Consumer Health Data Privacy Policy

Who we are

My Health Engineer ("MHE", "we", "us") is the business name of Keith Young, a sole trader in Ireland. Our address is Hillhead, Ardara, Co. Donegal, F94C640, Ireland. Our email is support@myhealthengineer.com.

We have no affiliates. No parent company, sister company or subsidiary shares control of MHE or your data.

Your consumer health data means information linked to you, or that could reasonably be linked to you, that shows something about your past, present or future physical or mental health. It includes what we work out about your health from other information. The same rules apply in the MHE app on the web, on iPhone and on Android.

1. The health data we collect, and how we use it

We ask for your yes before the app collects anything you tell us or log (section 6). We record what you buy, and any free guide you ask for, without that yes (see Purchases and free guides).

What you tell us when you set up

• Your date of birth, biological sex, height, and body fat if you give it.
• The medical conditions and medication flags you choose to share, pregnancy or breastfeeding if you tell us, and the health concerns you pick, including anything you type into an "Other" box.
• Your sleep and fasting windows, and your daily water target if you set one.
• How you usually log workouts and how most of your food is made, if you answer.
• The life stage you pick, if you pick one.
• Your menstrual cycle details, if you choose the cycle-phase refeed schedule: the date your last period started, your cycle length, and whether your cycle is regular.

How we use it: to build your plan, set your calorie and macro targets, and run the safety checks in your programs. For example, some plan options stay closed if you tell us you are pregnant or have a condition they could affect. Cycle details set the timing of your refeed days.

What you log as you go

• Weight and the tape measurements you choose to log (waist, hips, upper arm and thigh).
• Your food diary: the foods and portions you log, their nutrition figures, any meal photos you add, and the meals you pick for each day.
• Calories, protein, carbohydrates and fibre against your targets, water and electrolytes, and blood ketones.
• Sleep hours and quality, how often you woke and what woke you, and your bedtime and wake time.
• Stress, energy, hunger, cravings and the symptoms you tick, such as headaches, fatigue or digestive changes.
• Workouts, down to each set, with reps, loads and notes.
• Your daily check-ins, including your mood, any blood test results you enter, anything you write in the notes box, and your weekly review answers.
• Your sleep and stress self-checks. If an answer leads us to suggest you speak to your doctor, we record that we showed you that prompt and what you told us. We do not ask what your doctor found or prescribed.
• On programs built around a health marker, the readings you type in: blood pressure, HbA1c, fasting glucose, total cholesterol, LDL, HDL and triglycerides.
• Habit streaks, how often you log each thing, and the reminders you set.

How we use it: to track your progress, show your charts, adjust your targets as your results come in, remind you to log, and write your weekly reports.

Steps from your phone, only if you allow it

• Your daily step totals from Apple Health on an iPhone, or Health Connect or Samsung Health on Android. When you first connect, we also read the older daily totals your phone holds, back as far as 2010. We read steps and nothing else. We never write to your phone's health data.

How we use it: to set your activity level, which sets your calorie and macro targets, to chart your activity, and to show your weekly activity in your reports.

Your programs, plans and meal planning

• The programs you join, your nutrition and training plans, and any plan setup you have not finished.
• Your meal planner, your saved and custom recipes, your favourites, and your freezer and food storage lists.

The program and the foods you choose can show a health goal, so we treat them as health data.

How we use it: to give you the program, the plan and the meals you asked for.

Coaching

• How far your coaching review has got, once you buy coaching.

How we use it: to arrange and deliver your coaching.

Purchases and free guides

• What you buy from us, such as a membership or coaching, with the date and the amount.
• Which free guide you asked for on our website, if you asked for one.

How we use it: to give you what you bought or asked for. We record these when you buy or ask, which can be before you set up the app. We do not ask for a separate yes first, because we cannot give you a membership, coaching or a guide without them. What you buy and the guide you pick can show a health goal, so we treat them as health data.

