Consumer Health Data Privacy Policy

This policy explains how Sthira handles consumer health data, as required by Washington's My Health My Data Act and similar laws. It applies to everyone. Our full Privacy Policy has more detail.

Health data we collect

• Medicines you take, doses, dose dates and injection sites.
• Meals, meal photos (sent for analysis and then deleted) and nutrition estimates.
• Weight, waist, height, blood sugar, A1C, symptoms, side effects, energy, appetite and food noise.
• If you save a coverage plan: your type of insurance, medicine, health conditions that affect coverage, starting BMI and what you pay.
• Goals such as losing, gaining or holding weight, and what you ask the coach.

Where it comes from

From you, when you type, photograph or scan something in the app. We don't buy health data or collect it from other companies.

Why we collect it

Only to provide the features you use: logs, targets, insights, reminders, the coach and reports. Never for advertising.

Who we share it with

• Processors that run the service for us: Anthropic (meal estimates and the coach), our hosting and database providers, Stripe (payments) and ZeptoMail by Zoho (email).
• People you choose: a doctor through a report link, or a coach you add in Settings.

We do not sell consumer health data, and we will never share it with third parties for their own purposes without your separate consent.

Your rights

• Confirm whether we hold your health data and get a list of everyone we shared it with.
• Withdraw consent at any time.
• Delete your health data, including from backups within 30 days. Use Settings, or email privacy@example.com.
• Appeal a refusal by replying to our answer. If we still refuse, you can complain to the Washington State Attorney General.

We answer requests within 45 days and won't treat you differently for using these rights.

Contact

privacy@example.com