Consumer Health Data Privacy Policy

Effective Date: July 6, 2026

This Consumer Health Data Privacy Policy supplements our Privacy Policy and describes how Metabola LLC ("we," "us," or "our") collects, uses, and protects "consumer health data" as defined by the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law. It applies to consumers whose consumer health data is collected in Washington or Nevada, though we apply the same practices to all Metabola users regardless of where they live.

1. Consumer Health Data We Collect

Metabola is a nutrition tracking app, and the categories of consumer health data we collect are limited to what the app needs to do its job:

Bodily measurements: your weight, if you choose to provide it.
Health-related goals: your calorie and macronutrient targets.
Dietary and nutrition information: the meals you log, the food photos you submit, and the estimated calorie and macronutrient data our AI derives from them.

We collect this data from one source only: you, directly, when you enter it or take a photo within the app. We do not collect consumer health data from third parties, data brokers, or any other source, and we do not use your data to infer health information beyond the nutritional estimates the app displays to you.

2. Why We Collect It and How We Use It

We collect and use consumer health data solely to provide the services you request from the app:

To analyze your food photos and produce estimated calorie and macronutrient information.
To track your intake against the goals you set.
To maintain your meal history and show your trends over time.
To provide customer support when you ask for it.

We do not use consumer health data for advertising, and we do not sell it. We will not collect, use, or share your consumer health data for any purpose not disclosed in this policy without first obtaining your consent.

3. Sharing of Consumer Health Data

We do not share or sell your consumer health data. The categories of third parties and affiliates with whom we share consumer health data: none.

To operate the app, we use service providers (processors) who handle data only on our behalf, under contract, and only according to our instructions:

Supabase: database, secure file storage, and user authentication.
Google and OpenAI: analysis of the food photos you submit, solely to return nutritional estimates to you.

These processors are not permitted to use your consumer health data for their own purposes.

4. Consent

We collect consumer health data only with your consent, or to the extent necessary to provide a product or service you have requested from us. If we ever wish to share your consumer health data, we will first ask for your separate consent; if we ever wished to sell it (we do not and will not), the law would require your signed authorization. We will never obtain consent through misleading design or "dark patterns," and you may withdraw your consent at any time as described below.

5. Your Rights

You have the right to:

Confirm and access: confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of any third parties with whom it has been shared (currently: none).
Withdraw consent: withdraw your consent to our collection or sharing of your consumer health data at any time.
Delete: have your consumer health data deleted. You can do this yourself at any time using the account deletion option in the app's settings. Deletion removes your data from our active systems, is passed on to our processors, and residual copies in encrypted backups are purged as the backups age out, within the timeframe required by law.

To exercise any of these rights, use the in-app options where available or contact us at support@metabola.io. We will need to verify that the request is coming from you (typically by confirming control of the email address on the account). We will respond within 45 days; if we need more time, we may extend once by an additional 45 days and will tell you why. Exercising your rights is free, and we will not discriminate against you for doing so.

6. Appeals

If we decline to act on a request, you may appeal by replying to our response or emailing support@metabola.io with the subject line "Health Data Appeal." We will respond to your appeal in writing within 45 days, including an explanation of our decision. If your appeal is unsuccessful, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.

7. Changes to This Policy

We may update this policy from time to time. If we make material changes to how we handle consumer health data, we will notify you through the app or by email, and where the law requires it, we will ask for your consent before applying new practices to previously collected data.

8. Contact Us

For any questions about this policy or your consumer health data, contact: support@metabola.io