Consumer Health Data Privacy Policy

This policy provides the disclosures required by the Washington My Health My Data Act and the consumer-health-data laws of Nevada and Connecticut. It supplements the Bild Health Privacy Policy. As a matter of practice, we honor the rights described here for all users, regardless of state of residence.

Because Bild Health is a product specifically for people using GLP-1 medications, we treat account information (such as the fact that you hold an account) with the same protections as consumer health data, in addition to the health information you record.

1. Categories of consumer health data collected, and purposes

• Medication information you enter (medication names, doses, schedules, shot logs, injection sites, related notes) — to operate your protocol: schedule doses, track shots, and estimate medication levels from your logged doses.
• Bodily measurements (weight, body fat percentage, lean mass, height — entered by you, read from Apple Health or Health Connect with your permission, or imported from DEXA scans at your direction) — to chart your results and progress against your goals.
• Intake and biometric answers (height, weight, goal weight, birth date, sex, medication history) — to compute your personal targets.
• Health-related inferences derived from the above, including by algorithms or machine learning (for example, estimated medication levels and protocol suggestions) — to display estimates and suggestions within the application.
• With your separate opt-in consent only: the categories you approve for cross-device synchronization (for example, body measurements, medication and protocol logs, goals, and DEXA results) — to make your data available to you across your signed-in devices and the website, and to create de-identified data as described below. Sync consent is requested on a dedicated screen, discloses both purposes, is not a condition of using the Services, and may be withdrawn at any time by disabling sync, which deletes the server copy of your identifiable data.
• With your separate opt-in consent only: identifiable consumer health data — for the training of Bild Health's AI/ML models. (We may create and use de-identified or aggregated data, which is no longer consumer health data once it can no longer reasonably be linked to you, for model training and service improvement; we do not attempt re-identification and contractually prohibit recipients from attempting it.)

We collect no consumer health data beyond what you enter, authorize, or import. Data read from platform health services (Apple Health on iOS; Health Connect on Android) is used only to display your charts; it is never used for advertising, marketing, data mining, or model training, and it is never disclosed to third parties.

2. Categories of sources

You (in-application entry and onboarding); platform health services (Apple HealthKit on iOS; Health Connect on Android — read-only, with your device-level permission); BodySpec (DEXA results, via the account connection you initiate). No other sources.

3. Categories of consumer health data shared, and recipients

We do not sell consumer health data and do not share it for advertising. Any advertising cookies used on the bildhealth.com website (see the Privacy Policy, Section 9) operate on Site browsing data only, never receive consumer health data or anything from the application, and are not used for visitors in Washington, Nevada, or Connecticut. Sharing of consumer health data is limited to processors acting on our documented instructions:

• Platform backup services (Apple iCloud on iOS; Google backup on Android) — if device backup is enabled, non-health app preferences are included in your device backup, encrypted under your platform account. Your health entries are excluded from device backups by design, so they are not included. Bild Health cannot read your backups and does not transmit data to them; the operating system does.
• Our product-analytics provider receives no consumer health data — events carry no health values.
• Our crash- and error-reporting provider receives no consumer health data — reports are filtered on the device to remove health values and identifying information before transmission.
• Apple, Google, and our subscription-management provider (payments) receive no consumer health data.
• Our cloud-hosting and database providers — only if you have enabled cross-device sync — host the synced categories you approved, as processors acting on our documented instructions, encrypted, and processed for the purposes disclosed in Section 1: providing synchronization to you and creating de-identified data.

Specific affiliates with whom we share consumer health data: none. If this changes, this list will name them before any sharing occurs, and where required we will first obtain your separate, distinct sharing consent.

4. Your rights

• Know and access the consumer health data we hold. It is displayed in the application, and Settings → Manage My Data → Prepare my export produces a complete copy as a single file.
• Delete it. Settings → Manage My Data → Delete all my data erases everything the application stores on the device, including your BodySpec sign-in; disabling cross-device sync deletes the synced copy from our servers; and deleting your account (Settings → Manage My Data) removes your account records and any synced data from our servers. Beyond synced data hosted as described in Section 3, our service providers hold no consumer health data to delete: analytics, crash reporting, and payments never receive any, and platform health data is read live on the device.
• Withdraw consent at any time: disconnect BodySpec in Settings → DEXA Scans; revoke health-data access in your platform's health settings (the application links there from Settings); disable cross-device sync in Settings → Manage My Data.
• Non-discrimination. The Services function identically whether or not you exercise these rights.
• Appeal any decision we make regarding a request.

To exercise rights: in the application via Settings, or privacy@bildhealth.com. We respond within the time required by law (30 days in Washington, extendable once). To appeal: reply "appeal" to our response; appeals are reviewed independently of the original decision. If your appeal is denied, Washington residents may contact the Washington Attorney General at atg.wa.gov; Nevada and Connecticut residents may contact their state Attorney General.

5. Contact

Bildbot Inc. · privacy@bildhealth.com