Consumer Health Data Privacy Policy

Effective [EFFECTIVE DATE]

This policy is for people who live in Washington or Nevada, and for anyone whose consumer health data we collect in those states. It adds to our Privacy Policy, which describes everything we collect. “Consumer health data” means personal information that’s linked, or can reasonably be linked, to you and that identifies your past, present or future physical or mental health.

“We” means [COMPANY LEGAL NAME], which operates Executive Biology and Living Diet.

1. The consumer health data we collect

• Your face photos, and AI-written descriptions of them if you make potential progress previews.
• Your abdominal measurements and your Visceral Fat Score™ class.
• Your sex, year of birth and height, if you add them.
• The AI summary of each check-in, and your potential progress previews.
• Notes Dr. O’Mara writes on your check-ins.
• Health goals you describe in an Alpha application or a message to us.

2. Where it comes from

• You, when you take a check-in, add profile details or send us a form.
• The Service itself, which works out your score and produces summaries and previews.
• Dr. O’Mara and his team, when they write a note.

3. Why we collect and use it

We collect and use consumer health data to provide the features you ask for:

• to calculate and track your score and write your summary;
• to make previews;
• to let Dr. O’Mara and his team write notes on your check-ins;
• to check photos before previews; and
• to answer your requests, keep the Service secure and working, and meet our legal obligations.

We use your photos and measurements for research, or to develop or train algorithms and AI models, only if you give us a separate research permission. We don’t use consumer health data for advertising.

4. What we share, and with whom

We don’t sell consumer health data.

We share consumer health data with these categories of third parties:

• AI providers. Anthropic and OpenAI receive your photos and measurements to write your summary and make previews, as section 4 of our Privacy Policy describes.
• Anyone you share a link with. If you choose to share a check-in or a preview, the photos, dates and (unless you switch them off) your measurement and score class are on a public page for 30 days.
• Authorities, where the law requires it or it’s needed to protect someone’s safety.
• A new owner, if the Service or our business is sold or merged.

We don’t share consumer health data with affiliates.

Companies that process consumer health data for us, under contracts that limit what they can do with it, aren’t third parties under these laws. They’re listed in section 5 of our Privacy Policy, and include our hosting, storage and email provider.

5. Other companies that collect information on our websites

The contact and Alpha forms load Cloudflare’s bot check, which receives your IP address and browser details. It doesn’t receive your photos, measurements or messages, and it doesn’t track you across other websites for us.

6. Your rights

You have the right to:

• confirm whether we’re collecting, sharing or selling your consumer health data, and get a copy of it;
• get a list of the third parties and affiliates we’ve shared it with, and an email address or other online contact for each;
• withdraw your consent to our collecting or sharing it; and
• have it deleted.

You can delete your account, and the data in it, from My account. To use any of these rights, or to ask us to review and correct your data, email privacy@livingdiet.app. We’ll confirm the request using the email address on your account and answer within 45 days.

If we turn a request down, you can appeal by replying to our answer. We’ll reply in writing within 45 days. If we still say no, you can contact your state’s attorney general: in Washington at atg.wa.gov/file-complaint, and in Nevada at ag.nv.gov.

7. Changes to this policy

If we change this policy, we’ll post the new version here with a new date. Where a change means collecting or sharing consumer health data in a new way, we’ll ask for your consent first.

8. Contact us

[COMPANY LEGAL NAME], [MAILING ADDRESS]. Email privacy@livingdiet.app.