What we work out and record about you

• Your estimated daily energy use and how sure the app is of it, your weight trend, and every change to your calorie target we have suggested or made.
• A flag the app raises when your results stay off track despite good logging, which brings up extra guidance.
• Your weekly coaching reports. The app picks one area to focus on and writes the report from pre-written coaching text with your numbers filled in.
• Coach reports and coach notes that your coach writes about you.
• Our security log: who on our team opened your records, when, and the reason they gave for seeing your name.

How we use it: to keep your plan matched to your results, to coach you, and to keep a record of staff access.

Other ways we use it

• Safety review. Our team checks that the plans, targets and reports the app makes for you are accurate and safe (section 3).
• Coaching under your name, only if you say yes (section 3).
• Service emails, for example to tell you a coach report is ready.
• Fixing faults. When something breaks, we read error reports to find the fault (section 4).
• Security. We log staff access to your records to protect them.

Sale and location

• We never sell your health data.
• We do not collect your precise location.

2. Where the health data comes from

• You. Everything you type, tick or choose in the app.
• Your phone's health app, only if you connect it. Apple Health on an iPhone, or Health Connect or Samsung Health on Android. You can turn off access at any time in your iPhone's settings, or on Android in your phone's settings or the Samsung Health app. That stops new reads.
• Payment companies, when you pay. Stripe, Apple or Google, whichever takes your payment, tells us what you bought.
• Our website forms. When you ask for a free guide on our website, you tell our email platform which one you want.
• Us. What the app works out from your data, what your coach writes about you, and our security log.

Apart from your phone's health app and the company that takes your payment, we never receive health data about you from a lab, a clinic, a data broker or any other company.

3. Who can see it, and what they see

Our team, to check the advice is safe

Our admin team (today that is Keith Young, MHE's owner) can open member records in our staff coaching view to check that the plans, targets and reports the app makes are accurate and safe. That includes steps from your phone. You appear there under a random member code. If you say yes to sharing with your coach, your coach sees your name and email there while sharing is on. In every other case, our team sees your name and email only for a safety concern or because you asked us for help. They must choose that reason first. Your name then shows for 15 minutes, and the app logs it. This review is part of how we keep your plan safe, so it sits inside your consent to collect. It stops if you withdraw that consent.

Your coach, only if you say yes

Your coach can open your records under your name only after you give a separate yes to sharing (section 6). We ask for that yes when you start coaching with us. You can also turn it on or off in Account > Privacy. Your coach then sees your name, email, profile, plan, meal planner, logs, food diary, workouts, check-ins and notes, questionnaire answers, steps and reports. Your coach uses them only to coach you, for example to review your progress, write your coaching reports and talk them through with you on a call. Today the only coach is Keith Young, MHE's owner. Trainee coaches learn on sample accounts we make for training, and they never see real members' data. We do not work with independent coaches yet. If that changes, we update this policy and ask you for a new, separate yes before an independent coach sees your records.

Your story, only if you say yes to that

You can give us a separate yes to share a win, such as a quote, a screenshot or a progress photo. We may then show it to other members and to the public: on our website, in our emails, in paid adverts, and on our Instagram, Facebook, YouTube and TikTok accounts. Those social media companies hold what we post under their own terms. You can take back that yes at any time, and we take your story down. The Sharing your wins page has the details.

Payment companies

When you pay, the company that takes your payment knows you bought an MHE membership or coaching. On our website that is Stripe. In the iPhone app it is Apple, and in the Android app it is Google. Apple and Google take app payments themselves, under their own terms and privacy policies. Stripe also uses payment details for its own fraud checks and legal duties. None of them receives your logs, plans or other health data from us.

Phone makers

If you read steps from Samsung Health on Android, Samsung's own software in our app sends Samsung your phone model, your mobile network code and our app's name and version. Samsung may use details of how our app uses its software to run and improve that software. Samsung never receives your step data from us.

