Nutrition GPS

Washington Health Data Privacy Policy

Effective Date: September 3, 2026

Last Updated: September 3, 2026

This Washington Health Data Privacy Policy applies to Washington consumers and describes how Nutrition GPS ("we," "us," or "our") collects, uses, shares, and protects Consumer Health Data as defined under Washington's My Health My Data Act (RCW 19.373). This policy is separate from our general Privacy Policy and Terms of Service.

1. Categories of Consumer Health Data We Collect

We collect the following categories of data that may constitute Consumer Health Data:

  • Body weight, weight goals, and weight change history
  • Caloric intake, macronutrient intake, and meal/food logs
  • Exercise and physical activity data
  • Health-related goals entered during onboarding (e.g., target weight, activity level)
  • Information voluntarily shared with the AI Coach, including messages, questions, and self-reported wellness context
  • Timezone and usage timestamps associated with the above data

2. Sources of Consumer Health Data

We collect Consumer Health Data from:

  • Information you directly provide (onboarding, goal-setting, meal logging, AI Coach conversations)
  • Information generated through your use of the app (progress tracking, activity logging)

We do not purchase or acquire Consumer Health Data about you from third-party data brokers.

3. How We Use Consumer Health Data

We use Consumer Health Data to:

  • Provide core app functionality, including tracking, progress calculation, and goal recalibration
  • Power AI Coach responses and personalized guidance
  • Maintain and improve the safety and accuracy of our nutritional guardrails
  • Process billing and manage your account
  • Comply with legal obligations

We do not use Consumer Health Data for advertising, and we do not sell Consumer Health Data.

4. Categories of Third Parties We Share Consumer Health Data With

We share Consumer Health Data with the following categories of service providers, solely to operate the app:

  • Database and authentication infrastructure (Supabase) — to store and secure your account and app data
  • Payment processing (Stripe) — to process subscription billing
  • AI processing (Google AI Studio / Gemini, via our Cloudflare Worker) — to generate AI Coach responses

These providers are contractually restricted from using your data for any purpose other than providing services to us.

We do not share Consumer Health Data with data brokers, advertisers, or any party for cross-context behavioral advertising.

5. Your Rights

Under Washington's My Health My Data Act, you have the right to:

  • Confirm whether we are collecting, sharing, or selling your Consumer Health Data
  • Access the specific Consumer Health Data we have collected about you
  • Withdraw consent for our collection and sharing of your Consumer Health Data
  • Delete your Consumer Health Data and your account immediately and permanently from within the app

You can delete your account and all associated data at any time directly in the app: on the web, via Account Settings; on iOS, via the Profile tab. If you're on a platform where in-app deletion is not yet available, use the data privacy request form, and we will complete the deletion within 45 days as required.

If you cannot sign in or need assistance with a request that is not handled by self-service deletion, submit a request through our data privacy request form. We will respond within 45 days as required by law.

We will not discriminate against you for exercising these rights.

6. Data Retention and Deletion

When you use the in-app account deletion feature, your Consumer Health Data and account are deleted immediately and permanently from our active systems, and we direct our service providers to do the same, except where retention is required by law. For requests submitted through our data privacy request form, we will fulfill a verified deletion request within 45 days as required by law.

7. Consent

By using Nutrition GPS, you consent to the collection and use of Consumer Health Data as described in this policy for purposes necessary to provide the app's core functionality. Where required, we will obtain your separate, affirmative consent before collecting or sharing Consumer Health Data for any purpose not necessary to provide the service you requested.

8. Contact Us

If you have questions about this policy or wish to exercise your rights, contact us through our data privacy request form.