Consumer Health Data Privacy Policy
This policy is separate from our general Privacy Policy on purpose. Washington's My Health My Data Act requires a distinct consumer health data privacy policy, and we would rather publish one plainly than fold it into something longer. It applies to everyone, not only Washington residents — a right worth having in one state is worth having in all of them.
The categories of consumer health data we collect
Body and composition. Body weight, body-fat percentage, lean mass, and the measurements from DEXA scan reports you upload.
Cardiovascular and recovery. Blood pressure, resting heart rate, sleeping heart rate, heart-rate variability, sleep duration and stages, and a computed recovery score.
Metabolic. Blood glucose readings, including data from a continuous glucose monitor where you connect one, and energy expenditure.
Nutrition. The food you log, its macronutrient content, meal times, and adherence to a plan.
Exercise. Workouts, individual sets with weight and repetitions, subjective effort, and training adherence.
Laboratory results. The markers extracted from blood panels you upload — hormones, lipids, metabolic and inflammatory markers, and anything else the panel contains.
Supplements and physician-supervised protocols. Schedules and adherence records for regimens you and your own licensed clinician have decided upon.
Your own words. Notes, check-in responses, and messages you write inside the Service, which frequently describe how you feel.
Inferences. Trends and scores we compute from the above — an energy balance, a recovery reading, a rate of change.
Where it comes from
- You, directly — what you log, upload, and write.
- Apple Health, where you have granted access, including data your Apple Watch or a connected device wrote there.
- Documents you upload — DEXA reports, blood panels, supplement labels.
- Computed by us from the above.
We do not buy consumer health data, and we do not obtain it from data brokers or from anyone other than you and the sources you connect.
Why we collect it
To provide the Service to you, and for nothing else. Specifically: to display your own data back to you; to compute your training prescriptions, energy balance, recovery and adherence; to plan your nutrition; to answer your questions about your own numbers; and to send reminders you have enabled.
We do not use consumer health data for advertising, for marketing, for profiling unrelated to the Service, or to build products for anyone else.
Who we share it with — by name
Not categories. These are the specific companies that may process consumer health data on our behalf, and what each one receives:
| Who | What they receive | Why |
|---|---|---|
| Neon | The database, in full | Hosts your data so it is there when you open the app |
| Vercel | Application hosting and server logs | Runs the app; logs may incidentally contain request data |
| Anthropic | Health data sent for a specific feature | Macro estimates from photographs, extraction from uploaded documents, and Signal. Under commercial terms prohibiting training; retained up to seven days for abuse monitoring, then deleted |
| Apple | HealthKit data stays on your device; push tokens | App distribution, notifications, Apple Health integration |
| FatSecret | The name of a food you search for | Nutrition database lookups |
| Resend | Your email address and message contents | Transactional email — invitations, resets, reminders |
| Stripe | Billing identity only — no health data | Payments |
| Your email address for sign-in — no health data | Authentication |
Each receives only what its function requires. Every one of them is contractually restricted to processing on our behalf, and none is permitted to use your data for its own purposes.
We have no affiliates. Based Body System, LLC has no parent, subsidiary, or commonly-controlled company, so there is no affiliate sharing to disclose. If that changes, this policy changes with it.
We do not sell consumer health data
We do not sell it, rent it, license it, or exchange it for anything of value — not for money and not for other consideration. We have never done so and we do not intend to. If that ever changes, we would need your separate, specific written authorization first, and we would ask for it rather than assume it.
The shared restaurant library
One feature deserves naming here, because it is the only place anything derived from your data benefits someone other than you.
When you photograph a restaurant plate and record what you ate, the macronutrient numbers alone — calories, protein, carbohydrate, fat — together with the dish name and the month, may be added to a shared library to improve the estimate the next member sees.
Nothing that identifies you is contributed: no name, no account identifier, no date more precise than the month, no photograph, no notes, and nothing about your body, your plan or your protocol. Contributions are pooled and surfaced only as an aggregate. This is de-identified data, and it is not sold or shared outside the Service.
You may decline this and keep every other feature. Email us and we will turn it off for your account.
Your rights
To know. You may ask what consumer health data we hold about you, the categories of it, who we have shared it with, and why. We will respond within 15 business days, which is faster than any law requires of us.
To withdraw consent. You may withdraw your consent to our collection or sharing of consumer health data at any time. Withdrawal applies going forward. Because the Service cannot run without processing this data, withdrawing consent ends the Service — we will tell you that plainly rather than quietly degrading what you receive.
To delete. You may ask us to delete your consumer health data, and we will do so — from our active systems within 30 days, and from encrypted backups and archives as those are cycled, in no case more than six months from the request. We will also instruct every processor listed above to delete it. We will confirm to you when active deletion is complete, and again when backups have cycled.
To appeal. If we decline a request, we will tell you why in writing and how to appeal it. An appeal goes to James Miller directly and will be answered within 30 days. If we deny an appeal, you may contact the Washington State Attorney General.
How to exercise any of these: email james@thebespokephysique.com from the address on your account, or write to us at the postal address below. We may need to verify who you are before acting — we will not use anything you send us for verification for any other purpose.
We do not charge for these requests and we will not treat you differently for making one.
Security
Consumer health data is encrypted in transit and at rest. Access is restricted to your own authenticated account. Sign-in credentials on your phone are held in the iOS secure keychain. We keep no meal photographs. We hold the minimum that the Service requires and no more.
Children
The Service is for adults and is not directed to anyone under 18. We do not knowingly collect consumer health data from anyone under 18.
Changes
If we change this policy we will update the effective date above and, for material changes, notify you before the change takes effect.
Contact
Based Body System, LLC (d/b/a Bespoke Physique Protocol) james@thebespokephysique.com