Consumer Health Data Privacy Policy
CONSUMER HEALTH DATA PRIVACY POLICY
GarbageApps LLC ("we," "us," or "our") operates the Apical mobile application and web app (together, the "App"). This Consumer Health Data Privacy Policy describes the consumer health data we collect through the App, why we collect it, where it comes from, who receives it, and how you can exercise your rights over it. It is written for the consumer health data laws of Washington (the My Health My Data Act), Nevada and Connecticut, and it applies to everyone who uses the App, wherever they live. Our Privacy Policy describes the rest of the information the App handles.
1. CONSUMER HEALTH DATA WE COLLECT, AND WHY
"Consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. The App collects it only to provide the features you use, as follows:
- Readings from Apple Health or Health Connect. On iPhone and iPad, once you connect Apple Health and allow each kind of data, the App reads your steps, active energy (calories) burned, exercise and stand time, body weight, heart rate, resting heart rate, heart rate variability, cardio fitness (VO2 max), walking, running, cycling and swimming distance, sleep, and the workouts Apple Health holds. On Android, once you connect Health Connect, it reads steps, active calories burned, heart rate, heart rate variability and sleep. We use them to show your activity, workouts and sleep in the App, to fill in a workout's duration and energy and a sleep check-in's hours, and, on iPhone and iPad, for the alarm clock's wake-up suggestions.
- What you record in the App's wellness features: the meals you log and the nutrition in them, your nutrition, water, weight, step and workout goals, the water you drink, your body weight, your height, your workouts with their exercises, sets, repetitions and weights, your personal records, your meal and workout plans and templates, and your sleep check-ins (how you slept, how many hours, and how often you woke). We use them to show your logs, charts and progress and, with cloud sync on, to carry them to your other devices.
- What the Apical app on your Apple Watch records during a workout: its duration, active energy and heart rate. We use them to show the workout while it runs and to save it, with its average and highest heart rate.
- Health Data Sync, if you turn it on: your current step count, active energy, exercise minutes, heart rate and sleep, kept in your account so that the web app can show them.
- What you tell the AI features about your health: your messages to Wellness AI (for example your goals, likes, dislikes or allergies), the calorie and macronutrient goals and the photos it is sent, the plans it proposes, and the meals of your current meal plan that the grocery assistant is sent while Use My Pantry is on. We use them only to answer you.
- Figures the App works out from the above: your body mass index, your readiness, streaks and trends, and the insights the App shows you. They are worked out on your device and are never uploaded.
- Health information you choose to write elsewhere. Notes, tasks, appointments, grocery lists and your Pantry, the places you attach to reminders, messages and support requests are not collected as health data, but they can hold anything you write in them, including something about your health, such as a doctor's appointment or a medicine on a grocery list. The App does not look for health information in them; whatever is in them about your health is consumer health data under this policy.
We never sell consumer health data, and we never use it for targeted advertising, for marketing, for profiling, or to train AI models.
2. WHERE IT COMES FROM
- From you, when you enter it in the App or tell it to an AI feature.
- From Apple Health on your iPhone or iPad, or Health Connect on Android, with your permission for each kind of data.
- From your Apple Watch, through the Apical watch app.
- From our AI provider, when an AI feature writes a plan or a suggestion and you choose to add it.
- From another Apical user who shares a workout, a meal or a plan with you.
- From food data: the nutrition of a food you log comes from the Open Food Facts database or from a label your device reads, and becomes part of your log when you add it.
3. WHO RECEIVES IT
We never share consumer health data with advertising networks, analytics providers or data brokers: TikTok, Google AdMob and HeyCatch never receive it. We have no affiliates that receive it. It reaches others only in these ways:
- Amazon Web Services, which runs our backend as our processor: it stores what cloud sync carries (your wellness entries, workouts and sleep check-ins), what Health Data Sync uploads if you turn it on, the answers to AI requests written in the background for up to 24 hours, and support requests.
- Anthropic, our AI provider, as our processor: it receives the health-related data an AI feature sends when you use it (Section 1), only to write the answer, and does not use it to train its models. When an AI feature searches the web, Anthropic passes a short search query to an independent search provider; the AI is instructed never to put your health figures or other personal details into a query.
- Resend, which delivers support email, and Amazon Translate and Amazon Comprehend, which translate support requests, as our processors: they handle whatever you write about your health in a support request. Diagnostics attached to a request never contain a health reading.
- Other Apical users, only when you share a workout, a meal or a plan with them yourself: they see what you share.
- Apple Health, when you allow the App to write your water, body weight and workouts there, where Apple Health keeps them under your own settings.
- A court, regulator or law-enforcement authority, only when the law or a valid legal order requires it.
4. YOUR CONSENT
- The App asks for your consent before it first collects consumer health data, in a screen that says what it collects and why. Connecting Apple Health or Health Connect also asks the system's own permission for each kind of data, and Health Data Sync stays off until you turn it on.
- Before any AI feature first sends anything to Anthropic, the App asks for your permission, separately. Anthropic receives health data only as our processor, when you use an AI feature.
- We share consumer health data with anyone other than our processors only with your separate consent, given apart from your consent to collection, or when you share it yourself, as when you share an item with another Apical user.
- You can withdraw your consent at any time: in Settings > Privacy & Security > Health Data, by switching off Health Data Sync or an AI feature, in the settings of Apple Health or Health Connect, or by emailing us. The App then stops collecting what you withdrew consent for; to delete what it already holds, see Section 5.
5. YOUR RIGHTS, AND HOW TO USE THEM
Wherever you live, you can:
- Confirm whether we collect or share your consumer health data, and get a copy of it, with a list of everyone we have shared it with and how to contact them. What you record is in the backup you can export in Settings > Data & Storage > Export Backup; for everything we hold, email us.
- Delete it. Delete My Health Data, in Settings > Privacy & Security > Health Data, deletes the health data the App holds for your account, on your device and in your account. Delete Account deletes everything we hold about you on our servers, and Reset App Data deletes everything on the device. Copies in our database backups expire within 7 days, AI answers written in the background are deleted within 24 hours, the copy of a support request in our support inbox is deleted when you ask us, and Anthropic deletes what it receives through its API after the limited period its data-retention terms set. We tell our processors of your request where they still hold your data.
- Correct it, by editing or deleting the entry in the App, or by emailing us.
- Withdraw your consent, as Section 4 describes.
To use any of these rights, use the controls above or email support@garbageapps.com from the email address of your account, with "Health Data Request" in the subject; we may need to confirm that the request comes from you. We answer within 45 days. If we need longer, we will tell you why within those 45 days and take at most 45 days more. We answer up to two requests a year from each person free of charge, and we will never treat you differently for using these rights.
If we decline a request, you can appeal by replying to our answer, or by emailing support@garbageapps.com with "Appeal" in the subject. We will answer your appeal in writing within 45 days, saying what we did or did not do and why. If we deny your appeal, you can contact your state's attorney general: in Washington, the Washington State Office of the Attorney General (www.atg.wa.gov); in Nevada, the Nevada Attorney General (ag.nv.gov); in Connecticut, the Connecticut Attorney General (portal.ct.gov/ag).
6. LOCATION AND GEOFENCES
The App never sets a geofence of its own around a place that provides health care, or around any other place. A location reminder is a geofence you set yourself, around a place you choose, for a reminder you wrote; your device watches for it, and the App never tells us when a reminder's place is reached.
7. TRACKING ACROSS SITES AND APPS
No third party collects consumer health data about you over time and across other websites or online services through the App.
8. CHANGES TO THIS POLICY
We will notify you of a material change by posting the updated policy in the App and on our website and updating its "Last Updated" date. We will not use consumer health data for a new purpose without your consent.
9. CONTACT US
If you have questions about this policy or your consumer health data, contact our Privacy Officer:
Privacy Officer, GarbageApps LLC
Email: support@garbageapps.com
