Consumer Health Data Privacy Policy
Effective October 1, 2026
About this policy
This Consumer Health Data Privacy Policy describes how [COMPANY LEGAL NAME] (“we,” “us” or “our”) collects, uses, shares and protects “consumer health data” through the Me & Milo app and related services (the “Service”). It is written to meet the requirements of Washington’s My Health My Data Act (RCW 19.373), Nevada’s consumer health data law (Senate Bill 370, NRS Chapter 603A), and the consumer health data provisions of the Connecticut Data Privacy Act, and we apply it to all our US users.
“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. For Me & Milo, that includes most of what you log.
This policy supplements our Privacy Policy, which covers all personal information and is available in the app under Settings and at https://meandmilo.app/privacy. If there is a conflict between the two for consumer health data, this policy controls.
Our commitments
- We collect consumer health data only with your consent and only to provide the features you use.
- We never sell your consumer health data.
- We never share it for advertising, and Me & Milo contains no ads, advertising SDKs, analytics SDKs or tracking technologies.
- We don’t collect your location, and we never use geofencing around healthcare facilities or anywhere else.
- We don’t allow third parties to collect consumer health data about your online activities over time or across different apps or websites through the Service.
- You can access, export and delete your data, and withdraw consent, at any time.
Categories of consumer health data we collect
Depending on the features you use, we collect these categories of consumer health data:
- Medication and treatment information: the GLP-1 medication you take, your dose, shot day and time, dose history, injection sites, step-up (titration) plan, and supply and refill details.
- Body measurements: your weight and goal weight, and weight read from Apple Health or Health Connect if you connect them.
- Physical activity: workouts you log, and step counts from Apple Health, Health Connect or Fitbit if you connect them.
- Nutrition and hydration: food logs, meal photos, nutrition estimates (such as calories and protein), and water intake.
- Symptoms and side effects: side effects and symptoms you log, and their severity.
- Mental and emotional wellbeing and bodily functions: daily check-ins about hunger, “food noise,” energy and mood; and journal notes and non-scale wins that may describe your health.
- Progress photos: photos you add to track changes in your body. These stay on your device.
- Health-related conversations: messages you send to Milo, the in-app AI cat, and Milo’s replies.
- Derived information: information we calculate from your logs, such as estimated medication level charts, trends, patterns and doctor-visit summaries.
- Health-related account and subscription information: because Me & Milo is a GLP-1 companion, the fact that you have an account (your email address) or a subscription may itself suggest that you use or are interested in GLP-1 medication.
We do not collect precise location, biometric data used to identify you, genetic data, or reproductive or sexual health data (unless you choose to write about it in a free-text note or chat).
Why we collect and use it
We collect and use consumer health data only as reasonably necessary for these purposes:
- To provide the features you ask for: storing and showing your logs, tracking doses and supply, calculating estimates and trends, and showing your home-screen widget and Live Activity on your device.
- To schedule reminders you set up. Reminders are scheduled locally on your device.
- To provide AI features you choose to use, such as chatting with Milo, analyzing meal photos and summarizing your logs for a doctor visit, but only after you tap Allow in the in-app AI consent prompt.
- To sync weight and protein with Apple Health or Health Connect, and read steps from Fitbit, if you turn those on.
- To create a doctor-visit PDF report on your device when you ask for one.
- To store and back up your account and logs on our servers, and keep them in sync across the devices you sign in on, including Me & Milo on the web.
- To keep the Service secure, prevent fraud and abuse, and fix problems.
- To respond to your requests, including privacy requests, and to comply with law.
We don’t use consumer health data for advertising, marketing, research or to make decisions about your eligibility for anything.
Where we get it
- Directly from you, when you enter or photograph information in Me & Milo.
- From Apple Health (HealthKit) or Android Health Connect, if you connect them: weight and steps.
- From Fitbit through Google’s health data service, if you connect it: daily step counts only.
- From our own processing: estimates, trends and summaries we calculate from your logs, and AI-generated replies and meal estimates produced by our AI service provider at your request.
Consent
Collecting consumer health data is necessary for Me & Milo to work. When you set up Me & Milo, before we ask any health questions, we ask for your separate consent to collect and use your consumer health data for the purposes in this policy. We ask for separate consent, in the app, before any consumer health data is shared with our AI service provider, and your device asks for your permission before Me & Milo can access Apple Health, Health Connect, Fitbit, your camera or your photos.
We will ask for your separate consent before we collect or use your consumer health data for any purpose not described in this policy, or share it with anyone not described below.
Who we share it with
We do not sell consumer health data. We share it only with the following categories of recipients, and only for the purposes described:
- AI service provider (processor): Anthropic, PBC. If you tap Allow in the AI consent prompt, we send the message you type, meal photos you choose to analyze, a summary snapshot of your recent logs (such as doses, weight, food and symptoms), and data you include in a doctor-visit summary, through our backend server to Anthropic, only so it can generate a reply for you. Under Anthropic’s commercial terms, this data is not used to train AI models by default.
- Cloud hosting and infrastructure providers (processors), such as Amazon Web Services, which host the servers that store your account and logs and relay AI requests, on our behalf.
- Subscription management provider (processor): RevenueCat, which receives your subscription status and an app account identifier to manage your subscription. Because Me & Milo is a GLP-1 app, this may indicate you use GLP-1 medication. It does not receive your health logs.
