Skip to content

Health data

Consumer Health Data Privacy Notice

Last updated September 1, 2026 · munchio.app

This notice supplements the Privacy Policy and gives a direct account of the nutrition and related wellness information Munchio processes. We apply these controls to all users where practical, not only where a particular state law requires them.

1. Scope

This notice covers “consumer health data” and similar sensitive information under laws such as the Washington My Health My Data Act and Nevada’s consumer-health privacy law. It should be read with the Privacy Policy.

Munchio is a general-wellness food diary, not a healthcare provider, health plan, medical device, or clinical-record system. Even so, food, nutrition, allergen, and body-related information can be sensitive, so we describe it plainly here.

2. Data categories and sources

Munchio may process the following categories:

  • food descriptions, meal labels, diary dates and times, portions, calories, protein, carbohydrates, fat, notes, corrections, and custom foods;
  • declared allergens and non-allergy foods you ask Munchio not to suggest;
  • a saved daily energy-reference value and the fact that you enabled, disabled, skipped, or manually replaced it;
  • optional age, height, current weight, activity, and equation input processed transiently to calculate an energy reference; those body inputs are not saved by Munchio;
  • a food photo, voice recording, or typed description you deliberately submit for an AI-assisted estimate; raw photos and recordings are not persisted in Munchio storage;
  • editable AI estimates, confidence classes, bounded assumptions, clarifications, corrections, summaries, and familiar meal suggestions derived from your submitted or saved information; and
  • metadata needed to provide those features, such as date, timezone, capture method, model/version, safe outcome, and bounded usage or latency measurements.

Sources are you, your deliberate use of the app, calculations requested by you, and outputs created from that information by Munchio and its contracted processors. Munchio does not infer an allergy from diary history and does not obtain health data from data brokers, advertising networks, public profiles, wearables, HealthKit, or Health Connect in v1.

3. Why we process it

We process consumer health data to:

  • provide the food diary and the photo, voice, text, manual, search, recent-food, and copy-meal paths you choose;
  • create editable nutrition estimates and preserve your corrections as stable historical snapshots;
  • calculate an optional daily energy reference without storing the body inputs used for the calculation;
  • create short reflections or familiar meal suggestions when you request them and are eligible;
  • apply declared allergens and foods to avoid as hard exclusions from meal suggestions;
  • provide export, correction, and deletion controls; and
  • secure, troubleshoot, and measure the reliability of these features using minimized operational metadata.

We do not collect or use additional categories of consumer health data for materially new purposes without updating this notice and obtaining consent when required.

4. Sharing and processors

Munchio discloses consumer health data only as needed to provide a feature you request, protect the service, comply with law, or complete an appropriately protected business transaction.

  • Supabase processes and stores account-linked diary, preference, structured result, summary, plan, and operational records and runs Munchio server functions.
  • OpenAI receives the transient photo, recording, or typed description needed for an AI capture and receives bounded saved facts when you request an eligible reflection or familiar-meal suggestion. It does not need your email, display name, or Supabase account ID for these tasks.

These companies act as contracted processors or service providers for the stated purpose. The ordinary Munchio architecture does not send your food diary, allergens, photos, recordings, or nutrition history to RevenueCat, Apple, Google, Resend, or the munchio.app marketing site.

We may disclose information when required by law or reasonably necessary to protect rights, safety, and service integrity. If a merger, acquisition, financing, bankruptcy, or asset sale involves this data, the recipient must assume applicable privacy obligations.

5. No sale, advertising, or health-location geofencing

Munchio does not sell consumer health data. We do not use it for targeted or cross-context behavioral advertising, and we do not use geofences around healthcare facilities to identify or influence people seeking health services.

The initial website has no advertising pixels, behavioral analytics, session replay, or non-essential cookies.

6. Your rights and requests

Subject to applicable law, you may ask us to confirm whether we process your consumer health data and to access, correct, delete, or receive a copy of it. You may withdraw consent from future collection or sharing that relies on consent. You may also appeal a denied request.

The fastest path is Settings → Privacy & data in the app, where you can export data or permanently delete the account. If you cannot use the app, contact [email protected] or use the Account Deletion page.

We will verify account ownership before disclosing or deleting account-linked information. Never send a password, one-time code, access token, diary entry, food photo, or recording to verify a request. If we deny a request, you may reply with “Appeal” and explain why you believe the decision should be reconsidered. We will not discriminate against you for exercising a privacy right.

7. Changes and contact

We will update this notice before collecting, using, or sharing a new category of consumer health data for a materially new purpose and will request consent where required.

Requests and appeals: [email protected]

Engineers Space LLC
75 E 3rd St
Sheridan, WY 82801
United States