Vhet Consumer Health Data Privacy Policy
Effective date: [DATE PUBLISHED]
This policy applies to "consumer health data" collected by Vhet LLC ("we") through the Vhet app. This includes data covered by Washington's My Health My Data Act (RCW 19.373), Nevada law (NRS 603A.400 to 603A.550), and Connecticut's consumer health data provisions.
1. Categories of consumer health data we collect, and how we use them
| Category | Purpose and how we use it |
|---|---|
| Body measurements and profile data: height, weight, age, sex, fitness goals | Calculate calorie estimates, personalise workout plans and goals, show progress |
| Workout and activity logs: exercises, duration, steps, calories | Record your workouts, show history, trends and progress |
| If and when this feature is available, data from Apple Health (HealthKit) or Android Health Connect that you approve, such as heart rate, sleep, steps, active energy and workouts | Show your data in the App, combine it with your workouts, personalise insights and plans, and (if you allow it) write your workouts back to Apple Health or Health Connect |
| Inferences derived from the data above, such as estimated fitness level or progress towards goals | Personalise your plans and in-app insights |
| Precise location, only to the extent it could reasonably indicate an attempt to get health services or supplies | The App uses GPS location only to map your runs and routes, and only while you're using it. Routes are stored only on your device and are not sent to us or to anyone else. We do not use location to identify or track visits to health care providers. |
| Consumer health data included in an AI prompt (for example goals, workouts or food information you submit or that is used for AI weekly plans or, if and when available, coach or recipe features) | Provide the optional AI reply you requested, only with your separate AI permission |
We use consumer health data only to provide the App features you request, to keep the App secure, and to comply with law. We never use it for advertising or marketing.
2. Sources
- You: what you enter in the App.
- Your device: motion and location sensors, with your permission.
- Apple Health (HealthKit) and Android Health Connect (if and when available): only the data types you approve.
3. Categories of consumer health data we share
We don't sell consumer health data. We don't share it (as the law defines sharing) except, with your separate consent or at your direction, when we write the workout and activity data you choose to Apple Health or Health Connect on your device (if and when this feature is available).
We disclose consumer health data to processors (service providers) only as needed to provide the App to you. This includes all the categories listed in Section 1.
We never provide consumer health data to advertising networks, analytics providers, data brokers, or anyone for their own use.
4. Third parties and affiliates who receive consumer health data
- Processors acting on our instructions under contract. This is the complete list, and we will update it if it changes:
- Supabase: hosting, database and sign-in (servers in Canada).
- OpenAI: AI weekly plans and other optional AI features, only when you have given separate AI permission and consumer health data is included in the request.
- Cloudflare: hosts our website (vhet.app).
- Food databases. USDA FoodData Central and Open Food Facts receive only the words you type into food search or the barcode number you scan. They do not receive consumer health data.
- Apple Inc. (HealthKit) and Google LLC (Health Connect), if and when this feature is available, only when you direct us to write data to those apps on your device.
- Affiliates: None.
- Other third parties: none, unless the law requires disclosure.
5. How we process consumer health data
We process consumer health data on secured cloud servers operated by our processors in Canada. It is encrypted in transit and at rest. Access is limited to staff and processors who need it to provide the App.
6. Your rights and how to exercise them
You have the right to:
- Confirm and access. Confirm whether we collect, share or sell your consumer health data, and access it. This includes a list of all third parties and affiliates we have shared it with or sold it to, with an active email address or other online way to contact them.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data. We'll delete it from all our systems, including archives and backups (backups within 90 days), and notify our processors and any third parties who received it so they delete it too.
- Stop. Ask us to stop collecting, sharing or selling your consumer health data.
- Review and correct your data. You can review and edit most of it directly in the App, or ask us to correct it.
How to submit a request:
- in the App: to get a copy of your data, go to Settings > Privacy > Download my data while signed in (see Section 12 of our Privacy Policy, https://vhet.app/privacy)
- by email: support@vhet.app, sent from the email address you use to sign in to Vhet (the App's Settings > Privacy screen can start this email for you)
You don't need to create an account to make a request, but if you already have one, we may ask you to use it. We'll verify your identity using commercially reasonable methods.
We respond within 45 days. We may extend this once by 45 more days if reasonably necessary, and we'll tell you why within the first 45 days. Responses are free up to twice a year.
Appeals. If we refuse to act on your request, you can appeal by emailing support@vhet.app with "Consumer Health Data Appeal" in the subject line. We'll tell you in writing within 45 days what we did and why. If we deny your appeal, you can complain to your state Attorney General:
- Washington: https://www.atg.wa.gov/file-complaint
- Nevada: https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/
- Connecticut: https://portal.ct.gov/ag/common/complaint-form-landing-page
7. Collection by third parties over time and across apps and websites
The App has no third-party advertising or analytics tools, so no third party collects your consumer health data, or data about your activity, over time and across different apps or websites through the App. If we add an advertising or analytics tool in future, we'll update this policy and our Privacy Policy (https://vhet.app/privacy) first. Those tools will never receive consumer health data from us.
8. Changes to this policy
We'll notify you of material changes to this policy in the App or by email before they take effect. We won't collect new categories of consumer health data, use it for new purposes, or share it with new recipients without first telling you and getting your affirmative consent.