Your health information under Washington's My Health My Data Act and similar laws in Nevada and Connecticut — what Apart collects, who sees it, and your rights.
This policy explains how Calibra Technologies LLC ("Apart", "we", "us") handles consumer health data as defined by Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370, NRS 603A), and Connecticut's Data Privacy Act. It supplements our Privacy Policy, which describes everything else. If you live in one of those states, these are your rights.
In one paragraph. Apart keeps your health information in your account, synced between your phone and our database so you can log in on any phone. You give separate, explicit consent to this when you create your account. When you use an AI feature, the app also sends what that feature needs to answer you, and we don't store that request. We never sell your health data. The only companies that handle it on our behalf are the database, AI and hosting providers listed below, and deleting your account erases it.
Apart is a nutrition and wellness program, so most of what it handles can be health data: what you eat and drink, your weight, height, age and sex, your mood, the symptoms you log and their severity, the foods Apart identifies as your triggers, and inferences drawn from these (such as your histamine "bucket" level). We collect it — meaning it reaches us — in these cases:
We also hold a random installation identifier, usage counters, and membership dates (see the Privacy Policy, section 05). These do not describe your health.
Only from you — what you type, log, or photograph in the app. We do not buy health data, receive it from other companies, or infer it from your location.
When you create your Apart account, the sign-up screen asks for this consent on its own, separate from accepting our Terms: a box, unticked until you tick it, saying that you consent to Apart storing your health information in your account and using it as this policy and our Privacy Policy describe. No account can be created until it is ticked, because Apart's program runs on this information, and the app records the date. We do not collect or share consumer health data for any purpose other than providing the features you use.
We do not sell consumer health data, and we do not share it with anyone other than the processors below, who handle it only on our instructions and under contract:
We have no affiliates that receive consumer health data. We will update this list before we ever share consumer health data with anyone new, and we would ask for your separate consent first if the law requires it.
You have the right to:
How to make a request. Email support@eatapart.com with the subject "Health data request", or use eatapart.com/delete-account. We will confirm the request comes from the account holder — usually by replying to the account's email address — and we won't ask for more information than we need to verify a request. We respond within 45 days, and may extend that once by another 45 days when reasonably necessary, telling you why. Requests are free, up to twice a year.
Appeals. If we refuse your request, you can appeal by replying with "Appeal" in the subject line within 45 days of our answer. We will respond in writing within 45 days, explaining what we decided and why. If your appeal is denied, you can contact your state attorney general: Washington, Nevada, Connecticut.
Consumer health data travels over encrypted connections. In your account it is encrypted at rest by our database provider, and the database only lets a signed-in person read or change their own account; we look at an account's contents only when you ask us to or the law requires it. It is kept until you delete your account, then erased at once and from backups within 7 days. What an AI feature sends is held in memory only while your request is answered and is not written to any database or file store by us; our AI provider keeps request data for a limited period for abuse monitoring under its terms, and never uses it to train models. Access to our systems is limited to the people who operate Apart.
Calibra Technologies LLC —
support@eatapart.com.
By post: 1914 Thomes Ave, Ste 2, #3012, Cheyenne, WY 82001, United States.