- Platforms you connect, at your direction: Apple (Apple Health), Google (Health Connect and Fitbit). We write your weight and protein to Apple Health or Health Connect only if you turn this on.
- People you choose: the doctor-visit PDF report is created on your device and goes only to the people or apps you choose to share it with.
- Legal and safety: government authorities or others when required by law or valid legal process, or to protect someone’s safety. Where legally permitted, we will try to notify you first.
- Business transfers: a successor in a merger, acquisition or sale of assets, but only with your consent where required by law.
Our processors may use consumer health data only to provide services to us under a written contract, and are not allowed to use it for their own purposes.
Barcode lookups send only the barcode number to Open Food Facts, a public food database. No consumer health data or personal information is sent.
Affiliates. We do not currently have any affiliates with whom we share consumer health data. If that changes, we will update this policy and list them here.
Your rights
You have the following rights regarding your consumer health data:
- Right to confirm and access: to confirm whether we collect, share or sell your consumer health data, and to access that data, including a list of all third parties and affiliates with whom we have shared or sold it and an active email address or other online way to contact them.
- Right to delete: to have us delete your consumer health data. When we delete it, we also tell our processors and any third parties with whom we shared it to delete it too. Data in backups is deleted as those backups are overwritten, within 30 days.
- Right to withdraw consent: to withdraw your consent to our collection and sharing of your consumer health data.
- Right to appeal: to appeal our decision if we deny your request.
- Right to non-discrimination: we won’t treat you unfairly for exercising your rights.
How to exercise your rights
In the app (fastest):
- Access and export: Settings → Privacy & legal → Export my data gives you a copy of your data in a machine-readable file (JSON).
- Delete: Settings → Account → Delete account permanently deletes your account and all your data in Me & Milo.
- Withdraw AI sharing consent: Settings → Safety → AI features. After you withdraw, no new data is sent to our AI provider.
- Stop health app syncing: turn off Apple Health, Health Connect or Fitbit in Me & Milo’s Settings, or change permissions in the Health app, Health Connect or your Google account.
- Withdraw consent to collection: because Me & Milo can’t work without collecting health data, withdrawing consent to collection means deleting your account (Settings → Account → Delete account).
By email or mail: send your request to [privacy@yourdomain.com] with the subject line “Health data request,” or write to [COMPANY LEGAL NAME], [COMPANY MAILING ADDRESS]. Tell us which right you want to exercise. You can also ask for the list of third parties we have shared your data with.
Verification. To protect your data, we will verify your identity, usually by asking you to send the request from the email address on your account or to confirm a code sent to it. We won’t ask you to create an account just to make a request.
Authorized agents. You may use an authorized agent where the law allows. We may ask for proof that the agent is authorized and ask you to verify your identity directly.
Timing and cost. We will respond within 45 days of receiving your request. If we need more time, we may extend this once by up to 45 more days when reasonably necessary, and we will tell you why within the first 45 days. Requests are free, up to twice a year; we may charge a reasonable fee or decline requests that are clearly unfounded, excessive or repetitive, as the law allows.
How to appeal
If we deny your request in whole or in part, we will explain why. You can appeal by replying to our decision or emailing [privacy@yourdomain.com] with the subject line “Health data appeal” within a reasonable time after our decision.
We will respond to your appeal in writing within 45 days, explaining any action we took or did not take and why. Where the law allows, we may extend this by up to 60 more days and will tell you if we do.
If we deny your appeal, you can contact your state Attorney General:
- Washington: Washington State Office of the Attorney General, www.atg.wa.gov/file-complaint
- Nevada: Nevada Office of the Attorney General, ag.nv.gov/Complaints/File_Complaint
- Connecticut: Connecticut Office of the Attorney General, portal.ct.gov/ag
- Other states: your state Attorney General’s office.
No sale and no geofencing
We do not sell consumer health data, and we will not sell it in the future without first getting a valid, signed authorization from you as required by law.
We do not collect location data, and we do not implement a geofence around any facility that provides in-person healthcare services (or anywhere else) to identify, track, collect data from, or send notifications or messages to anyone.
How we protect and keep it
The consumer health data you log is stored on our servers in the United States, hosted by Amazon Web Services, and a copy is kept on each device you sign in on (on the web, in your browser’s storage for this site). Signing out removes that device’s copy. Progress photos and meal photos stay on the device where you took them.
We limit access to consumer health data to employees, contractors and processors who need it to provide the Service, and we use reasonable administrative, technical and physical safeguards to protect it, including encryption in transit and at rest on our servers and hashed passwords.
We keep consumer health data for as long as your account is active. When you delete your account, we delete your consumer health data from our servers immediately, and backup copies are overwritten within 30 days, unless the law requires us to keep it longer.
Who this policy is for
Me & Milo is for adults 18 and older in the United States. We don’t knowingly collect consumer health data from anyone under 18, and we will delete it if we learn that we have.
Changes to this policy
We may update this policy from time to time, and we will change the effective date above when we do. If we make a material change, such as collecting a new category of consumer health data, using it for a new purpose, or sharing it with a new category of recipients, we will notify you in the app or by email and ask for your consent before the change applies to you.
Contact us
- Email: [privacy@yourdomain.com]
- Mail: [COMPANY LEGAL NAME], [COMPANY MAILING ADDRESS]
- Website: https://meandmilo.app/health-data-privacy