Consumer Health Data Privacy Notice

Scale Habits uses health-related information to provide the food-choice and weight-management features you request. We do not sell consumer health data, use it for targeted advertising, or give it to a data broker.

Optional health context stays optional. Before protected food or health information is sent to an external AI provider, we show a separate permission screen. You may request access, correction, a recipient list, withdrawal of permission, or deletion.

Our Privacy Notice covers ordinary account, device, purchase, and communication information. This page adds the detail required for consumer health data and related inferences.

Consumer health data is personal information that identifies or can reasonably be linked to you and reveals or can be used to infer physical or mental health status. Food and product information becomes health data when it is linked to your health, body, treatment, or health goals.

Medication context. A GLP-1 support preference, medication use, treatment-related context, and any medication detail you choose to provide. Scale Habits does not need dosage information for ordinary food-choice support and does not provide dosage guidance.

Body and goals. Weight, height, body measurements, weight-management goals, progress, and related trends.

Appetite and responses. Hunger, fullness, nausea, energy, digestion, symptoms, side effects, satisfaction, and other bodily responses you choose to record.

Food constraints and decisions. Allergies, intolerances, dietary or health constraints, meals, available options, selected plans, check-ins, outcomes, and corrections.

Media and connected information. Images, spoken-input transcripts, or health information from a service or device that you choose to connect. We collect connected information only when that feature exists and you activate it.

Health-related inferences. Patterns, classifications, summaries, likely preferences, and possible relationships inferred from prior inputs, decisions, and outcomes.

Linked identifiers. Account, device, request, and transaction identifiers when they are linked to any category above. We do not intentionally use precise location as a health input.

Directly from you. Information you enter, say, send, select, save, correct, or provide during support.

From your use of Scale Habits. Your food decisions, saved plans, check-ins, responses, and interactions with health-aware features.

From connected services. Information from a device, app, or platform only when an integration is offered and you direct the connection.

Created by Scale Habits. Health-related inferences generated from the information above by our systems or an approved AI provider.

We do not purchase consumer health profiles from data brokers. We do not let an advertising network collect health activity over time across Scale Habits and unrelated services.

We may store, organize, combine, retrieve, analyze, infer from, transmit, and delete consumer health data for the purposes below. We collect only the information reasonably needed for a requested feature or a purpose you separately approve.

Provide requested features. Understand your available food choices, apply constraints, generate a recommendation, save a plan, record a check-in, and show relevant history.

Personalize for you. Remember approved preferences and context, compare a selected plan with what happened, and use confirmed prior experience to improve later suggestions for your account.

Support safety and quality. Apply allergy and food-safety guardrails, detect a failure, respond to a correction, and evaluate whether a feature behaves as intended.

Operate and protect the service. Authenticate access, troubleshoot, prevent abuse, secure data, comply with law, and handle a rights request or legal claim.

We will ask for a separate affirmative choice before using identifiable consumer health data for unrelated research, marketing, testimonials, or another materially different purpose when law requires it.

We share consumer health data only as needed to provide a feature you request, with your required permission, or for a narrow legal or safety reason. Depending on the active feature, recipients may include the categories below.

Cloud infrastructure and database providers. They host encrypted account and product data and help keep it available and secure.

Approved AI providers. They receive the minimum protected input needed for a specific request only after the permission described below.

Authentication, support, and communication providers. They ordinarily receive account or message information, not health content. They may receive health data if you include it in a support request or it is needed to resolve the issue you asked us to handle.

Professional advisers and authorities. They may receive limited information when necessary for legal advice, audit, insurance, security, a lawful request, or protection of rights and safety.

Business successor. A successor may receive information during a merger, financing, reorganization, or sale if it accepts this notice and any consent obligations that apply.

We do not currently disclose consumer health data to an affiliate. You may request the specific third parties and affiliates, if any, that received your consumer health data by emailing info@scalehabits.com.

An external AI provider may process protected food or health information to interpret an input, compare options, draft a recommendation, or summarize a check-in. We do not treat a general acceptance of the Terms as permission for that transmission.

The separate permission screen identifies what will be sent, why it is needed, the provider or provider category, and the applicable retention and model-training position. It also explains how to decline or withdraw permission. We record the permission version and time.

We aim to remove direct identity before transmission when it is not needed and send only what the feature needs. Declining permission can make that AI-assisted feature unavailable, but it does not remove unrelated account, export, deletion, or support rights.

We do not sell consumer health data. We do not exchange it for money or another benefit, use it for targeted advertising, create advertising audiences from it, or disclose it to a data broker.

If this practice ever changes, an update to this notice alone would not authorize a sale. We would first obtain any separate, signed authorization required by law. Until then, there is no health-data sale to opt out of.

You may ask us to confirm whether we collect, share, or sell consumer health data about you. You may request access, correction, a portable copy, deletion, or a list of the third parties and affiliates that received it. You may withdraw consent and require future collection or sharing based on that consent to stop.

Use in-app controls when available or email info@scalehabits.com. You do not need to open a new account to make a request. We verify only what is reasonably necessary and will not unlawfully discriminate against you for exercising a right.

We aim to respond within 45 days. Where law permits, we may extend once for another 45 days and will explain why. A deletion request is sent to relevant processors and recipients unless an exception applies.

You may appeal a refusal by replying to our decision or emailing info@scalehabits.com with “Health data appeal” in the subject line. We aim to decide an appeal within 45 days.

We keep consumer health data while your account is active and the information is needed for the feature you chose. We aim to remove deleted data from active systems within 30 days and from backups within 90 days. Narrow legal, security, fraud, or transaction records may remain when law permits or requires it.

Temporary images ordinarily expire within seven days when they are not saved. Raw voice is discarded after transcription unless you clearly choose to save it. Approved AI-provider retention is disclosed before the related permission is given.

We use safeguards designed for sensitive information, including encryption in transit, access controls, separation from general event data where practical, provider review, and incident procedures. No system is perfectly secure. We will provide any notice required by consumer health-data or breach law.

We may update this notice when our practices, providers, or law changes. We will give advance notice of a material change when required. We will obtain a new affirmative choice before collecting a materially new health-data category or using or sharing health data for a materially new purpose when law requires it.