Consumer Health Data Privacy Policy

1. About This Policy

This policy explains how Pro Health Tracker ("we," "our," or "us") handles consumer health data. It is written for Washington's My Health My Data Act (RCW 19.373) and similar state laws, such as Nevada's consumer health data law (SB 370) and Connecticut's consumer health data provisions. It applies to everyone who uses our mobile apps and website (the "Service"), and it adds to our Privacy Policy, which has the full details.

2. Consumer Health Data We Collect

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. Depending on the features you use, the Service handles:

• Lab results and medical documents: lab reports, prescriptions, schedules and other documents you upload, and the test results, values and dates read from them
• Medicines: medicines, doses, reminders and which doses you marked as taken
• Symptoms and wellbeing: symptoms, mood, stress, notes and appointments you enter
• Vitals and body measurements: weight, blood pressure, blood glucose, heart rate, blood oxygen, body temperature and breathing rate
• Food and nutrition: meals, food logs, water, fasting, meal plans and recipes
• Activity and sleep: steps, distance, active calories, workouts, sleep, resting heart rate, heart rate variability and VO2 max, including data you choose to sync from Apple Health (iPhone) or Health Connect (Android)
• Cycle data: only if you turn on cycle tracking
• Voice-dictated text: the text your phone or browser makes from your speech when you use the microphone. The app keeps only the text, not the audio
• Photos: photos of documents, medicine labels, meals, scales and blood pressure monitors that you take or upload

We do not collect precise location, and we do not use geofencing around health care facilities or anywhere else.

3. Where It Comes From

• From you: what you type, dictate, upload or photograph
• From apps you connect: data you allow the app to read from Apple Health or Health Connect, on your phone. The app only reads this data; it never writes to or changes it
• From AI features you use: the results an AI provider returns, such as the values read from a lab report

4. Why We Use It

We use consumer health data only to provide the features you use: keeping and showing your records, charts and trends, medicine and lab reminders, schedules, meal and nutrition tools, reports you export, and AI features you allowed (reading documents and photos, answering questions, insights). We do not use it for advertising or marketing, we do not sell it, and we do not use it to decide credit or lending.

5. Where It Is Stored and What Leaves Your Device

• Stored on your device: your health records are kept in the app's storage on your phone, or in the browser storage for this site on the web. We don't keep a copy, so we can't recover them if they are lost; back them up regularly in Settings, Data & Backup
• AI requests you allowed: when you use an AI feature, only what it needs is sent through our server, which does not keep it, to Google Gemini, or to OpenAI in the United States if Gemini fails. The app asks first, with a separate switch for each kind of AI use (lab reports and documents, photo logging, assistant and insights), and you can change them at any time in Settings, AI data sharing
• Personal details removed first: before an uploaded document, or a photo of a report, prescription or medicine label, is read, sent to AI or saved, the app blacks out your name, date of birth, email, phone, record numbers (such as MRN, UHID or patient ID) and labelled personal fields on your device. If a photo or scan can't be checked on the device, the upload stops. Detection is automatic and may miss a detail. Photos of meals, scales and blood pressure monitors are sent as they are. Questions send a summary of your records without your name, email or account IDs. Cycle data is never sent to AI or to our servers
• Backups you choose: if you export a backup or save it to Google Drive, iCloud Drive or Files, that copy is kept where you chose, in your own account
• Voice input: speech is turned into text by your phone's or browser's speech service (for example Google or Apple), under their own terms
• Food lookups: when you search for a food or scan a barcode, our server sends the search words, barcode number or ingredient names to USDA FoodData Central or Open Food Facts, with no account details
• Your account record: our database (Google Firebase) holds your account record: name, email, subscription status, sign-in history, device information, language and how many reports and schedules you have (counts only). It holds no health records

6. Who We Share It With

Category of third party	What they receive	When
AI providers (Google Gemini; OpenAI as backup)	The document or photo (personal details removed from documents and medicine labels), or your question with a summary of the health records needed to answer it	Only when you use an AI feature you allowed
Food databases (USDA FoodData Central, Open Food Facts)	Food search words, barcode numbers or ingredient names, with no account details	When you search for a food, scan a barcode or a recipe's ingredients are looked up
Speech services (your phone's or browser's)	Your speech, to turn it into text	Only when you tap the microphone

We do not sell consumer health data, and we do not share it with data brokers or advertisers. We may disclose information when the law requires it.

7. Your Rights

• Access: your health records are in the app, where you can view them at any time. To ask what consumer health data we have collected or shared, and with whom, email us
• Delete: delete any record in the app, use Delete all data, or delete your account in Settings, Delete Account. This removes your account record from our database and clears the data on that device. Data on your other devices and backup files you saved yourself must be deleted there. AI providers may keep what was sent to them under their own terms (OpenAI states up to 30 days to monitor for abuse, unless the law requires longer); we cannot recall it. You can also ask us to delete your data by email
• Withdraw consent: turn off any kind of AI use in Settings, AI data sharing; nothing more is sent for it after that. Remove the app's access to Apple Health or Health Connect, the microphone or the camera in your phone's settings
• No discrimination: we will not treat you differently for using these rights

To use your rights, email healthprotracker@gmail.com with the subject "Consumer health data request". We may need to confirm that the account is yours. We aim to respond within 30 days, and always within 45 days; if we need up to 45 more days, we will tell you why.

Appeal: if we refuse your request, you can appeal by replying to our answer or emailing us with the subject "Appeal". We will reply within 45 days with what we decided and why. If you live in Washington and are not satisfied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

8. If There Is a Data Breach

If we learn of a breach of security that affects your information, we will notify you without unreasonable delay and no later than 30 days after we discover it, and we will notify the Federal Trade Commission, state authorities and, where the law requires, the media. See our Privacy Policy for what the notice will contain.

9. Contact Us