Consumer Health Privacy Policy

1. Health information and its sources

From your questionnaire and setup entries, we receive treatment stage, medication and dose, symptoms and their impact, weight, shot schedule, reminder preferences, and health-related tracking priorities you choose to provide. From your app entries, we receive shot history, optional injection sites and notes, symptoms and severity, weight, calories, protein and related profile details. Dates, account identifiers and contact information can link those records to you.

With your permission, Apple Health supplies weight, dietary energy and protein values and their sources for display on your iPhone. That integration does not send the Health values or source names to our backend. Health-related information may also come directly from a support message you send us.

Your browser supplies technical information about visits. With optional advertising permission, a visit to the public questionnaire welcome screen is shared with Meta along with browser and event identifiers, an advertising click identifier if present, and network information. A visit may indicate an interest in GLP-1 support even though no answers or treatment records are included.

2. Why we use it

We use the information you provide to tailor the questionnaire and product preview, prepare app setup, keep your records and charts, support your chosen reminders, respond to you and secure the service. We also analyze retained questionnaire submissions internally to understand and improve the funnel. This does not make retained submissions anonymous.

The selected routine retention periods are 90 days after last activity for abandoned, unenrolled drafts and 12 calendar months after confirmed account-deletion acceptance for a separately retained identifiable copy of the linked questionnaire and checkout submission. These periods do not override an applicable right to earlier erasure.

3. Sharing and recipients

Cloud hosting, database and authentication processors, including Google Cloud and Firebase, support storage and access to questionnaire and manually entered app records. Email and notification providers handle the contact, delivery and account information needed to send messages. Support handling may involve information you choose to include in a request. Payment provider Paddle receives transaction and contact information; health answers are excluded from payment metadata.

Meta receives only the consented public-page advertising data described above, for advertising measurement. It does not receive questionnaire answers, medication or dose fields, app tracking entries or Apple Health values through this integration. Turn this sharing off through Ad privacy; browser Global Privacy Control and enabled Do Not Track signals also block it. Revocation stops future browser measurement and does not recall earlier disclosures.

We do not sell your questionnaire answers, tracking records or Apple Health values for money. This does not mean that every advertising disclosure falls outside the broader legal definitions of sale or sharing. You can decline optional advertising and contact us to exercise applicable health-data rights. Legally required disclosures remain subject to applicable health-data protections.

4. Requests and appeals

Send a request to hello@mivori.app to confirm or access health information, ask which third parties received it, withdraw consent, or request deletion, including retained questionnaire submissions. You do not need to create an account or purchase a subscription to make a request. We may ask for limited information to verify identity securely.

Washington’s My Health My Data Act provides qualifying consumers with access, consent-withdrawal and deletion rights. Its response period is generally 45 days, with a permitted 45-day extension when the statutory conditions are met. A separate health-data deletion request must be evaluated under applicable law; the routine 12-month retention setting is not a reason by itself to deny it.

If a request is denied, reply to hello@mivori.app with “Privacy appeal” and the request details. The Washington appeal process requires a written response within 45 days. If an appeal is denied, you can contact the Washington Attorney General. Other health-privacy laws may provide rights based on your location and the circumstances.