Consumer Health Data Privacy Policy

We collect food and beverage descriptions, portions, nutrition estimates, food photos submitted for recognition, height, weight and weight history, target weight, birthday, gender, activity level, fitness goals, exercise plans, workout records, sets, repetitions, loads, available equipment, and related coach prompts and conversations. We derive calorie targets, food and training summaries, and progress or body-composition-related inferences. Account identifiers link this information to you. Health details voluntarily included in prompts or images may also be processed.

The app does not request biometric templates for identifying people or precise geolocation. Body measurements, photos, and health inferences may nevertheless fall within broadly defined consumer health data. Do not submit unrelated medical records or another person’s health information.

We use these categories to provide the food logging, nutrition estimation, goal calculation, exercise planning, workout tracking, progress views, reminders, and AI coaching you request; to maintain your saved records; and to secure and troubleshoot those features. Photos are processed for recognition and temporary preview rather than stored with saved food entries. We do not use health data for targeted advertising or sell consumer health data.

Sources include you when you enter records, upload a photo, use the coach, or set profile preferences; applications you authorize to provide or change records; and estimates or inferences generated from that information. Device time-zone information can help organize your records and reminders.

Authentication and database processors such as Supabase handle account-linked records and storage. AI processors such as OpenAI receive the food text or photos you submit and relevant profile, food, or exercise context needed for a requested coach response. Hosting and infrastructure processors handle requests and operational information needed to run these services. Notification processors handle delivery identifiers and reminder content if you enable notifications.

External applications you authorize may receive food records, body measurements, fitness history, goals, and other records within their approved permissions. These recipient categories are distinct from processors working on our behalf. Flabsolutely does not share health data with advertising networks or affiliates for their own marketing purposes. Legally required disclosures are subject to applicable protections. Where separate consent or authorization is required for sharing, collection consent alone does not authorize that sharing.

Where applicable, you may request confirmation of collection or sharing, access to your consumer health data and relevant third-party recipients, withdrawal of consent to collection or sharing, and deletion of health data. Use the contact details below to exercise these rights or appeal a denial. Include the account email and the right you wish to exercise, without including unnecessary health details. We may request proportionate verification to protect your information.

You can also review records in the app and delete your account in Profile. A withdrawal can prevent continued use of features that depend on the withdrawn processing. Required deletion includes notifying applicable processors and recipients as the law requires; backup handling and permitted exceptions may affect completion. If an appeal does not resolve a Washington health-data request, you may submit a complaint to the Washington Attorney General at atg.wa.gov/file-complaint. We will not unlawfully discriminate against you for exercising these rights.