Consumer Health Data Privacy Policy

Effective Date: October 21, 2026

Last Updated: October 21, 2026

This policy is for people in Washington State, Nevada, and anywhere else a consumer health data law applies. It explains how Shean Studios LLC ("Fixins," "we," "us") handles "consumer health data": personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical health. It adds to our Privacy Policy, which covers everything else.

The short version

• The body details behind your nutrition goals (sex, age, height, weight, activity level, goal) and what Fixins reads from Apple Health stay on your phone. We never receive them.
• What we do keep with your account: your daily nutrition targets and the meals you log. Your diets and allergies stay on your phone unless you choose to save them to your account.
• We do not sell consumer health data. We do not give it to advertisers, and we do not use it to target ads.
• You can see, download, or delete it, and withdraw your consent, at any time.

Consumer health data we collect

• Nutrition targets: your daily calorie, protein, carb, and fat targets, whether you set them yourself or the App works them out on your phone
• Meals you log: what you ate, when, the serving, and its estimated calories and nutrients (including fiber, sugar, and sodium when known), whether you log a recipe, scan a meal, scan a barcode, or describe the meal in words
• Meal photos: photos you take to log a meal, and photos you choose to save with a meal
• Diets and allergies: the diets you follow and the allergies you avoid. They are yours alone (people you share a kitchen with never see them) and are kept on your phone in encrypted storage. Answers you give during onboarding stay on your phone. They reach our servers only if you turn on "Save to my account" in Settings > Diet & allergies (off by default), so they follow you to a new phone and also filter suggestions made on our servers, such as Siri's "What can I make this week"
• Your consent choices: each time you give or withdraw consent, a record of it (yes or no, the policy version, where you chose, and when)
• Water you track, when you use that feature
• Inferences: recipe and meal suggestions that leave out recipes whose ingredient lists name your diets' exclusions or your allergies. The App reads ingredient names only and can miss things, so always check the ingredients

What stays on your phone and is never sent to us:

• Your sex, date of birth or age, height, weight, activity level, and goal, whether you enter them or the App reads them from Apple Health
• Where the feature is on: active and resting energy, steps, sleep, and workouts read from Apple Health, and the daily check-in built from them, your meals logged today and your meal times. Apple's on-device model picks one of a few fixed, pre-written lines on your phone; nothing goes to a server or to any model provider
• Your diets and allergies, unless you save them to your account (above)
• Nutrition the App writes to Apple Health (the meals you log and water). Apple Health is part of your phone, controlled by you

Why we collect it

• To provide the features you ask for: logging meals, showing your day against your targets, writing meals to Apple Health when you turn that on, and suggesting recipes that fit your diets and allergies
• To keep your diary and targets with your account, so they follow you to a new phone
• To find and fix problems and to understand which features are used (see "Who we share it with")
• To keep the service secure and prevent abuse

We do not use consumer health data for advertising, and we do not use it to make decisions with legal or similarly significant effects about you.

Where it comes from

• From you, when you set targets, log meals, take meal photos, describe a meal, scan a barcode, or choose diets and allergies
• From your phone, when you connect Apple Health (this stays on your phone, as described above)
• From our service providers, when they estimate a meal's nutrients from your photo or description, and from Open Food Facts, a public food database, when you scan a barcode

Who we share it with

We share consumer health data only with service providers ("processors") that handle it for us, under contract, to run the features above. We do not share it with anyone for their own purposes.

• Supabase: stores your account, targets, meal log, meal photos, consent records, and, if you save them, your diets and allergies
• Google Cloud (Gemini): estimates a meal's nutrients from a photo or a description you give, and returns the result
• PostHog: product analytics and session recordings, which receive no consumer health data: analytics never include meal names, calories, nutrients, goals, body details, diets, allergies, or your consent choice, and recordings pause on every screen that shows health data. If the App reads activity from Apple Health, PostHog may record whether you have an Apple Watch (yes or no)
• Sentry: error reports and a small share of masked screen replays, with text and images hidden
• Open Food Facts: receives the barcode you scan (not your account) and returns the product's nutrition

We may also disclose consumer health data when the law requires it, or to a buyer of our business, which would remain bound by this policy.

We do not send consumer health data to advertising platforms. The App's ad measurement (described in our Privacy Policy) carries installs, sign-ups, subscriptions, and grocery list activity, never meals, targets, diets, or allergies.

Your consent

We ask for your consent in the App before collecting consumer health data, and we collect it only for the purposes you agreed to. The App asks in two places: the "Save to my account" switch in Settings > Diet & allergies, and an Allow / Not now prompt before you connect Apple Health in the nutrition goal calculator. The onboarding diet step does not ask, because what you answer there stays on your phone. One consent covers both. If you say no the first time, nothing is stored on our servers.

You can withdraw your consent at any time by turning off "Save to my account" in Settings > Diet & allergies, or by emailing [email protected]. Withdrawing deletes the diets and allergies saved to your account (your phone keeps its own copy) and records the withdrawal. It does not undo what was lawfully done before. To have everything else deleted, ask for deletion as well (below).

Your rights

• Confirm and access: ask whether we collect, share, or sell your consumer health data, see it, and get a list of the third parties and processors it was shared with
• Delete: have it deleted, from our systems and from our processors. Deleting your account in the App (Settings > Profile > Delete account) deletes it at once
• Withdraw consent: as described above
• No discrimination: using these rights does not change the price or quality of Fixins for you

How to use your rights

Email [email protected] from the address on your account, or write to us at the address below. We will confirm who you are before we act (we will not ask for more than we need to), and we answer within 45 days. If we need more time, we will tell you why, once, within those 45 days. Requests are free; if you make more than two a year, we may ask why first.

Appeals: if we decline your request, you can appeal by replying to our answer with "Appeal" in the subject. We will answer the appeal in writing within 45 days and explain our decision. If you are in Washington and disagree with the outcome, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

How we protect it

Access to consumer health data is limited to people and services that need it to run Fixins, and only you can read your own records. It is encrypted in transit and stored with access controls. Diets and allergies saved to your account are kept until you withdraw consent or delete your account; meals and targets until you delete them or your account; consent records until you delete your account.

Changes

If we change this policy, we will post the new version here with a new date. If a change affects how we use or share consumer health data, we will ask for your consent again before it applies to you.

Contact