This Consumer Health Data Policy supplements our Privacy Policy and describes how SheFast ("we," "us," or "our") collects, uses, and shares consumer health data. This policy is intended to comply with applicable consumer health data privacy laws, including the Washington My Health MY Data Act and similar state laws.
1. What Is Consumer Health Data?
"Consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This may include:
- Fasting and eating window logs.
- Body weight, body mass index (BMI), and related measurements you voluntarily enter.
- Menstrual cycle and hormonal health information.
- Hydration and nutrition data.
- Sleep patterns and energy levels.
- Any other health-related information you provide through the SheFast app.
2. Categories of Consumer Health Data We Collect
We collect consumer health data only when you voluntarily provide it to us or when you grant the app permission to access it through Apple HealthKit. Specific categories include:
- Fasting data: start/end times, fasting duration, fasting protocol (e.g., 16:8, 18:6).
- Body metrics: weight and BMI.
- Cycle data: menstrual cycle start/end dates and cycle length, if you choose to enter them.
- Wellness notes: mood, energy, and symptom logs you add manually.
- HealthKit data: active energy burned, resting heart rate, or body weight synced from Apple Health (only with your explicit permission).
3. How We Use Consumer Health Data
We use consumer health data solely for the following purposes:
- To provide and personalize the SheFast app experience, including tracking your fasts, displaying trends, and offering personalized recommendations.
- To generate in-app insights and progress reports for your own review.
- To improve app features and fix bugs through aggregated, de-identified analytics.
- To respond to your support inquiries when health data is relevant to the issue.
- To comply with applicable legal obligations.
We do not use consumer health data for advertising, profiling for advertising purposes, or to infer non-health characteristics about you.
4. How We Share Consumer Health Data
We do not sell consumer health data. We do not share it with data brokers. We share consumer health data only in these limited circumstances:
- Service providers: we share data with trusted third-party vendors (e.g., cloud storage, crash analytics) that process data on our behalf under binding contractual obligations that prohibit them from using your data for any purpose other than providing services to us.
- Legal requirements: we may disclose health data if required by law, regulation, court order, or governmental request.
- With your consent: we will share health data for any other purpose only with your explicit, informed, and revocable consent.
- Business transfers: in the event of a merger, acquisition, or bankruptcy, health data may be transferred, subject to appropriate protections and notice to you.
5. Your Rights Regarding Consumer Health Data
You have the following rights with respect to your consumer health data:
- Right to Access: request a copy of the consumer health data we hold about you.
- Right to Correction: request correction of inaccurate health data.
- Right to Deletion: request deletion of your consumer health data. You may also delete your account from within the app, which will trigger deletion of your data within 30 days.
- Right to Withdraw Consent: withdraw consent for any health data processing that relies on consent, without affecting the lawfulness of prior processing.
- Right to Non-Discrimination: we will not deny you service, charge you different prices, or provide a different level of quality because you exercised any of these rights.
To exercise any of these rights, contact us at privacy@shefast.app. We will respond within 45 days (or as required by applicable law).
6. HealthKit Data
Data you share with SheFast through Apple HealthKit is subject to additional restrictions:
- HealthKit data is used only to provide or improve health and fitness features within SheFast.
- HealthKit data is never used for advertising, marketing, or shared with third-party advertisers.
- HealthKit data is never sold to data brokers or research organizations.
- You can revoke HealthKit permissions at any time via Settings > Privacy & Security > Health on your iPhone.
7. Data Security for Health Information
We apply enhanced security measures to consumer health data, including encryption in transit (TLS) and at rest, access controls limiting who can view health data, and regular security reviews. Despite these efforts, no system is completely secure; if we become aware of a security breach affecting your health data, we will notify you as required by applicable law.
8. Data Retention
We retain consumer health data for as long as your account exists and for a limited period thereafter to comply with legal obligations. When you delete your account, we delete or anonymize your health data within 30 days, unless we are legally required to retain it longer.
9. Changes to This Policy
We may update this Consumer Health Data Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, through an in-app notice. Continued use of SheFast after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about how we handle your health data, or to exercise your rights, please contact us: