Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy explains how Eutopix Labs P.S.A. (“Forkin”, “we”) collects, uses and shares consumer health data in the Forkin app and website. It supplements our Privacy Policy and is provided specifically for residents of Washington State (under the My Health My Data Act), Nevada (under SB370), and other US states with consumer-health-data laws. Where this policy and the general Privacy Policy differ for such residents, this policy controls for consumer health data. Forkin is for users aged 18 and over.

What consumer health data we collect

Only data you choose to provide for features you turn on. Depending on the features you use, this may include: dietary preferences and allergens; a diet goal and motivation; body metrics (height, weight, sex, activity level); body measurements and weight history; optional progress photos; a food diary (meals you log) and the nutrition totals derived from it; and, if you connect them, data from Apple Health or Google Health Connect (such as weight and activity). We may also derive health-related inferences (for example a calorie target) from this data to operate the features you request.

Sources of consumer health data

The sources are: information you enter directly in Forkin; photos, voice recordings, meal logs, product scans and other content you submit; nutrition and product data generated from those submissions; Apple Health or Google Health Connect data you choose to connect; and inferences Forkin calculates from those inputs to provide the feature you requested.

How we use it

Solely to provide the features you ask for — logging and analysing your nutrition, tracking your goals and progress, and giving you general, informational wellbeing guidance. Forkin is not a medical device and does not provide medical advice. We do not use consumer health data for advertising or to build advertising profiles.

Consent

We collect each category of consumer health data only with your opt-in consent, given separately for each sensitive feature when you turn it on, and only what is necessary to provide that feature. You can withdraw consent at any time in the app (Settings → Privacy) and delete the underlying data.

How we share it — and what we never do

We do not sell your consumer health data, and we do not share it for cross-context behavioural advertising. We share it only with service providers (“processors”) acting on our instructions to run the service — for example our hosting, database, AI, subscription and support providers — under contracts that bar them from using it for their own purposes. Our processors are listed in our sub-processor list. Core app data is stored in the EU/EEA; limited processors may handle specific account, subscription, diagnostic or support data as described in that list.

Categories shared and recipients

The categories that may be processed by our service providers are the same categories listed above, but only when needed to operate the feature: hosting and database providers process account, diary, body-progress and scan records; AI infrastructure providers process uploaded product, meal, receipt, voice or nutrition inputs when you use AI-backed features; payment and entitlement providers process subscription identifiers and purchase status, not card numbers. We have no corporate affiliates that receive consumer health data. The current provider list, including legal entity names and roles, is maintained in our sub-processor list.

Your rights

You have the right to access (confirm and review) the consumer health data we hold about you, to withdraw your consent, and to have that data deleted — including from our service providers. We will not discriminate against you for exercising these rights. To make a request, use our data-request form or email privacy@forkin.io. You may appeal a refused request by replying to our decision or by selecting “Appeal a refused privacy request” on the form. If an appeal is denied, Washington residents may contact the Washington State Attorney General.

No geofencing

We do not use geofencing around any health-care facility to identify, track, or collect data from, or send messages to, consumers based on their proximity to such a facility.

Contact

Eutopix Labs P.S.A. — privacy@forkin.io.