Consumer Health Data Privacy Policy
For people in the United States, including Washington, Nevada and Connecticut
The short version: the food and mood entries in your Nourity journal are consumer health data. We collect them only with your consent, use them only to run your journal, share them only with service providers that work for us, and never sell them.
About this policy
This policy is provided by [Company legal name] ("Nourity", "we"), [Registered address]. It explains how we handle "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373), Nevada's consumer health data law (Senate Bill 370, 2023), and the consumer health data provisions of the Connecticut Data Privacy Act. It applies to you if you live in one of those states or if your consumer health data is collected there. Other US residents get the same commitments.
It sits alongside our main Privacy Policy. If the two differ, the one that gives you more protection applies.
Nourity is a personal wellbeing journal, not a medical app or device, and it is only for adults aged 18 or over.
Consumer health data we collect, and why
| Category | Examples | Why we collect it |
|---|---|---|
| Food entries | Your free-text meal descriptions | To keep your food journal and show your own history |
| AI nutrition estimates | Estimated calories, protein, carbs, fat, fiber, sugar, sodium and similar nutrients for each meal | To show you approximate nutrition for what you logged |
| Mood and body check-ins | Energy, mood and stomach comfort scores (1 to 5) | To keep your mood journal |
| Patterns and insights we derive | Charts and links between what you ate and how you felt | To show you your own patterns over time |
| Timestamps and timezone | When each entry was made | To place entries on the right day |
| Your chosen intention | For example "Steadier energy" | To tailor the app's wording and layout |
We also hold your email, name, consent records and subscription status, as described in our Privacy Policy. Where these are linked to the data above, we protect them in the same way.
We use consumer health data only for the purposes above and to keep the service secure. We don't use it for advertising, and we don't use it to train AI models.
Where it comes from
- Directly from you, when you type a meal or complete a check-in.
- Generated by our AI service provider (nutrition estimates) from the meal text you type.
- Derived by our app from your own entries (charts and patterns).
We don't buy health data and don't collect it from other sources such as data brokers, wearables or health records.
Consent
We ask for your consent to collect consumer health data before you make your first entry. It's a separate step that isn't bundled with our Terms. The consent request explains what we collect, why, who processes it for us, and how to withdraw. We record when you agreed and which version of the wording you saw.
We don't share your consumer health data with third parties, other than the service providers listed below. If we ever wanted to share it with a third party for any other reason, we'd ask for your separate consent first, distinct from your consent to collection.
You can withdraw consent at any time in Settings → Consent → Withdraw consent. We then stop collecting and processing your journal. You can still export or delete your data afterward.
Who receives it
We disclose consumer health data only to processors, meaning service providers that handle it on our behalf, under contract, to provide Nourity to you:
| Type of recipient | Provider | Health data they receive |
|---|---|---|
| Cloud hosting and database | Render | All categories above (stored on our behalf) |
| Content delivery and security network | Cloudflare | Data in transit to and from the site |
| AI service provider | Anthropic | Meal text only, to produce nutrition estimates and meal ideas |
Our email provider (Resend) and payment processor (Stripe) don't receive your journal entries.
We have no affiliates that receive consumer health data. We don't let third parties collect consumer health data about you over time and across other websites or online services through Nourity: there are no third-party trackers, analytics or advertising tools in the app.
We may disclose data where the law requires it, for example to answer a valid court order.
We do not sell your consumer health data
We don't sell or offer to sell consumer health data, and we don't share it with data brokers or advertisers. Under Washington law, selling consumer health data requires a signed, written authorization that meets strict requirements. We don't ask for one, because we don't sell data.
Your rights
You have the right to:
- Confirm whether we collect, share or sell your consumer health data.
- Access that data, including a list of all third parties and affiliates we've shared it with, and how to contact them.
- Withdraw consent to our collection and sharing of it.
- Delete it. When we delete your data, we also tell our processors to delete it.
We won't treat you unfairly for using any of these rights.
How to use your rights
In the app (fastest)
- Settings → Your data: download all your data as JSON and CSV.
- Settings → Consent → Withdraw consent: stops collection and processing.
- Settings → Delete account: deletes your account and all your entries straight away. Encrypted backups are overwritten within 14 days.
By email
Email hello@nourity.app with the subject "Consumer health data request", from the email address linked to your account. We verify requests by sending a one-time code to that address. You don't need to create an account to make a request, but if you have one we may ask you to use it.
We'll respond within 45 days of receiving your request. If we need more time, we may extend this once by up to 45 more days, and we'll tell you why within the first 45 days. Requests are free up to twice a year.
Appeals
If we decline your request, you can appeal by replying to our decision or by emailing hello@nourity.app with the subject "Appeal". We'll reply in writing within 45 days, explaining what we did or didn't do and why. If we deny your appeal, you can complain to your state attorney general:
- Washington: Washington State Office of the Attorney General
- Nevada: Nevada Attorney General
- Connecticut: Connecticut Attorney General
How we protect it
Consumer health data is encrypted in transit, kept in access-controlled systems, and only available to the people who need it to run Nourity. Sign-in uses one-time email codes stored in hashed form. Our processors are bound by contracts that limit how they may use the data.
We don't use geofencing around health care facilities, or anywhere else.
Changes
We'll update this page and its date if anything changes. If we want to collect new categories of consumer health data, use it for a new purpose, or share it in a new way, we'll ask for your consent first.
Questions: hello@nourity.app.