Consumer health data privacy

1. What health-related data we collect

We do not ask for diagnoses, test results, prescriptions or insurance details. Please do not enter them.

• Allergies, food intolerances and dietary restrictions you or your household enter
• Medical or lifestyle diets you choose, such as diabetic-friendly, low sodium or fasting
• Nutrition goals and targets you set, such as calories or macros, and meal logs
• Meals planned for a sick day, if you use that feature
• Information you give a coach or creator in a product that involves check-ins, and progress photos you choose to send
• Anything health-related you type into a message, a post or the helper

2. Why we collect it

Only to give you the features you ask for: planning meals that avoid your allergies and fit your diet and goals, and running coach or creator products you buy. We do not use it for advertising or sell it.

3. Where it comes from

From you, and from the people in your household who enter it for you. We do not buy health data and we do not infer health conditions from other data.

4. Who we share it with

We share it only where a feature needs it:

• Our AI provider route (Lovable AI gateway to Google Gemini models), when you use a feature that must respect your allergies or diet, so that the answer fits you. It is sent without your name or email
• The creator whose product you bought, for the information that product uses. Not your whole account
• Our hosting and database provider (Supabase through Lovable Cloud), which stores it for us
• Authorities, when required by law
• We do not sell consumer health data. We do not use geofences around health care facilities.

5. Your consent

We collect and use this data to give you the service you asked for. We ask for your separate consent before we share it with anyone for any other reason, and we will never sell it without a separate signed authorization from you.

You can withdraw consent at any time by deleting the information in your account, or by writing to us.

6. Your rights

To use a right, email privacy@plenishly.com from your account email or use Profile, then Privacy. We answer within 45 days.

• Confirm whether we collect your consumer health data, and get a list of the third parties we shared it with
• Access it
• Withdraw consent
• Delete it. We tell our service providers to delete it too
• Appeal if we say no. Reply to our answer with the word Appeal. We answer within 45 days. If you still disagree, you can contact your state attorney general

7. Security and breaches

We protect it as described in the Privacy Policy. If health data is disclosed without your authorization, including by a security incident, we will notify you and the Federal Trade Commission as the Health Breach Notification Rule and state laws require.

8. Contact

Plenishly, Inc., Wyoming, USA. privacy@plenishly.com