Consumer Health Data Privacy Policy

This policy covers the health information Afters, Inc. (“Afters”, “we”) collects about you. Our Privacy Policy covers everything else.

What we collect and why

• The procedures and body areas you’re considering
• Whether you want to see results for women or men
• Your goals, concerns and worries, including anything you write
• Treatments you’ve had before
• Whether you’re open to surgery
• Your timeline, budget range and recovery time
• Your ZIP code and how far you’d travel
• A practice you’re already talking to
• Results you like, pass on or save
• The practices you pick and why
• Your questions and requests to practices, and the messages and quotes you exchange with them
• Your photos
• The results and practices you look at while you’re signed in

When it’s linked to any of these, we treat your name, email and phone number as health information too.

We use it to build your plan, show you results and practices that fit it, email you about your plan and your requests, send your requests to the practices you choose, show you their quotes and let you message them, count how many people finish each intake step, keep Afters working and secure, and meet legal duties. We don’t use it to train AI, and apart from what ad tools can see in a page’s address (see Tracking by other companies), we never use it for advertising.

We ask for your consent before we save it: the intake and every request and photo screen show a consent box first. Some things are saved to your account without that box while you’re signed in: the results and practices you look at, the results you like or save, and procedures, a ZIP code or timing you add to your account or My Plan.

Where it comes from

From you; from the practices you contact (their quotes and messages); and from our own systems, such as which step of your plan you’re on.

How we handle it

We store it with companies that run parts of Afters for us, and only Afters staff who need it for their work can see it.

What we share, and with whom

We share the categories above only as described here.

• Practices you send a request to. Until a practice accepts your request, Afters shows it the procedures you’re asking about, the areas you want to change, the goals and concerns you picked, what you’d like to keep or avoid, whether you’ve been treated before or want a revision, your timeline, the recovery time you can set aside, your budget range, how far you’d travel, which photo views you added, and your city and how far you are from them, but not your name, ZIP code, photos or anything you wrote. A practice that accepts it also sees your first name, your ZIP code, your questions for them, why you chose them, anything else you wrote, the results you saved or liked, and your photos. Your full name, phone and email go only to the practice whose quote you pick. A request you send through a practice’s own website form, or one a practice enters for you, goes only to that practice, which sees everything in it from the start, including your full name, phone and email. Practices may pay Afters a fee when you accept one of their written quotes. If a Washington ZIP code is on your request, your plan or your Afters account, or your request goes to a practice in Washington, no practice pays Afters a fee for that request, even if you accept its quote.
• People you send a link to, such as a shared plan, quote or board.
• Companies that run parts of Afters for us: hosting and database, file and video storage, email delivery, marketing email and location lookup.
• The law, when it requires it.
• A buyer of Afters, if Afters merges or is sold.

Apart from what ad tools can see on our public pages (below), we don’t share it with advertisers, ad platforms, data brokers or anyone you didn’t choose.

Tracking by other companies

Ad and analytics tools never load where you answer intake questions, upload photos, see your plan or quotes, message a practice or send a request, or on practice profiles and result pages. On our other public pages, Google, Meta and TikTok may collect information about your visit over time and across other websites, including the address of the page you’re on. That address can name a procedure, but they never load on a page whose address holds a search, a ZIP code or anything from your account. We never send these tools what you search for, your answers, your plan, your photos, which results you save or your requests. They don’t load if your browser sends Global Privacy Control, and you can turn them off on our Privacy Policy page.

Your rights

• Confirm whether we collect, share or sell your health information, and see it.
• Get a list of every practice and other company we’ve shared or sold it to, with an email address or other way to reach each one.
• Withdraw your consent to our collecting or sharing it.
• Ask us to correct it.
• Delete it. We delete it within 30 days of confirming your request. Deleting your account deletes your plans, requests, photos, messages and the videos practices recorded for you, and we tell each practice that got a request from you to delete what it received. We keep billing records of accepted quotes, with your name and email removed. An appointment you booked stays on that practice’s calendar. We also delete the copies kept by the companies that run parts of Afters for us, or ask them to. Copies in backups clear within 6 months.

To use any of these rights, email privacy@realafters.com. If you have an account, you can also delete it in Account, Settings. Without an account, email us and we’ll ask a few questions to find your answers. We answer within 45 days, and may take 45 more when we need to, telling you why. To appeal our answer, reply to it. We’ll answer within 45 days and, if we still say no, tell you how to contact your state Attorney General.

Changes

Before we collect new kinds of health information, use it for a new purpose or share it with new kinds of companies, we’ll ask for your consent, by email if you have an account. We post every change here with a new effective date.