Consumer health data privacy

1. Scope and contact

This notice supplements the Privacy Policy for consumer health data handled by Benekan Technologies LLC through Embryly. It is intended to explain practices relevant to Washington’s My Health My Data Act and other applicable consumer health laws, without claiming that wording alone establishes compliance. Contact info@benekan.com for a health data request.

2. Health data categories and sources

We collect information you supply about pregnancy, due dates, pregnancy stage, health conditions, allergies, dietary avoidances, weight, belly measurements, water intake, meals, cravings, feelings, food concerns, and goals. Images, scan results, and food journal entries can also reveal health information. We derive pregnancy week, nutrient summaries, meal matches, and AI generated food assessments from those inputs.

The sources are you, your app activity, the food content or barcodes you submit, product information returned by Open Food Facts, and the inferences generated by our software or AI service. Authentication and account identifiers connect records to an account. We do not need precise location data and do not use geofencing around healthcare facilities.

3. Why data is collected and used

The purposes are to deliver requested tracking, match general meal ideas, contextualize scans, maintain records, answer support and rights requests, and secure the service. Health data is not used to decide insurance, employment, credit, or eligibility for healthcare. We do not sell health data or use it for targeted advertising in the described service.

Collection and sharing must have any permission or other basis required by applicable law. A broad acceptance of terms does not automatically authorize a new health data use. Where a separate opt in is required, it must be obtained before the relevant processing; the existing bundled onboarding acknowledgments need review against those requirements.

4. Who can receive it

Supabase receives account, tracking, storage, and backend data necessary for the app. OpenAI receives submitted food images and relevant health and preference context for scan analysis. Authorized support and technical providers can process information needed for their function, including operational records. Apple handles purchase data; a chosen sign in provider supplies authentication data. We may disclose limited information where legally required or in a lawful business transfer, subject to applicable protections.

Saved food images currently use public URLs and may be associated with shared food records. Anyone with such a URL may be able to retrieve an image without an account. Operational logs may contain sensitive context. These limitations are described in the main Privacy Policy and must not be mistaken for confidential clinical storage. We do not list an undisclosed affiliate as an authorized health data recipient.

5. Access, withdrawal, deletion, and appeals

Where applicable, you can ask whether we collect or share your consumer health data, request access and a list of relevant recipients as the law provides, withdraw consent, or request deletion. Email info@benekan.com from the address associated with your account. We may reasonably verify identity and will follow applicable deadlines, exceptions, and processor notification duties.

If we deny a request, you may appeal by replying with “Privacy appeal” and explaining the issue. We will explain the result within the applicable legal timeframe and provide the relevant complaint route. Washington residents can contact the Washington Attorney General. This does not limit other remedies.

The current account deactivation feature offers restoration for 30 days but does not perform automatic permanent erasure. Use the support route for a permanent deletion request; applicable rights are not limited by the account button’s behavior. Withdrawing necessary information may stop related personalized features. We will not discriminate against you for exercising protected rights.