Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy describes how Oasiz, Inc. ("Oasiz," "Badger," "we," "us," or "our") collects, uses, and discloses Consumer Health Data through the Badger services. It is a separate policy required by certain U.S. consumer health privacy laws and applies only to information treated as Consumer Health Data under those laws. For our broader privacy practices, see the Badger Privacy Policy.

"Consumer Health Data" means Personal Data that identifies or can reasonably be linked to a consumer and that identifies the consumer’s past, present, or future physical or mental health status, as defined by applicable law. This can include information you provide directly and inferences Badger makes from other information.

1. Categories of Consumer Health Data we collect

Depending on the features you use and the information you choose to provide, we may collect:

• Nutrition information, including foods, beverages, calories, macronutrients, micronutrients, meal timing, water intake, dietary patterns, and nutrition estimates.
• Body measurements and vital information, including height, weight, body composition, heart rate, resting heart rate, and trends derived from that information.
• Fitness and activity information, including exercise, workouts, steps, active energy, basal energy, activity patterns, and fitness goals.
• Health-related profile and preference information, including age, sex, allergies, dietary restrictions, goals, reported health context, and food or coaching preferences.
• Apple Health information that you specifically authorize Badger to read, and nutrition or other information you direct Badger to write to Apple Health.
• Health-related communications and content, including messages, voice notes, images, videos, documents, and support communications that reveal or concern health, nutrition, activity, or wellness.
• Health inferences, including estimated nutrition, likely preferences, patterns, progress, and personalized memories or recommendations inferred from your information.
• Location-linked health information, such as a location used with a request for nearby meal or restaurant suggestions.
• Identifiers linked to health information, including phone number, pseudonymous account identifiers, device or network information, and subscription status when linked to the categories above.

2. Why we collect and use Consumer Health Data

We collect and use Consumer Health Data to:

• provide the nutrition logging, personalized coaching, progress, goal, reminder, search, and conversational-memory features you request;
• sync information with Apple Health when you grant permission;
• authenticate and secure your account, maintain your preferences, and provide paid features;
• respond to support requests and investigate problems, subject to access restrictions;
• maintain, secure, debug, and improve the Services, including by using aggregated or deidentified information; and
• comply with law and protect users, Oasiz, and the Services.

We do not use Consumer Health Data for targeted advertising or data brokerage. We do not use Apple Health data for advertising or purposes unrelated to health and fitness services.

3. Sources of Consumer Health Data

We collect Consumer Health Data from:

• You, when you complete onboarding, message Badger, upload content, log food or activity, set goals, or contact support.
• Your device and Apple Health, when you grant the relevant permissions.
• Our service providers, when they return information needed to deliver messaging, subscriptions, account functions, or other requested features.
• Our processing of your information, when Badger estimates nutrients, identifies patterns, or creates responses, summaries, or memories.
• Public food-data sources, which may provide nutrition or barcode information matched to a food you search for or log.

4. Consumer Health Data we share and why

We disclose Consumer Health Data to service providers acting as processors only to the extent needed to provide the Badger features you request. These processor categories are:

• Cloud, authentication, and AI-processing providers, which process account identifiers, profile information, health and nutrition logs, messages, uploads, and related inferences as needed to operate Badger.
• Conversational-memory providers, which process pseudonymously scoped conversation excerpts, summaries, and memories so Badger can remember relevant context.
• Messaging providers, which process phone numbers, message content, attachments, delivery information, and related metadata to send and receive Badger conversations.
• Services you direct us to connect, such as Apple Health, which receive only the health information you choose to sync.

We do not send the content of your health logs, Apple Health data, or private Badger conversations to website-hosting or subscription-management providers. Those providers process only ordinary web-request information or purchase and entitlement information needed for their separate functions.

The categories of third parties with whom we may share Consumer Health Data are: services you direct us to connect; legal or safety recipients when disclosure is required or permitted by law; and a successor entity in a merger, acquisition, bankruptcy, or similar transaction subject to applicable protections. No Oasiz affiliate currently receives Consumer Health Data. Authorized Oasiz personnel and contractors may access only the information reasonably necessary to provide requested support, debug a problem, protect the Services, or comply with law, subject to access restrictions.

We may also share Consumer Health Data with another recipient when you direct us or give consent. We may use and disclose information that has been deidentified so it can no longer reasonably be linked to you, subject to applicable law.

5. Sale of Consumer Health Data

Badger does not sell Consumer Health Data. If this practice changes, we will update this Policy and obtain valid authorization before selling Consumer Health Data where required by law.

6. Your Consumer Health Data rights

Subject to applicable law, you may have the right to:

• confirm whether we collect, share, or sell your Consumer Health Data and access that data, including a list of third parties and affiliates with whom it has been shared or sold;
• withdraw consent for our collection or sharing of Consumer Health Data;
• request deletion of Consumer Health Data; and
• appeal our refusal to act on a request.

To exercise these rights, use account-deletion controls in Badger where available or email contact@gobadger.app. Please describe the right you wish to exercise. We may ask for information reasonably necessary to authenticate your request. If we deny your request, you may appeal by replying to our decision with "Privacy Appeal" in the subject line and explaining your concern.

Withdrawing consent or requesting deletion may prevent Badger from providing features that depend on the affected information. Revoking Apple Health permission stops future access but does not itself delete information previously synced to Badger; deleting Badger does not delete information already written to Apple Health.

When we approve a deletion request, we will delete covered Consumer Health Data from our records and instruct applicable processors to do the same as required by law. Deletion from archived or backup systems may be delayed where permitted to protect system integrity, after which the information will be deleted in the ordinary course. We may retain information where permitted or required by law, including to establish, exercise, or defend legal claims or prevent fraud.

7. Changes to this Policy

We may update this Policy as Badger and applicable law evolve. We will post the updated Policy at this URL and revise the effective date. If required, we will provide additional notice or obtain consent before materially changing how previously collected Consumer Health Data is collected, used, or shared.

8. Contact us

For questions or requests concerning Consumer Health Data, contact: