Consumer Health Data Privacy Policy

Last updated: 15 July 2026  ·  Effective: 15 July 2026

This notice supplements our Privacy Policy for wellness, nutrition, allergy, calorie, weight, activity, and similar information that may qualify as "consumer health data" under laws such as Washington's My Health My Data Act, Nevada's consumer health data law, and similar US laws.

1. Scope and who controls this data

This notice applies to cloud-backed features in Magoflow services, including Spanbe and any other Magoflow service that links to this notice, when the data involved can reasonably identify your past, present, or future physical or mental health status. It supplements rather than replaces the main Privacy Policy.

The controller for this data is Magoflow, the trading name of IT SERVICES MAREK PIETKIEWICZ, ul. Irysowa 16, 86-031 Osielsko, Poland. Contact: [email protected].

2. Categories of consumer health data we may collect

• dietary preferences, ingredient exclusions, food allergies, intolerances, and similar nutrition rules;
• calorie targets, weight goals, activity level, and related wellbeing preferences;
• meal plans, recipes, shopping lists, progress entries, and similar content generated from or revealing the above information;
• support messages, screenshots, or attachments you send us that include consumer health data;
• account, device, and technical identifiers reasonably linkable to the above data when needed to operate the feature, secure the service, or respond to a request.

3. Where this data comes from

• directly from you when you enter information in the app, complete onboarding, save preferences, ask for a plan, or contact support;
• from your use of the feature, such as saved plans or progress records you choose to create;
• from platform, authentication, subscription, or infrastructure providers to the extent needed to link the request to your account, restore entitlements, or keep the service secure.

4. Why we collect and use it

• to generate, store, sync, and manage the meal plans, recipes, shopping lists, or similar outputs you request;
• to personalise the feature for your saved preferences and restrictions;
• to secure the service, prevent abuse, troubleshoot, and maintain records showing what choices, consents, or requests were made;
• to respond to support, deletion, access, correction, withdrawal, appeal, or complaint requests;
• to comply with law, establish or defend legal claims, and carry out accounting, tax, or audit obligations.

5. Categories of data shared and who receives it

We may disclose consumer health data or data linkable to it to service providers that help us provide the feature you asked for. Depending on the provider and context, the provider may act as our processor/service provider or as an independent provider under its own notice.

We do not currently disclose consumer health data to corporate affiliates because the Services are operated by a single Polish sole proprietorship rather than a broader group of affiliates. If that changes, this notice will identify the relevant affiliate categories before the new sharing starts where law requires.

6. Consent, withdrawal, and deletion effects

Where law requires consent to collect, use, or share consumer health data for a feature, we rely on that consent only through the relevant in-product flow or other valid route for that market. You can withdraw consent by using the relevant in-app control where available, by deleting the relevant saved inputs, by deleting your account, or by emailing [email protected].

If you withdraw consent, the affected feature may stop working, existing synced consumer health records may be deleted, de-identified, or become unavailable, and we may keep only the limited records we still need for security, accounting, legal, or compliance reasons.

7. Your rights and how to appeal

Depending on the law that applies, you may have the right to:

• confirm whether we are collecting, using, or sharing your consumer health data;
• access that data;
• withdraw consent;
• request deletion of that data;
• receive information about categories of affiliates or third parties with whom it is shared.

To exercise a right, email [email protected] with enough information for us to identify your account and request. We may ask for reasonable verification details. If we deny or only partially fulfil a request, you may appeal by replying to the decision or emailing us with the subject line Consumer health appeal. You may also contact your state Attorney General or other regulator if the law gives you that option.

8. Changes and contact

We may update this notice from time to time. Changes take effect on the date shown above. If a material change requires a new consent before it applies to you, we will ask for that consent separately.

Contact: [email protected].