Consumer health data

This consumer health data privacy policy is provided by Insightfull Development LLC, a California limited liability company in the United States. It describes our handling of consumer health data, including for people covered by Washington’s My Health My Data Act or other applicable consumer health privacy laws.

It supplements our general privacy policy. Health-related data may be sensitive even when it is not a formal medical record or is not covered by HIPAA. Contact support@insightfull.app about this policy.

• Information from you: diary entries and conversations about symptoms, mood, medication, food, sleep, and other health matters; goals and preferences; and health-related information included in feedback.
• Connected information: Apple Health categories you permit, including sleep, steps, weight, activity, exercise, resting heart rate, heart rate variability, respiratory rate, and blood oxygen. The app synchronizes daily summaries to its backend.
• Derived information: insight scores, trends, generated responses and reports, possible food or symptom associations, correlation confidence and evidence, and related alerts.
• Associated information: account identifiers, dates, and device or notification records when they are connected to the health information above.

The sources are you, Apple Health on your device, your paired devices, and processing of the information you provide. Current food photo auto-log analyzes the selected photo on your iPhone; saved meal text can become part of your synchronized diary and cloud analysis.

The app imports older diary entries and saved reports stored on your device into the same signed-in account. Confirmed imports are recorded so retries do not create duplicate records; the original files remain on this device after import. If an older diary entry already contains precise location coordinates, those coordinates are copied with the entry to our backend to preserve the record. This migration does not request new location permission or collect your current location. Imported location metadata is excluded from cloud AI prompts and automatic correlation evidence. Location details you write in diary or conversation text may still be included when you enable cloud AI sharing.

Offline diary drafts, queued entries, and cached diary copies remain on this device when you sign out. They are stored separately for each account in files protected by iOS Data Protection and excluded from device backups. The app makes them available again when the same account signs in and does not upload them for a different account.

We use consumer health data to save and synchronize your diary, display health trends, calculate scores, identify possible patterns, answer questions, generate reports, and provide watch summaries and notifications. We also use information you supply to handle support, privacy requests, and security or legal obligations.

These features provide personal wellness information. They do not diagnose or treat conditions and are not an emergency monitoring service. We do not send your diary contents or Apple Health records to our advertising SDK for targeting.

Collection, use, and sharing must have the permissions or other lawful basis required by applicable law. This policy does not itself provide consent for optional sharing.

• Backend hosting and database providers process synchronized records, derived results, and operational information to run and store the service.
• OpenRouter and OpenAI receive permitted messages, conversation context, health summaries, and diary text for cloud chat and deep analysis after you enable cloud AI sharing. Current routing is restricted to OpenAI through OpenRouter, with fallback to other providers disabled.
• TypeSafe, after cloud AI sharing is enabled, receives derived correlation evidence and confidence values to evaluate patterns. This can happen automatically after diary or health synchronization and excludes categories disabled in AI data settings.
• Notification delivery providers process device tokens and notification content for push delivery. Push alerts use generic reminder or new-insight text. The iPhone separately shares selected health summaries with your paired watch.
• Support personnel and service providers may receive health information you include in a support request or that is necessary to resolve it.

We may disclose information where required by law or in other circumstances permitted by applicable consumer health privacy law. If you choose to share a report or other information with someone else, that recipient may handle it independently.

The website’s waitlist administration integration receives account and waitlist event information. It does not receive your app diary or Apple Health records. Our general policy describes that separate flow.

Manage Apple Health permissions in Apple’s Health app or device settings. Revoking a permission stops future access through that connection; it does not remove information already synchronized.

The app’s AI category settings and Apple Health permissions are separate. After explicit cloud AI permission, chat, deep analysis, and automatic correlation processing exclude categories explicitly switched off and include categories without a saved restriction. These switches do not limit health synchronization to your Insightfull account. Cloud AI can process permitted diary text and summaries as described above.

Turn off future cloud AI sharing in Profile → Privacy & Data → Manage AI sharing. This stops new cloud AI requests and resets context for future replies; it does not recall information already sent or automatically remove saved reports. To request restrictions or deletion of previously collected health data, contact support@insightfull.app. We will explain the effect on features that need the data. Consent withdrawal does not change the lawfulness of processing that occurred before withdrawal.

Where applicable law provides these rights, you can ask us to confirm whether we collect or share your consumer health data, access it, obtain information about its recipients, withdraw consent to collection or sharing, or delete it. You may also request the list of third parties and affiliates with whom it has been shared or sold and their contact information, as provided by applicable law.

Email support@insightfull.app from your account email where possible and describe the request. We may request information needed to verify your identity without collecting unnecessary health details. Requests apply to relevant copies held by us and to required downstream deletion instructions, subject to lawful exceptions.

The app provides an archive request, status, and authenticated download in Privacy & Data. Account deletion in My Account shows a pending request until the worker removes app account records and the sign-in identity. A limited deletion record remains to prevent account recreation by late events. Deleting a single entry does not automatically erase past reports or chat text. Ask support for assistance with related provider records and device copies.

When this device receives confirmation that an account-deletion request has been accepted, the app removes that account’s offline diary files and older local diary and report copies from this device, and blocks queued uploads while deletion is pending. If local cleanup cannot finish, the app offers a retry.

If we decline a request, reply with “consumer health data appeal” to seek a review. We will respond within the period required by the law that applies to your request and explain any applicable extension or exception. If an appeal is denied, you can contact the regulator responsible for your request. If your request is covered by Washington’s My Health My Data Act and your appeal is denied, you may submit a complaint to the Washington Attorney General.

We will update the date on this page when this policy changes and provide further notice or obtain consent where required. For consumer health privacy questions, contact Insightfull Development LLC at support@insightfull.app.