Companies that run MHE for us

The companies in section 4 store, carry or process data so that MHE works. Our contracts with them limit how they may use it.

Anyone else

We do not share your consumer health data with any other company or person. We would give it to a court or a public authority only if a valid court order, or other legal process we must obey, requires it. We would tell you first unless the law forbids it.

Categories of health data shared, and with whom

Categories of third parties we share with: your coach (only after your separate yes), other members and the public, social media companies, payment companies, Samsung, and courts or public authorities where the law requires it. Affiliates: none.

4. Companies that process data for us

Each of these companies works under a contract with us that limits it to our instructions. None may use your health data for its own purposes, except Stripe: it also uses payment details for its own fraud checks and legal duties (section 3).

Our marketing email platform, Brevo, holds your email address only if you said yes to marketing email or joined our tester list. It also records which free guide you asked for, if any (section 1). It receives none of your logs, plans or other health data from the app.

These companies receive no health data at all: Google and Apple when you sign in with them, Upstash (short-lived counters that stop abuse) and Cloudflare Turnstile (it checks that a person filled in the sign-up form).

5. How we handle your health data

• Storage. We store your data in our database in the EU.
• Processing. The app's own code turns what you log into your targets, charts and reports. People see your data only as section 3 describes.
• Staff access. Today only Keith Young, MHE's owner, can open your health data, to run MHE and to coach you. Trainee coaches work only with sample accounts we make for training. They never see real members' data. Anyone else who works for us must agree in writing to keep health data confidential before they can see it. The app logs each time someone opens your records in our staff coaching view. Keith can also reach the database directly, only to fix a fault. The app does not log that access.
• AI tools. The AI tools we use to build and check the app never read real members' health data. They work only with test accounts we create. To check our live database, they sign in with a login that cannot see real members' health data. Apart from the companies in section 4, no other company can read your health data in our database.
• Tracking by other companies. No advertising, social media or data broker company collects data about you through the MHE app or our website. No other company collects your health data over time or across other websites and apps through MHE. Outside code in the app sends data only to the companies in section 4, and on Android to Samsung (section 3).

6. Your choices: consent to collect, and consent to share

Consent to collect

Before the app collects any health data you tell us or log, we ask for your yes with its own tick box. It starts unticked and sits apart from agreeing to our Terms. The text above it, shown in full, tells you what we collect, how we use it, who gets it and how to withdraw. What you buy and the free guides you ask for are the one exception, because we need them to give you what you asked for (section 1).

Consent to share with your coach

Letting your coach see your records under your name is a separate yes. You give it, or turn it off, in Account > Privacy. Saying no does not change your plan or your price. Coaching needs it, because your coach cannot coach you without seeing your records.

Consent to share your story

Letting us publish your story is another separate yes. You give it, or take it back, on your Account page.

Withdrawing consent

You can withdraw any of these at any time on your Account page, and it takes effect straight away. You can also email support@myhealthengineer.com, and we act on it within 15 days.

When you withdraw your consent to collect:

• We stop using your health data straight away. Your plans, trackers, check-ins and reports pause, and we stop reading steps from your phone.
• Your coach and our team can no longer open your records. Your consent to share with your coach turns off too, so any coaching reviews you paid for pause (see below).
• You choose what happens to the health data you already gave us:
  • Delete it now. We delete your health data and keep your account.
  • Keep it stored, unused. We store it so you can switch your health features back on later. This counts as a separate yes, and you can change your mind at any time. If you do not switch back on within 12 months, we delete it. We email you 30 days before.
• If you withdraw by email and do not tell us which you want, we delete your health data within 15 days.
• Your membership does not stop on its own, so we show you how to cancel it in the same step. You cancel a website membership on your Account page, and an app membership in that app store's subscription settings. Our Refund Policy says when you can get money back.

