Consumer health data privacy policy
Last updated
This policy is for people in Washington and Nevada, whose state laws give specific rights over consumer health data: Washington’s My Health My Data Act, and Nevada’s Senate Bill 370. It adds to our privacy policy, which covers everything else. Where the two differ, this policy applies to consumer health data.
Fit Shapes is operated by Sam Solomon, 3423 Piedmont Rd NE, Atlanta, GA 30305.
The short version
- We collect health data so the app can do what you ask: log what you eat, track your weight, and calculate your targets.
- We do not sell consumer health data, and we do not share it for advertising. We have no advertising and no analytics.
- Only the service providers that run the app receive it, on our instructions.
- You can see it, get a copy, and delete it at any time.
The health data we collect
| Category | Examples |
|---|---|
| Personal details used for targets | Sex, date of birth, height, activity level |
| Body measurements | Weight and body fat |
| Food and nutrition | Food entries, portions, calories and macros, saved foods |
| Goals and preferences | Goal direction and rate, diet and protein preferences |
| Targets and coaching history | Calorie and macro targets, weekly check-ins and their results |
| Workouts | Exercises, sets, and routines you log |
| Apple Health data | Weight, body fat, and active energy, if you connect Apple Health. Daily food totals that another app saved to Health, if you import them |
| Meal photos and food descriptions | Sent for analysis; kept on your iPhone only, for 30 days |
| Messages you send us | What you write in Contact support or Send feedback, the photos you attach, and the app’s diagnostic log for your account. These can describe your health |
| Inferences | Your estimated energy expenditure, and the targets calculated from it |
Where it comes from
- From you, when you enter it in the app, or write to us from the app.
- From Apple Health, only if you connect it and allow access on your iPhone.
- From Apple Health food totals you import: calories and macros per day that another app saved to Health. You choose the app, and nothing is read until you start the import.
- From files you import from MacroFactor, Cronometer, Lose It!, MyFitnessPal, or Cal AI. We keep the entries, not the file.
- From our calculations, which turn what you log into estimates and targets.
Why we collect and use it
We use consumer health data only to provide the service you asked for:
- to keep your log and show your history and trends;
- to calculate your calorie and macro targets, and to suggest new targets at a weekly check-in;
- to estimate the nutrition of a meal photo, label, or description you submit;
- to answer a message you send us, and to fix what it reports;
- to keep the service secure and to enforce usage limits;
- to meet legal obligations.
We do not use it for advertising, and we do not use it to train artificial intelligence models. If we want to use it for a new purpose, we will ask for your consent first.
Who receives it
We do not sell consumer health data, and we do not share it with third parties for their own purposes. These service providers process it for us, under contract and on our instructions:
| Provider | What they receive |
|---|---|
| Supabase | Everything stored in your account: the database, authentication, and server functions that run the app, including reading the files you import and storing the messages you send us |
| OpenAI | The meal photos, labels, and food descriptions you submit for analysis, and any correction you ask for |
| USDA FoodData Central and Open Food Facts | Food search terms and scanned barcodes, sent without your account identifier |
Apple Health data is read on your iPhone. We do not send it to Apple. When you import food totals from Apple Health, the totals for the app you chose are sent to Supabase and saved in your account.
We may also disclose consumer health data where the law requires it. We do not have affiliates.
Your rights
You have the right to:
- Confirm whether we collect, share, or sell your consumer health data, and access it, including a list of every third party and affiliate we have shared it with. Export data in the app gives you a copy at any time.
- Delete it. Use Delete account in the app, or write to us. Deletion also covers our service providers.
- Withdraw consent. Disconnect Apple Health in the app or in the Health app at any time, or delete your account.
- Not be discriminated against for using these rights.
To use a right, write to [email protected] from the email on your account. We use that email to confirm the request is yours. We reply within 45 days. If we need more time, we will tell you why within those 45 days, and we can extend once, by up to 45 more days.
Appeals
If we decline your request, you can appeal. Reply to our answer with the word “Appeal” and the reason. We will decide within 45 days and tell you why. If we deny your appeal, you can contact the Attorney General of your state:
- Washington: atg.wa.gov
- Nevada: ag.nv.gov
Location
We do not use geofencing, and we do not collect your location.
Changes
If we change this policy, we will update the date at the top of the page. If a change affects how we collect, use, or share consumer health data, we will ask for your consent where the law requires it.
Contact
[email protected] Sam Solomon, 3423 Piedmont Rd NE, Atlanta, GA 30305