Consumer Health Data Privacy Policy
Last updated October 5, 2026. This policy covers "consumer health data" as defined by Washington's My Health My Data Act and Nevada's SB 370, and similar laws. The rest of our practices are in the main Privacy Policy.
What health data we collect
- Your plan answers (only after you agree on the "Your stats stay yours" screen): sex, birth year, height, weight, target weight, goal (lose, maintain or gain), pace, everyday activity, how often you train, food rules (such as vegetarian or low carb), what breaks your streak, and your settings (when your day starts, and whether "Hide calorie numbers" is on).
- The targets we work out from them: daily calories and protein.
- Your meal and workout log, if you make an account: the foods, calories, protein, carbs and fat you log, and your workouts.
- Meal photos you choose to scan are read by an AI and then thrown away. We don't keep them.
Where it comes from
From you: what you type, tap or photograph in the app. In the phone app, also from Apple Health or Health Connect if you connect it (your active calories and workouts); that stays on your phone and never reaches our server. We don't buy health data or collect it from other sources.
Why we collect it and how we use it
- To work out your calorie and protein targets and target date.
- To save your plan and log to your account, so they follow you to any device.
- To see, as totals across all players (never one person's answers), which goals and problems are most common, so we can improve the app.
We don't use it for advertising, we don't sell it, and we don't use it to decide anything about you beyond your plan.
Who we share it with
- No one outside XP Eats, except Cloudflare, which hosts our website, database and photo-reading AI and processes data only to run the service for us.
- We would share it only if the law requires it (for example a valid court order). If we ever want to share it for any other reason, we'll ask for your separate consent first.
Your rights and how to use them
- See or change it: ⚙️ → Your plan shows every answer we hold; tap one to change it.
- Withdraw your consent: ⚙️ → "Answers saved to your account" → Off. We delete your saved answers from our server right away.
- Delete all of it: 👤 → Delete account deletes your account, answers, log and scan history.
- Confirm what we have, get a copy, or ask anything: email seanstemm@yahoo.com. We answer within 45 days and won't charge you. If we turn a request down, you can appeal by replying to that email, and we'll answer the appeal within 45 days. If you're still unhappy, you can contact your state's Attorney General.
Contact
XP Eats · seanstemm@yahoo.com