When you withdraw your consent to share with your coach, your coach loses access straight away. If you have paid for coaching, your coaching reviews pause while sharing is off. You can turn sharing back on at any time, or ask us to refund the reviews you have not used.

Something new

If we want to collect a new kind of health data, use it for a new purpose, or share it with a new kind of recipient or a new company outside MHE, we update this policy and ask for your yes first. When we add a company that only processes data for us under contract, we add it to section 4 and update the date at the top.

7. Your rights, and how to use them

See what we hold, and who has it

On your Account page, tap Download my data. You get a copy of everything the app holds about you. Its Recipients section lists everyone we shared your data with and every company that processes it for us, with what each one does and how to contact it. That includes any coach you let see your records, with the dates, and where we posted any story you let us share. You can also ask us to confirm whether we collect, share or sell your health data. We do not sell it.

Review and correct it

You can see and edit your profile, logs and check-ins in the app. If something is wrong and you cannot change it yourself, email us and we will correct it.

Withdraw consent

On your Account page, as section 6 describes.

Delete it

On your Account page:

• Delete specific data removes one kind of health data and keeps your account. Each option says what it removes. If you want something deleted that no option covers, email us and we delete it.
• Delete your account removes your account and all your health data.

When you delete, your data leaves our live database straight away. Copies in our backups roll off within 30 days, and never later than six months after your request. If we ever restore a backup, we delete your data again before we use it.

At the companies that hold data for us, and where we shared it:

• PostHog, RevenueCat and Brevo: we tell each one to delete it.
• Sentry, Resend and Vercel: their error reports and logs hold no health values. Sentry deletes reports after 90 days, Resend deletes email logs after 30 days, and Vercel deletes server logs after 30 days.
• Stripe: we cancel any website membership. Stripe keeps payment records, as below.
• Your story: we take it down from our website, our social media accounts and our adverts, and stop using it in our emails.

We keep two kinds of record after you delete:

• Payment records, for six years, because Irish tax law requires it. They show the amount, the date and "MHE membership" or "MHE coaching". They do not show your program.
• Our security log, to protect our systems. It keeps which records our team opened and when. It no longer holds your name, your email or any reason detail.

How to ask

Use the app, or email support@myhealthengineer.com from any address. You do not need to create an account to make a request. We may need to check that the request comes from you, for example by replying to the email address on your account. If we cannot confirm it is you, we tell you what we need.

Cost

Withdrawing consent and deleting your data are always free. Other requests are free at least twice in any 12 months. We charge a reasonable fee, or say no, only if a request is clearly unfounded, excessive or repeated, and we tell you why.

How long we take

We answer within 30 days of getting your request, and we delete within 30 days of getting it. Checking that it is you does not add time. For a request that is not a deletion, we may take up to 45 more days, once. If we do, we tell you why within the first 30 days. We act on a withdrawal sent by email within 15 days.

Fair treatment

We never raise your price or hold back a feature because you used these rights. Withdrawing consent pauses the features that need your health data, because they cannot work without it.

Appeal

If we say no to a request, our answer tells you how to appeal. Reply to our answer, or email support@myhealthengineer.com with the subject "Appeal". You can appeal at any time after our decision. We look at the request again and answer in writing within 45 days, with our reasons.

If we still say no, you can complain to the Attorney General where you live:

• Washington: https://www.atg.wa.gov/file-complaint
• Nevada: https://ag.nv.gov/Complaints/File_Complaint/
• Any other state: your state Attorney General's website.

We include these links in every written answer to an appeal that we refuse.

8. Changes to this policy

When we change this policy, we update the date at the top. If a change is material, we email you and show you what changed in the app before it applies. If a change means a new kind of health data, a new purpose, or sharing with a new kind of recipient or a new company outside MHE, we ask for your yes first (section 6).

9. Contact

Email support@myhealthengineer.com, or write to My Health Engineer, Hillhead, Ardara, Co. Donegal, F94C640, Ireland.