Consumer Health Data Privacy Policy

Last updated 18 October 2026

This notice is provided under the Washington My Health My Data Act and the Nevada consumer health data law. It applies to residents of Washington and Nevada and describes how Humo handles consumer health data.

Our general privacy notice is at humo.health/privacy.

Categories of consumer health data we collect

Humo processes the following categories. Almost all of it is derived and stored on your device and is never transmitted to us — but because our software derives it, it counts as collection under these laws, and we disclose it here.

Given on our website, if you use the check-in there:

Your answers to the 36 check-in questions, and the summary computed from them — the phases and scores it shows you. These reach our servers while the page is working and are not kept; see "How long we keep consumer health data" below.

Processed on your device only:

Sleep, physical activity, energy expenditure, standing time, workouts, mindful minutes and your activity goals, obtained from Apple Health with your permission
Your answers to in-app check-ins and reflections, including those concerning mood, energy, stress, work experience, personality traits and relationship patterns
Measures, scores, phases and trends that Humo derives from the above, including indicators relating to balance, recovery and burnout signals
Calendar and reminder content used to describe how you spend your time
Cycle tracking, if you turn it on — the period days in Apple Health (the ones you log and any saved by another app, with how heavy each day was), and what Humo works out from them: cycle day, recent cycle and period lengths, and an estimate of when your next period may start. Apple Health's cycle alerts (irregular cycles, infrequent periods, prolonged periods, persistent spotting) are shown as Apple's, unchanged. This is a separate choice, off unless you turn it on.

Received by us:

A record of whether you turned each data category on or off, and when. This records your choice only. It contains no health data.

How we use consumer health data

To calculate and display your own scores, patterns and trends back to you inside the app
To suggest routines and practices within the app
To send you notifications you have asked for

We do not use consumer health data for advertising, profiling for advertising, or any purpose other than providing the app's features to you.

Sources of consumer health data

You — your answers to check-ins and reflections, and routines you create
Apple Health, with your permission, on your device
Your calendar and reminders, with your permission, on your device
Derived by Humo on your device from the sources above

Humo is also a destination, not only a source. When you log a period day, Humo writes it into Apple Health on your device, marked as coming from Humo. When you schedule a practice, Humo writes it into your calendar or reminders. Those entries are stored in your apps, not in Humo, and are never transmitted to us. They remain after Humo is deleted, and Humo's control for removing the period days it wrote is inside Humo — so remove them before deleting the app if you want them gone. Removing them only ever affects entries Humo created.

We do not share consumer health data with anyone.

One clarification, because "share" has a specific meaning here. Vercel hosts our website and runs the check-in scoring, so answers pass through their systems while the page is working. They act only on our instructions, may not use the data for anything of their own, and nothing is retained afterwards. We do not consider that sharing, and we say it plainly rather than leave you to infer it from the word.

We do not sell consumer health data. We have never sold consumer health data. Selling it would require your separate written authorization, and we do not intend to seek one.

Third parties and affiliates who receive consumer health data

No third party or affiliate receives consumer health data for its own purposes.

We have no affiliates. One service provider processes it strictly on our behalf — Vercel, which hosts the website and runs the check-in scoring, retaining nothing. Our other service providers do not receive consumer health data at all:

Supabase hosts our database and sign-in. It holds your account details, your record of privacy choices, and any routines you write yourself. It does not receive health data, questionnaire answers, or derived scores.
RevenueCat manages subscription status and receives an anonymous account identifier from us; Apple separately provides them purchase and device information only.
Apple provides the App Store and the device permissions. It does not receive your Humo data from us.

How to exercise your rights

If you are a Washington or Nevada resident, you have the right to:

Confirm whether we collect, share or sell your consumer health data
Access your consumer health data, including a list of third parties with whom we have shared it
Withdraw consent to our collection and sharing of your consumer health data
Delete your consumer health data
Appeal a refusal to act on a request

If you used the check-in on our website and have no app. Email privacy@humo.health for any of these rights, including an appeal. The honest answer for the web check-in is that there is nothing to confirm, access or delete: your answers were never written down, so no copy exists. We will tell you that, in writing, within one month.

To exercise these rights in the app:

Withdraw consent — in the app, at Settings → Privacy. Each category can be turned off independently, and takes effect immediately.
Access your data — in the app, at Settings → Privacy → Save a Copy of My Data. The file is assembled on your device so it contains the data that is actually held there.
Delete your data — in the app, at Settings → Manage Account → Delete Account. This deletes your consumer health data from your device — including the index of how Humo categorised your calendar — and your account data from our systems.
Any request, including confirmation and appeals — email privacy@humo.health.

We will respond within 45 days. If we need more time we will tell you within that period and may take up to 45 additional days.

If we deny your request, you may appeal by replying to our response or emailing privacy@humo.health with the word "appeal". We will respond to an appeal within 45 days and explain our reasoning. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint or, for Nevada residents, the Nevada Attorney General.

We do not require an account to make a request, and we will not ask for more information than we need to verify it.

Geofencing

We do not use geofencing. Humo does not collect location data and does not operate any virtual boundary around any facility.

Version 1.1 — effective 18 October 2026.