Consumer Health Data Privacy Policy

Last updated 1 September 2026

This notice is provided under the Washington My Health My Data Act and the Nevada consumer health data law. It applies to residents of Washington and Nevada and describes how Humo handles consumer health data.

Our general privacy notice is at humo.health/privacy.

Categories of consumer health data we collect

Humo processes the following categories. Almost all of it is derived and stored on your device and is never transmitted to us — but because our software derives it, it counts as collection under these laws, and we disclose it here.

Processed on your device only:

Sleep, physical activity, energy expenditure, standing time, workouts and mindfulness minutes, obtained from Apple Health with your permission
Your answers to in-app check-ins and reflections, including those concerning mood, energy, stress, work experience, personality traits and relationship patterns
Measures, scores, phases and trends that Humo derives from the above, including indicators relating to balance, recovery and burnout signals
Calendar and reminder content used to describe how you spend your time

Received by us:

A record of whether you turned each data category on or off, and when. This records your choice only. It contains no health data.

How we use consumer health data

To calculate and display your own scores, patterns and trends back to you inside the app
To suggest routines and practices within the app
To send you notifications you have asked for

We do not use consumer health data for advertising, profiling for advertising, or any purpose other than providing the app's features to you.

Sources of consumer health data

You — your answers to check-ins and reflections, and routines you create
Apple Health, with your permission, on your device
Your calendar and reminders, with your permission, on your device
Derived by Humo on your device from the sources above

We do not share consumer health data with anyone.

We do not sell consumer health data. We have never sold consumer health data. Selling it would require your separate written authorization, and we do not intend to seek one.

Third parties and affiliates who receive consumer health data

None.

We have no affiliates. Our service providers do not receive consumer health data:

Supabase hosts our database and sign-in. It holds your account details, your record of privacy choices, and any routines you write yourself. It does not receive health data, questionnaire answers, or derived scores.
RevenueCat manages subscription status and receives an anonymous account identifier from us; Apple separately provides them purchase and device information only.
Apple provides the App Store and the device permissions. It does not receive your Humo data from us.

How to exercise your rights

If you are a Washington or Nevada resident, you have the right to:

Confirm whether we collect, share or sell your consumer health data
Access your consumer health data, including a list of third parties with whom we have shared it
Withdraw consent to our collection and sharing of your consumer health data
Delete your consumer health data
Appeal a refusal to act on a request

To exercise these rights:

Withdraw consent — in the app, at Settings → Privacy. Each category can be turned off independently, and takes effect immediately.
Access your data — in the app, at Settings → Privacy → Save a Copy of My Data. The file is assembled on your device so it contains the data that is actually held there.
Delete your data — in the app, at Settings → Manage Account → Delete Account. This deletes your consumer health data from your device — including the index of how Humo categorised your calendar — and your account data from our systems.
Any request, including confirmation and appeals — email privacy@humo.health.

We will respond within 45 days. If we need more time we will tell you within that period and may take up to 45 additional days.

If we deny your request, you may appeal by replying to our response or emailing privacy@humo.health with the word "appeal". We will respond to an appeal within 45 days and explain our reasoning. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint or, for Nevada residents, the Nevada Attorney General.

We do not require an account to make a request, and we will not ask for more information than we need to verify it.

Geofencing

We do not use geofencing. Humo does not collect location data and does not operate any virtual boundary around any facility.

Version 1.0 — effective 1 September 2026.