Consumer Health Data Privacy Policy

What we mean by consumer health data

Consumer health data is information that identifies your past, present, or future physical or mental health. In Nuneo, that means:

• Blood glucose readings you enter, or that we read from Apple Health with your permission
• Your diabetes type, and the health details you give us during setup
• Meals and foods you log, and the glucose response recorded alongside them
• Photos of food or nutrition labels you scan
• Dietary needs and allergy notes
• Notes you write on a day, and anything you type into the craving assistant

How we collect it

Only from you, and only when you give it to us: by typing it in, by scanning a photo, or by connecting Apple Health and granting read access to your blood glucose. We do not buy health data, and we do not collect it from other apps, data brokers, or public sources.

Why we use it

• To show you your own readings, meals, and the connection between them
• To personalize recipes and suggestions to your dietary needs and current glucose
• To generate responses in the craving assistant, dining guide, and package scan
• To produce reports and exports you ask for, such as the one you can share with your doctor
• To operate, secure, and support your account

We do not use consumer health data for advertising, profiling for advertising, or any automated decision that produces a legal or similarly significant effect on you.

Who we share it with

We share consumer health data only with the service providers that make Nuneo work, and only as needed to run it. Each is bound by contract to process it for us and for no purpose of their own:

• Supabase — stores your account and health entries.
• Anthropic (Claude) — when you use the craving assistant, dining guide, nutrition estimates, or package scan, the relevant text or image and limited context (such as your dietary needs and current glucose status) is sent to generate a response. Under Anthropic's API terms this data is not used to train their models.
• Vercel — hosts the app.

We may also disclose it if the law requires it. We will not disclose consumer health data in response to a request related to seeking, obtaining, or providing lawful health care unless we are legally compelled to do so.

Your rights

If you are a Washington or Nevada resident, you have the right to:

• Know what consumer health data we have about you, how we use it, and who we share it with
• Withdraw consent to our collection and sharing of it
• Delete it — and to have us pass that deletion request on to our service providers
• Appeal if we refuse a request

You can delete everything yourself at any time: Settings → Delete account removes your account and all associated health data. You can also export a copy of everything we hold from the same screen. To make a request in writing instead, or to appeal a decision, use our contact form. We respond within 45 days, and will tell you if we need longer.

If we deny an appeal, Washington residents may contact the Washington State Attorney General's office.

How long we keep it

For as long as your account is active, so that your history stays useful to you and to your care team. When you delete your account, your consumer health data is deleted from our systems along with it. Backups age out on our providers' ordinary schedules.

How we protect it

Health entries are tied to your account and reachable only by you when signed in. We use encryption in transit and access controls through our providers, and we limit the people and systems that can reach this data to those that need to.

Changes

If we change how we handle consumer health data, we will update this page and its “Last updated” date, and will seek your consent again where the law requires it.

Contact

Nuneo LLC, a Texas limited liability company. Reach us through our contact form.