (autónomo) established in Spain (VAT/NIF ES46989635Z) Capità Mirambell 22, 08320 el Masnou, Spain (“Hubba Baba,” “we,” “us”), collects, uses, and shares consumer health data of residents of Washington and Nevada, and consumers whose consumer health data is collected in those states, as defined by the Washington My Health My Data Act and Nevada Senate Bill 370. It supplements our general Privacy Policy. To the extent of any conflict regarding consumer health data, this policy controls.
1. What Consumer Health Data We Collect
Hubba Baba is a dating app — we are not a health service and we do not seek out health information. However, some information collected through the Services falls within the broad legal definition of “consumer health data”:
- Biometric data: A verification selfie, and any facial geometry data derived from it, used solely to verify that your account belongs to a real person who matches their profile photos.
- Optional self-reported profile fields: If you choose to provide them, profile and filter fields such as blood type and information about your sexual orientation or relationship preferences. These fields are optional, are provided by you, are not verified by us, and are displayed or used only as you direct for matching purposes.
- Inferences: Limited inferences derived from the optional fields above solely to provide the match filters you request (for example, showing you profiles that match a filter you set).
We do not collect medical records, diagnoses, treatment information, medications, gender-affirming care information, reproductive health service information, or precise location data related to health services, and we do not use geofencing of any kind around health care facilities.
2. Sources of Consumer Health Data
We collect consumer health data only from:
- You, when you complete selfie verification or choose to fill in optional profile fields; and
- A matchmaker acting on your behalf with your consent, if your profile is managed through Matchmaker Mode.
We do not collect consumer health data from data brokers, advertising networks, or public sources.
3. Why We Collect It (Purposes)
We collect and use consumer health data solely to:
- Verify your identity and prevent fraudulent accounts, bots, and impersonation (verification selfie);
- Provide the profile display and match-filtering features you request (optional profile fields);
- Maintain the safety and integrity of the Services, and comply with legal obligations.
We do not use consumer health data for advertising, and we do not sell it.
4. Consent
We collect consumer health data only with your prior, separate consent, obtained through a clear affirmative act before collection:
- Verification selfie: A standalone biometric consent screen is presented in the app before your selfie is captured or processed.
- Optional profile fields: These fields are blank by default and are collected only if you choose to fill them in after being shown a notice that links to this policy.
We will not collect additional categories of consumer health data, or use your consumer health data for new purposes, without obtaining new consent. Any sharing of consumer health data beyond what is described in Section 5 would require your separate consent, and any sale of consumer health data would require your signed, written authorization — we do neither.
5. How We Share Consumer Health Data
We do not sell consumer health data, and we do not share it for advertising. Consumer health data is disclosed only to:
Our processors (service providers):
- Google LLC (Gemini API): processes verification selfies on our behalf to perform the verification check, under terms that prohibit use of the data to train or improve Google’s AI models. Google may retain API inputs transiently (up to approximately 55 days) solely for abuse and safety monitoring, after which they are deleted.
- Our cloud hosting provider (servers located in Council Bluffs, Iowa, USA): stores optional profile fields as part of your account data.
- Other users, at your direction: Optional profile fields you add to your profile are displayed to other users as part of the Services you have requested.
- Legal requirements: We may disclose consumer health data if required by law, subpoena, or legal process.
Affiliates: We do not share consumer health data with any affiliated companies. If this changes, we will update this policy and list the specific affiliates before any sharing occurs.
Our processors are bound by contracts limiting their processing of consumer health data to the purposes described in this policy.
6. How Long We Keep It
- Verification selfies and biometric data: Deleted immediately upon completion of the verification process (including human review of failed checks). See the Biometric Information section of our general Privacy Policy for full details.
- Optional profile fields: Retained while your account is active or until you remove them from your profile, whichever comes first. Deleted or de-identified within thirty (30) days after account deletion.
7. Your Rights
If you are a Washington or Nevada resident (or your consumer health data was collected in those states), you have the right to:
- Access your consumer health data, including a list of the third parties and affiliates with whom we have shared it and a contact point (email address or website) for each;
- Withdraw consent to our collection and sharing of your consumer health data;
- Delete your consumer health data. Upon a verified deletion request, we will delete the data from our records — including archived and backup systems within the timeframe permitted by law — and instruct our processors to do the same;
- Not be discriminated against for exercising any of these rights.
How to Exercise Your Rights
- Email [email protected] with the subject line “Consumer Health Data Request,” or
- Mail your request to: JMP (HubbaBaba), VAT/NIF ES46989635Z Capità Mirambell 22, 08320 el Masnou, Spain.
You can also remove optional profile fields yourself at any time by editing your profile in the app, and withdraw biometric consent by deleting your account (Profile → Delete Account → confirm).
We will verify your request using the email address or phone number associated with your account and respond within 45 days, with one 45-day extension where reasonably necessary (we will notify you if an extension is needed).
Appeals
If we decline your request, you may appeal within a reasonable period by replying to our decision or emailing [email protected] with the subject line “Consumer Health Data Appeal.” We will respond to appeals within 45 days. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.
8. Changes to This Policy
We may update this policy from time to time. We will post the updated version here and revise the “Last Updated” date. Material changes affecting how we collect or share consumer health data will require your new consent before they apply to you.
9. Contact Us
JMP (HubbaBaba)
VAT/NIF ES46989635Z Capità Mirambell 22, 08320 el Masnou, Spain
Email: [email protected]
Website: hubbababa.com