Consumer Health Data Privacy Policy

Plain-language summary. If you are in a state that protects "consumer health data" specifically (e.g. Washington's MHMDA), this page documents what Yuva collects, why, who sees it, and how to withdraw consent or delete it.

What we treat as consumer health data

Body measurements you enter (height, weight, sex, age).
Goals and activity level you set during onboarding.
Allergens, intolerances, and dietary restrictions you configure.
Meal logs (food, portion).
Calorie, protein, carbohydrate, and fat totals derived from your logs.

Sources of consumer health data

We collect consumer health data directly from you when you input it into the App during onboarding or when updating your profile and logs in the settings.

Why we collect it

To create your personal profile, generate safe and personalised recipes, enforce allergen filters, and provide longitudinal progress views. We do not use consumer health data for advertising, profiling, or sale.

Who can access it

You — in the app, at any time.
Yuva engineers — only when necessary to troubleshoot a technical issue you have reported, and subject to strict internal access controls and logging.
Sub-processors under contract — Supabase (database), Sentry (scrubbed error logs), Apple/Google (in-app payment only). None receives health data except the database (Supabase, encrypted at rest).

We do not share consumer health data with affiliates, partners, advertisers, data brokers, or any third party for cross-context behavioural advertising. We do not engage in geofencing around healthcare facilities.

How we protect it

Encryption in transit (TLS 1.2+) and at rest (AES-256).
Health data is segregated from analytics events.

Your rights

You may, at any time and free of charge:

Confirm whether we hold your consumer health data. (Answer: yes, if you have a Yuva account.)
Access a complete copy. (Settings → Export.)
Withdraw consent for collection or sharing. (Settings → Clear health data. This immediately resets the app, places your health data beyond active use, and permanently deletes it after a 24-hour recovery window.)
Delete the data. (Settings → Delete account. All your personal and health data is immediately and permanently deleted.)
Appeal any refusal of your request to privacy@yuva.one;

Sale of consumer health data

Yuva does not and will not sell consumer health data. Required notice: "We do not sell your consumer health data."

Children

Yuva is not directed to anyone under 13. We do not knowingly collect consumer health data from people under the specified age.

Updates

Material updates to this policy will be communicated in-app at least 30 days before they take effect.

Contact

Health-data questions: contact@yuva.one
UMPROVE SRL, Str. 1 Mai nr. 15, Mun. Rădăuți, Suceava County, Romania.