Consumer Health Privacy Notice
Last updated: 4 October 2026
Who provides the service
MyBodyPath Limited, Irish company number 823059, provides MyBodyPath. Our registered address is 111 Brocan Wood, Monasterevin, County Kildare, W34 CH92, Ireland. Contact privacy@mybodypath.app for a consumer-health privacy request.
This notice explains consumer health information used by the MyBodyPath app. State definitions can cover information suggesting a health status, interest or use of a health-related service, as well as diagnosed conditions.
Categories and sources
| Category | Source and current handling |
|---|---|
| Body and wellbeing records | Age, height, weight, goals, planning preferences, body measurements, food/water records, workouts and related photos you choose. Stored locally to display your records and summaries. |
| Device health/activity information | Supported steps, distance, exercise time, heart rate, weight or body fat you permit Apple Health/Health Connect to provide. Availability depends on the platform/device. |
| Workout location and derived activity | Location/motion readings from a workout you start and resulting local route, distance and pace. Displaying online maps separately requests tiles for the viewed area. |
| Service-related identifiers and preferences | Your account/sign-in details, selected synced units/Food Region, technical requests and account/deletion state. Association with this wellbeing service may itself suggest health interests. |
| Health information you separately disclose for support | A message, screenshot, recording or file that you choose to send. Restricted account-support tools otherwise do not expose your private local health records. |
| Derived information | Local summaries/calculations based on records and readings above. The app does not present these as a medical diagnosis. |
Information comes from you, your chosen sign-in method, permitted device health and location/motion services, and technical interactions needed for a feature. Product lookup uses the barcode/search text you submit; no full Diary is uploaded to the food service by that lookup.
Purposes and choices
The app uses records to provide the logging, display, calculations and summaries you request. Selected services use limited account information to authenticate, secure the service, sync chosen preferences, process account deletion and prevent a deleted account reappearing after recovery. A support attachment is used to handle the issue for which you send it.
Where consent is required, collection is preceded by a clear choice stating the categories and purpose. A requested-service exception, where available, applies only to processing necessary for that requested service. It does not authorize unnecessary sensitive processing. Consent to collect does not authorize optional sharing, and Terms acceptance or an OS permission does not replace that consent.
Private Diary, body, workout and private-photo records stay on the device in the current account flows. There is no full-history cloud sync or configured remote meal-recognition service. Preferences sync is optional. An encrypted export is saved/shared only to the destination you choose, excludes private meal/progress/ profile photos, and remains outside automatic cloud-account deletion.
We do not sell consumer health data or use it for targeted advertising. The current features do not enable optional third-party sharing of your private health records. Before a future optional sharing feature, its categories, recipients, purpose and withdrawal route will be explained and a separate choice provided.
Recipients and service categories
| Recipient/category | Information involved |
|---|---|
| Account/security processor: Supabase | Identifiers, verified sign-in details, account state, selected preferences and necessary technical requests. Account and separate deletion-evidence databases currently use Frankfurt, Germany. |
| Encrypted deletion-evidence service: GitHub | Limited encrypted account-deletion evidence and technical repository/connection metadata; no Diary, full workout history or private-photo backup. |
| Sign-in providers: Google/Apple | Information exchanged for your chosen identity verification; a Google image may be retrieved for the local profile. Device health reads follow separate device permissions. |
| Transactional email service: Resend | Service-email recipient and delivery information. Processing can involve the United States. |
| Product lookup/image hosts: Open Food Facts | Submitted barcode/search text, product-image requests and technical connection information. |
| Map tile provider: OpenStreetMap tile service | Viewed map-area requests and technical connection information. |
| A destination you select for an export or support disclosure | The contents you expressly choose to send or save. A recipient outside our control may handle its copy under its own terms. |
Necessary processor/service handling is limited to the stated purpose and the applicable contract and law. No affiliate receives consumer health information through a separate affiliate-sharing feature in the current app. Account usage, technical identifiers and map/search requests can still reveal health interests; we do not describe these service interactions as “no information ever shared”.
Access, withdrawal, deletion and appeal
Contact privacy@mybodypath.app to request confirmation/access to consumer health information, the applicable recipient information, withdrawal of consent, deletion, or other rights available under your state law. We use proportionate verification, explain any lawful exception/refusal and provide the applicable response deadline and appeal route. To appeal a refused request, reply to the decision or contact the same address with Consumer health privacy appeal. We do not require a new account merely to make a request or appeal. Where applicable, you may complain to your state Attorney General after an appeal is refused.
Withdrawal stops future processing relying on that consent. We also assess deletion or another independent retention requirement; withdrawal does not retroactively invalidate earlier lawful processing. Revoking device permission stops future permitted reads but does not itself delete saved entries.
Local-profile removal, cloud-account deletion and user-exported files are separate. The live-cloud deletion target is 24 hours, with completed receipt access for 30 days; outages or recovery holds can delay it. Recovery copies are not promised erased within 24 hours. Limited deletion evidence/keys remain while a recovery copy could restore the account; deletion is reapplied before recovery reopens. A statutory consumer-health deletion request includes the applicable processor/recipient and backup obligations; a live account-completion receipt alone is not evidence that all such obligations have finished. We cannot erase a file you separately gave to a person or service outside our control.
Teens
The product minimum is 13; ages 13–17 receive logging and healthy-habit support. No automatic adult calorie-deficit targets, fasting plans or weight-loss deadlines are supplied to teen profiles. Who may make a health/privacy choice depends on the applicable rules and authority; a parent does not automatically receive the teen's private records. Download approval, service-Terms agreement and consent for a health purpose are separate.