Consumer Health Data Privacy Policy

Effective: 20 October 2026 · For residents of Washington, Nevada, Connecticut and other US states with consumer health data laws

This policy explains how SelfOS handles "consumer health data" as defined by the Washington My Health My Data Act, Nevada SB 370 and similar laws. It supplements our Privacy Policy. SelfOS is developed by Viktoriia Smyrnova (a private individual), Novatoriv St. 2A, Kyiv 02090, Ukraine, contact selfos.contact@gmail.com.

In short: health information you enter or import into SelfOS is stored only on your device. We do not receive it, sell it or share it. The only health-related information that leaves your device is optional app-usage information showing which features were used (for example, that a sleep entry was logged), without any values.

1. Categories of consumer health data

Stored only on your device (we do not collect or receive it)

Body measurements and characteristics: weight, height, body composition, body measurements, target weight
Pregnancy or breastfeeding status, if you enter it
Food and water intake, calories and nutrients
Sleep times, sleep stages, sleep quality and the SelfOS sleep score
Steps, workouts and calories burned
Vital signs imported from Apple Health or Health Connect: heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, wrist temperature
Health-related goals, habits and notes you write

Information that leaves your device and may be considered consumer health data

App-usage events that show that a health-related feature was used: which health modules are turned on, that an entry was logged (for example "water was logged", "food was logged" with the meal type, "a sleep entry was logged", "a workout was logged", "weight was logged"), that an award was earned in a health module (without its level), and whether connecting or syncing your watch succeeded. These events never contain amounts, foods, times, readings or counts of records. They are sent only while analytics are turned on.
Food search terms and barcodes, which could reveal dietary interests.

2. Sources

You (what you type), your device's sensors through the operating system (steps), and Apple Health or Health Connect when you connect them.

3. Purposes

To provide the app's features on your device; to find foods you search for; and, if analytics are on, to understand which features are used so we can improve the app. We do not use consumer health data for advertising, profiling or any decision about you.

4. Sharing

We do not sell consumer health data and do not share it with third parties for their own purposes. The usage events and food searches described in section 1 are processed for us by service providers acting as our processors:

Google (Firebase Analytics) - app-usage events, if analytics are on
Supabase (our server provider) and FatSecret - food search terms
Open Food Facts - barcodes you scan

We do not have affiliates.

5. Consent

Information stays on your device unless you use a feature that needs the internet (food search, barcode lookup) or turn on analytics. App-usage information is sent only while analytics are turned on in Profile → Privacy. You can turn analytics off at any time, and no app-usage information is sent after that.

6. Your rights

You have the right to:

confirm whether we collect, share or sell your consumer health data, and access it;
get a list of the third parties and processors with whom it was shared, with contact information (they are listed in section 4);
withdraw consent;
have your consumer health data deleted, including by our processors.

Data on your device: you can view, export and delete it yourself in the app (Profile → Data → Export data, Profile → Delete All Data). Data held by our processors contains no names or contact details (see our Data Deletion page). For any request, email selfos.contact@gmail.com with the subject "Consumer health data request". We will respond within 45 days, which may be extended by another 45 days when reasonably necessary, and we will tell you if so.

Appeal. If we decline your request, you may appeal by replying to our answer with the subject "Appeal". We will respond within 45 days. If you are not satisfied, you may contact the Attorney General of your state (for example, Washington: atg.wa.gov/file-complaint).

We will not discriminate against you for exercising these rights.

7. Changes

We will update this policy if our practices change and, if we start collecting or sharing consumer health data in a new way, we will ask for your consent first.