Consumer Health Data Privacy Policy

1. The consumer health data we collect

Fuelist calculates nutrition targets and builds meal plans. To do that it collects the following, all of which we treat as consumer health data:

• Age and biological sex
• Height, current weight, and target weight
• Activity level
• Weight, fitness, and nutrition goals
• Calculated and custom calorie and macronutrient targets
• Dietary style, and any custom diet description you write
• Food allergies and dietary restrictions
• Foods you dislike, and meals you reject
• Meal frequency, snack and dessert preferences
• Preference notes distilled from what you tell the in-app chef

2. Where we collect it from

Directly from you, and only from you. You enter it during onboarding, when you edit your goals or restrictions, or when you describe how you like to eat to the chef.

We do not buy consumer health data. We do not obtain it from data brokers, advertising networks, public records, or any other third party. We do not infer it from your device, and we do not read it from Apple Health or any other health app.

3. Why we collect it, and how it is used

• To calculate your targets. Age, sex, height, weight, activity level and goals are used in a standard formula to produce daily calorie and macronutrient targets.
• To generate your meal plans and recipes so they fit those targets.
• To exclude your allergens and restrictions from generated and shared recipes.
• To build your shopping list from the plan.
• To carry your preferences into future plans, so you do not repeat yourself.

That is the complete list. We do not use consumer health data for advertising, for profiling you, for research, for training AI models, or for any purpose not stated here. If we ever want to use it for something new, we will ask for your consent first.

4. The consumer health data we share, and with whom

We share consumer health data only with the service providers that operate Fuelist on our behalf, under contracts that restrict them to processing it for us. We do not share it with anyone else.

Your age is used on your device to calculate your targets and is not stored on our servers, though it is included in the information sent to generate a plan.

We do not sell consumer health data

AlyraLabs has never sold consumer health data and does not sell it. If that ever changed, the law requires us to obtain your separate, signed written authorization first, and we would.

We also do not use geofencing around health care facilities to identify, track, collect data from, or send messages to anyone. Fuelist does not collect location at all.

5. Your rights

If you are a Washington or Nevada resident, you have the right to:

• Confirm whether we collect, share or sell consumer health data about you, and access that data.
• Receive a list of all third parties with whom we have shared or sold it, together with a way to contact each of them. We will provide current contact details for each provider named in section 4 as part of any access response.
• Withdraw your consent to our collection of your consumer health data, and separately to our sharing of it.
• Delete your consumer health data.

How to exercise them

In the app, at any time. You can edit or clear your goals, measurements, restrictions and preference notes in Settings. Deleting your account from inside the app deletes your profile, plans, plan meals and shopping items from our servers, and instructs our providers to delete their copies.

Or email us at contact@alyralabs.com with what you want us to do. We may need to confirm you control the account before we act.

We will respond within 45 days. If we need longer we will tell you within that period and may take up to 45 additional days. There is no charge.

If we refuse

If we decline to act on your request, we will tell you why. You may appeal by replying to that response, or by emailing contact@alyralabs.comwith “Appeal” in the subject line. The appeal reaches us the same way your original request did.

Within 45 days of receiving an appeal we will tell you in writing what action we have taken or not taken, and explain our reasons.

If we deny your appeal, you may complain to your state's Attorney General:

• Washington: atg.wa.gov/file-complaint
• Nevada: ag.nv.gov/Complaints/File_Complaint

6. How long we keep it

While your account is active. Deleting your account deletes it. Some information — your age, your scanned pantry items, and your chef conversation — is stored only on your device and never reaches our servers; removing the app removes it. See the Retention section of our Privacy Policy for the full detail.

7. How we protect it

Access to your records is restricted at the database level so that one account cannot read another's. Data is stored in the United States. If we discover a breach affecting your identifiable health information, we will notify you without unreasonable delay and no later than 60 days after discovery, and notify the Federal Trade Commission as its Health Breach Notification Rule requires.

8. Changes to this policy

If we change what we collect, why, or who we share it with, we will update this policy before the change takes effect and — where the law requires it — ask for your consent first.

9. Contact