Consumer Health Data Privacy Policy

1Who this policy is for

The Washington My Health My Data Act and the Nevada consumer health data law give more protection to "consumer health data". This is data that is linked, or reasonably linkable, to you.

It identifies your past, present, or future physical or mental health. This policy tells you how Fitnouriva uses this type of data, and how you can use your rights under those laws.

An individual developer ("we", "us") publishes Fitnouriva. This policy adds to the Fitnouriva Privacy Policy. The Privacy Policy covers all data that the app uses, and it continues to apply to you.

We treat the data below in the same way for all persons, in all locations.

You can read this policy in the app, in Settings, and at https://fitnouriva.com/consumer-health-privacy.html. The Privacy Policy is at https://fitnouriva.com/privacy.html.

2The consumer health data that we collect, and why

Fitnouriva collects only the consumer health data that is necessary for the features that you use:

• Body profile and weigh-ins (weight, height, age, and sex, if you enter them): to calculate your burn, set your targets, and show your weight trend.
• Workouts (exercises, sets, reps, weights, cardio time and distance, and notes): for your workout log, history, and progress charts.
• Food diary and nutrition goals: to keep your diary and compare your food with your targets.
• Health Connect data with your permission (steps, heart rate, calories burned, exercise sessions, and food from other apps): to show your activity and calorie burn.
• Meal photos for "Detect calories": to calculate the calories and portion size of a meal. The app analyzes the photo on your phone and discards it when you close the screen.
• Food searches and barcodes, which can tell something about your diet: to find foods in our food database.
• Nutrition labels that you share: to examine them and add the food to the shared food database.

All data in the first five items stays on your phone, and in your Health Connect or Google Drive if you use them. It never goes to our servers, and we cannot see it.

Only food searches, barcodes, and shared labels go to our servers. They go with the identifiers in Section 7 of the Privacy Policy.

3Where the data comes from

• You, when you type data into the app, or point your camera at a meal, barcode, or label.
• Health Connect, with your permission. It holds data from the other apps and devices that you connected to it.
• Your Google Drive, if you restore a previous backup.

4Who gets the data

We do not sell consumer health data. We share it only in these conditions:

• Health Connect, and the other apps there with your permission: the foods that you log in Fitnouriva (name, meal, and nutrition facts). This applies only if Fitnouriva has permission to write them.
• Google Drive: a copy of your Fitnouriva database in your own Google account, when you select "Back up now".
• Google Cloud, which hosts our servers. It processes food searches, barcodes, and shared labels only for us.
• ML Kit from Google, which reads barcodes and labels on your phone. It can send Google data about its performance, but not your camera images.
• Other Fitnouriva users see the nutrition facts from a label that you share, after approval. We publish no data that identifies you.
• All persons to whom the law tells us to disclose data.

The only third party is Google LLC, in the roles above. Also the apps that you gave permission to in Health Connect. We have no affiliates.

5What we do not do

• We do not sell consumer health data or use it for advertising.
• We do not collect your location. We use no geofences, near health care facilities or in other locations.
• We use no analytics, advertising, or data broker services.

6Your rights

You have the right to:

• Confirm if we collect, share, or sell your consumer health data, and get a copy of it.
• Get a list of all third parties and affiliates that got the data from us, and their contact data.
• Withdraw your consent for us to collect or share the data.
• Tell us to delete the data.

Data on your phone

Most of your consumer health data never goes out of your phone. As a result, you can use your rights on it yourself, immediately:

• "Export database" in Settings gives you a copy.
• "Delete data on this phone" deletes it, with the cached Health Connect totals.
• "Delete Drive backup" removes your backup.
• To withdraw consent to Health Connect access, remove the permissions in the Android settings.
• To stop food search, barcode lookup, and label sharing, decline the Privacy Policy in Settings.

Data on our servers

To use your rights for data that we keep, send an email to support@fitnouriva.com. Tell us which right you want to use.

Also give us the Google account that you shared labels from, or the email address of your Google Play subscription. Then we can find your records and confirm that they are yours.

When we delete your data from our database, Google Cloud keeps no copy. We have no separate backups of our database.

We cannot delete single entries from the server logs. Google Cloud deletes them automatically after 30 days.

We reply in 45 days or less after we get your request. If we must have more time, we tell you why in those 45 days. Then we can use a maximum of 45 more days.

Requests are free, a maximum of two times in each 12 months. If you use these rights, we do not treat you differently or charge you more.

Appeals

If we refuse your request, you can appeal. Reply to our answer with the word "Appeal". We answer your appeal in writing in 45 days or less, and tell you our decision and the reason.

If we refuse your appeal, you can make a complaint to the Washington State Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov).

7How long we keep the data

Data on your phone stays until you delete it or remove the app. On our servers, we delete shared labels that wait for review 30 days after you share them.

If a reviewer approves a label, we delete the photo and the data that identifies you immediately, and keep only the nutrition facts. If a reviewer rejects a label, we delete it 30 days after the rejection.

We delete server logs, which can include barcodes, after 30 days. We do not keep search text.