Consumer Health Data Privacy Policy

What this policy covers

This policy explains how Digital Infinity Group LLC collects, uses and shares consumer health data through Homekcal. It is written for Washington's My Health My Data Act and similar laws in Nevada, Connecticut and other states, and it applies to everyone who uses Homekcal, wherever they live. Our Privacy Policy covers everything else.

Consumer health data means personal information that identifies, or could reasonably identify, your past, present or future physical health. In Homekcal that includes the food you log, your weight and targets, and the plain fact that you use a calorie tracking app.

The consumer health data we collect

We collect only what the app needs:

• Meals you log: food items, portions, oil level, calorie and nutrient estimates, times, and corrections you make.
• Meal photos and nutrition label photos, only while they are being analysed. They are deleted after analysis and never stored.
• Your profile: goal, sex, age, height, weight, activity level, cuisines and diet type, and whether you prefer small portions.
• Targets worked out from your profile, and their history.
• Weight entries, and, if you turn on health sync, weight read from Apple Health or Health Connect.
• Saved recipes.
• If you opt into "I weighed this", the grams you record for each item, with the dish and the estimate, stored under a random research id rather than your account id.
• That you have an account with us at all.

Where it comes from

From you, from the estimates the app works out from your photo or text, and, if you turn on health sync, from Apple Health or Health Connect on your phone. We do not buy health data or collect it from anyone else.

Why we collect and use it

Only to provide the features you use: estimating meals, keeping your log, working out and showing your targets and trends, syncing between your devices and to Apple Health or Health Connect if you ask, applying usage limits, and keeping the service secure. We do not use it for advertising, and we do not use it to build profiles for anyone else.

Your consent

We ask for your consent on a separate screen in the app before collecting any consumer health data, and record which version you agreed to. Opting into "I weighed this" asks for its own consent. You can withdraw consent at any time by deleting your account in the app (Settings, Account, then Delete my account), because the app cannot work without this data.

Who we share it with

We share consumer health data only with the processors that run the service for us, only for that purpose, and under contracts that bind them to it. We do not share it with any third party or affiliate for its own use.

• Vercel: Hosts the website and the app's server, and routes AI requests (AI Gateway).
• Anthropic: The AI model that reads meal photos, labels and typed meals, reached through Vercel's AI Gateway.
• Neon: Our database.
• Google Cloud: Holds the keys that seal your profile and weight, and delivers Google Play purchase notices.
• Apple and Google: Sign in with Apple or Google, store purchases, and Apple Health or Health Connect on your phone if you turn sync on.
• Google ML Kit (Android only): Google's barcode reader, built into the Android app, which reads the barcode on your phone.

No sale, no advertising, no geofencing

We do not sell consumer health data. We do not use it, or let anyone use it, for advertising. No advertising, analytics or attribution tool is built into the app. On Android, Google's ML Kit barcode reader sends Google diagnostics that include the app's name and a per-installation id (listed above), but no food, weight, photo or account details. We do not use geofences around health care locations, and we never collect your GPS location.

Your rights

You have the right to:

• Confirm whether we collect, share or sell your consumer health data (we do not sell it).
• Access it, including a list of every processor we share it with (listed above) and how to contact them (through us, at the address below). Export my data in the app gives you everything we hold.
• Delete it. Delete my account in the app removes it from our live database at once. Our processors hold none of it apart from database backups, which roll off within 30 days, and short-lived server logs, which never contain health values.
• Withdraw your consent, by deleting your account.
• Appeal if we turn down a request.
• Use these rights without being treated differently.

How to use your rights

In the app, under Settings, then Account. Or email support@homekcal.com from the address on your account. We confirm the request comes from you (signing in is enough in the app) and answer within 45 days, or tell you within that time if we need up to 45 more days and why.

If we decline a request, we tell you why. To appeal, reply to that email with "Appeal" in the subject. We will answer the appeal within 45 days. If you are not satisfied, you can contact the Washington State Attorney General (atg.wa.gov) or your own state's attorney general.

Contact

Digital Infinity Group LLC, support@homekcal.com. Effective date shown at the top of this page.