This Consumer Health Data Privacy Policy explains how VsiqueMax [pending: legal entity name] ("VsiqueMax", "we" or "us") collects, uses, shares and protects consumer health data. It is written to meet Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's consumer health data provisions, and we apply it to every user wherever they live. Our general Privacy Policy covers everything else.
"Consumer health data" means personal information that identifies, or can reasonably be linked to, you and describes your past, present or future physical or mental health, including information about your body that we estimate from other data.
1. Consumer health data we collect
- Body measurements and characteristics: sex, age, height, weight, body fat readings you enter, and the measurements taken from your photos, such as proportions, outlines and muscle and leanness readings.
- Body photos: analyzed on your device. We receive a photo only if you choose to keep a private copy on your account, or add progress photos.
- Body scan results you enter or upload, such as a DXA, bioimpedance or skinfold reading and the report file.
- Fitness and nutrition information: training, activity and diet answers, and the weight, calorie, protein and tape measurement check-ins you log.
- Inferences: scores, body fat and muscle estimates, your body archetype, Envision illustrations and your training and nutrition plan.
- Coach messages about your body, training or nutrition.
- Information about other people you scan: the name, height and weight you enter for that person, and the scan information described above.
Much of this stays on your own device and never reaches us. The Privacy Policy explains what is stored where.
2. Why we collect and use it
- To analyze your scans, show your results and history, and build your training and nutrition plan.
- To keep the check-ins, progress photos and calibration readings you choose to save.
- To answer your Coach questions and to run Envision.
- To keep the Services secure, apply plan limits and comply with the law.
We collect consumer health data only with your consent, which you give at the privacy step before your first scan, and only as needed to provide the Services you ask for. We do not use it to train or evaluate our models unless you give separate consent.
3. Sources
- You: your answers, photos, scan readings, check-ins and messages.
- Our own calculations: the estimates and plans we derive from what you give us.
Google confirms your account when you sign in, and Stripe tells us your subscription status. Neither gives us consumer health data.
4. Consumer health data we share
We share consumer health data only with processors that handle it on our behalf under written contracts limiting its use to providing services to us:
- Cloudflare: hosting, database and file storage, for everything you save to your account.
- Anthropic: the Coach messages you send and the summary of your saved scan sent with them, to write Coach answers.
We may also disclose it where the law requires.
We do not sell consumer health data, and we do not share it with any third party or affiliate for their own purposes. If that ever changes, we will first ask for your separate consent, and for any sale your signed authorization, as the law requires. We do not use geofencing around any health care location.
5. Third parties and affiliates
We have no affiliates that receive consumer health data, and we share it with no third parties other than the processors listed in Section 4.
6. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access it;
- receive a list of all third parties and affiliates with whom we have shared or sold it, and an email address or other way to contact them;
- withdraw your consent to our collection and sharing of it; and
- have it deleted. We also tell our processors to delete it.
How to use your rights. You can delete scans, all scans or your whole account yourself in Settings, and download your data in Settings, Privacy. You can also email [pending: contact email] with your request and the email address of your account. We may ask you to confirm that the request is yours. We respond within 45 days. If we reasonably need more time, we may extend this once by another 45 days and will tell you why. These requests are free, up to twice in any 12 months.
Deletion. When you delete data in the app, it is removed from our active systems right away, stored files are deleted at once, and database backups roll off within 30 days.
Appeals. If we decline your request, you can appeal by emailing [pending: contact email] with "Appeal" in the subject line. We will respond in writing within 45 days and explain our decision. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, the Nevada Attorney General at ag.nv.gov or the Connecticut Attorney General at portal.ct.gov/ag.
7. Contact
VsiqueMax [pending: legal entity name], [pending: mailing address]
Email: [pending: contact email]