Consumer Health Data Privacy Policy

This policy describes how Body by Numbers collects, uses, and shares consumer health data through its consumer wellness tiers (Free, Snapshot, Membership). It applies to health information that is not covered by a clinical relationship.

Body by Numbers consumer tiers are general wellness products. They do not create a provider-patient relationship, and information collected through them is consumer health data rather than protected health information under HIPAA.

We collect the following categories of consumer health data:

• Assessment inputs you enter (for example blood pressure, cholesterol, glucose, body composition): on our consumer tiers these are used to compute your results in your browser and are discarded; we do not store raw values for Free-tier accounts.
• Computed results: health scores, letter grades, and Biological Age, which we store with your account.
• Quiz and lifestyle responses you choose to submit.

We collect consumer health data only from you, directly, when you enter it into an assessment, calculator, or quiz. We do not buy, infer, or receive consumer health data about you from third parties.

We collect and use consumer health data to:

• Compute and show you your scores, grades, and Biological Age.
• Maintain your assessment history so you can track change over time.
• Operate, secure, and improve the service.

We do not use consumer health data for advertising, and we do not sell it.

We do not share your consumer health data with third parties. Our payment processor, Stripe, receives payment and identity information only; it never receives your assessment inputs or results.

If we ever propose to share consumer health data with a third party, we will ask for your separate, affirmative consent first, and you may decline without losing access to the service.

You have the right to:

• Access the consumer health data we hold about you: use Export my data in Settings.
• Correct your data: edit your profile in Settings or re-run an assessment to correct inputs.
• Delete your data: use Delete account in Settings. Data is removed immediately from live systems and falls out of encrypted backups within 35 days.
• Withdraw consent to collection: use Withdraw consent in Settings (see below).
• Appeal a refusal to act on a request by emailing the contact below; we respond to requests and appeals within 45 days.

You may withdraw your consent to the collection of consumer health data at any time from the Privacy and data section of Settings. Withdrawing consent pauses new assessments on your account; your stored results remain until you delete your account.

Questions or requests about consumer health data: