Consumer Health Data Privacy Policy

Who this is for

This policy applies to everyone, and it exists because of laws including Washington's My Health My Data Act and Nevada's SB 370. Those laws give residents of those states specific, enforceable rights. We extend the same rights to every Sagoma user rather than asking you where you live before deciding how to treat your data.

It sits alongside our general Privacy Policy, which covers everything else.

What counts as consumer health data here

Information you record in Sagoma that relates to your physical health, including:

• Body weight, body measurements, and estimated body fat.
• Progress photographs.
• Food and nutrition logs.
• Training records, and any injury or limitation you tell the app about.
• Anything you enter that describes a symptom, condition, or health goal.

Where it comes from

One source only: you, entering it into the app. We do not buy health data, we do not receive it from data brokers, advertising networks or other apps, and Sagoma does not read Apple Health or any other health store unless you explicitly connect it, which is off by default.

Why we collect it

• To generate and adapt your training and nutrition plan on your device.
• To show you your own history and trends.
• To synchronise your history between your devices and restore it if you lose one.
• To enforce the safety floors — the body fat limits and refused protocols.

We do not use it for advertising, profiling, scoring, or any purpose outside providing the service to you.

Who we share it with

No third party receives your consumer health data in readable form, because no third party — including us — can decrypt it.

The encrypted blobs are stored by our cloud database and hosting provider, who holds them on our behalf under contract and has no key. That is the complete list. We do not share consumer health data with advertisers, analytics providers, data brokers, insurers, employers, or affiliates.

We do not sell it

Sagoma does not sell consumer health data, and we do not collect the valid authorisations that a sale would require, because we do not intend to make one. If that ever changed we would have to obtain your separate, specific, written authorisation first — and we would tell you plainly rather than through a policy update.

Your rights

Confirm and access

Ask whether we hold consumer health data about you and get a copy, including a list of every third party it has been shared with. In the app your full history is available to export at any time.

Withdraw consent

Withdraw your consent to our collection or sharing of consumer health data, at any time, without giving a reason.

Delete

Have your consumer health data deleted. We honour this within thirty days, delete from backups and archives on their next cycle, and notify our processor to do the same. Deleting your account does this for everything at once.

Appeal

If we refuse a request, we will tell you why and how to appeal. If we deny the appeal, we will give you a way to complain to your state Attorney General.

How to exercise them

The fastest route is inside the app: Settings, then Privacy, where you can export, delete, withdraw consent, or close your account yourself. Otherwise write to privacy@sagoma.app with the email address on your account. We will confirm receipt and respond within forty-five days, and we will tell you in advance if we need the one extension the law allows.

An authorised agent may make a request on your behalf with written permission that we can verify.

No retaliation

Using any of these rights does not change your price, your features, or your access. There is no version of Sagoma that costs less because you agreed to share more.

Changes

We will not collect, use or share consumer health data for a purpose not listed above without asking you first. If this policy changes materially, we will tell you in the app before it takes effect.

Contact

Whitetowers Group — privacy@sagoma.app