Consumer Health Data Privacy Policy
Washington State has a law called the My Health My Data Act. It says that any app holding health data about a person has to publish a separate page, apart from its ordinary privacy policy, saying exactly what health data it holds and what happens to it. This is that page. Nevada has a closely similar law, and this page serves as the notice under that one too.
It covers the health part of Foundation only. Everything else, including your money, your bills, your investments and your account email, is covered by the Privacy Policy, and nothing on this page contradicts it. If you only read one of the two, read that one. This page exists because the law asks for it in this shape.
The short version
- Your health data is shared with nobody. Not an advertiser, not a data broker, not an analytics company, not an AI service. There is no such software in this app.
- It is never sold, and there is no arrangement under which it could be.
- One outside company stores it for us, because it is the database and the file storage the app runs on. It is named below, along with the country the machines are in.
- You can read all of it, take a copy of all of it, and delete all of it, from inside the app, without asking us.
- Physique photos are only backed up to your account if you say yes when asked. One exception, and it is ours to own: on builds before September 2026 the backup setting started switched on, so photos taken then were uploaded without the question being put. They are still in those accounts. Deleting a photo in the app removes it from the phone and asks our storage to delete the uploaded copy; if the phone is offline at that moment the uploaded file can be left behind, and it goes when you delete your account.
What health data Foundation collects
The law is broad about what counts as health data, so this list is broad too. We would rather name something here that turns out not to count than leave something out.
- Body weight and your weigh-in history, including the date of each weigh-in and the weight target you set.
- Steps, day by day.
- Calories and macronutrients: your daily totals for calories, protein, carbohydrate and fat, the individual meals behind them, the meals you save to log again, and the food searches and barcodes you scan.
- Training: your workout sessions and the exercises, sets, reps and weights in them, the workouts you save as templates, and your weekly training totals.
- Physique photographs, which are photographs of your own body, and the date each one was taken.
- Anything read from Apple Health, if you turn Apple Health on. That is your step count and your body weight, and nothing else. It also goes the other way: the weigh-ins you log in Foundation are written back into Apple Health as body weight, so your other apps can see them. Foundation can only ever change or remove the entries it wrote itself.
- Figures the app works out from the above: your daily score, your maintenance calories, your streaks, the banked daily and weekly totals behind every chart, the Month Review, and the shareable scorecard.
- Every target you set: your calorie target, your protein, carbohydrate and fat targets, your daily step goal, your bodyweight target and the days of the week you intend to train.
- Long-term goals, which are free text and may describe something about your health or your body.
- Your checklist and the dated record of what you ticked off it, which will hold health items if you put health items on it.
- Journal entries and notes. These are free text. We do not read them and we do not look for health content in them, but you may choose to write health content into one, so they are named here.
Where it comes from
- You type it in. This is where nearly all of it comes from.
- The app works it out from what you typed. Every derived figure, including your daily score, is ordinary arithmetic done on your phone from numbers you entered.
- Your phone's motion sensor, for step counts.
- Apple Health, for steps and body weight, and only if you turn that on in Settings, Privacy. It is off until you do. The same switch writes your Foundation weigh-ins back into Apple Health. You can withdraw either direction at any time in the Health app itself, and Foundation will simply stop.
- Your camera or your photo library, for physique photos, and only when you take or choose one.
We do not buy health data, we do not receive it from anyone else, and we do not infer it from anything other than what you entered.
What it is used for
One purpose, in plain words: to keep your own record and show it back to you. Specifically, that means all of the following, and nothing beyond it.
- Storing what you entered so it is still there tomorrow and in two years.
- Showing it back to you as lists, charts, comparisons and summaries, including comparing one physique photo against an earlier one.
- Working out figures from it: your daily score, your maintenance calories, your streaks, your daily and weekly totals, your Month Review and your scorecard.
- Syncing it between the devices you sign in on, so a new or replaced phone shows the same record.
- Putting it into the export file when you ask for one.
- Scheduling reminders. Those are scheduled on the phone itself and nothing about them is sent from a server.
- Answering you if you write to support and ask us to look at something.
What it is not used for: advertising, marketing, profiling, scoring you for anyone else, research, resale, or training any kind of model. There is no AI feature in this app and no AI company receives anything you log.
When we ask your permission first
Most of what is listed above, we collect because collecting it is the app. You open a weight tracker, you type a weight, you tap save, and the app keeps it and shows it to you. That is the thing you asked for, so there is no separate permission screen in front of it, and adding one would be theatre.
Two things are different, and both are yours to decide.
- Backing up physique photos to your account. The app asks you the first time you take one. It is off unless you say yes, and closing or dismissing the question leaves it off. You can change your mind either way at any time in Settings, Privacy, Photo Backup. Turning it off later stops new uploads but does not remove copies already in your account. Turning it back on later uploads every photo still on the phone that has not been uploaded yet, including ones taken while it was off, and the app tells you how many before it does. If you want a photo never to reach our storage at all, delete it before you turn the switch on.
- Reading from Apple Health. Off until you turn it on in Settings, Privacy, and iOS asks you separately as well.
Neither of those permissions is bundled into accepting our terms, and neither is taken from you carrying on using the app. They are separate questions with a real no.
Who your health data is shared with
Nobody.
To be precise about the categories the law asks us to list:
- Third parties who receive health data: none.
- Affiliates who receive health data: none. Foundation has no parent company, no subsidiaries and no affiliates. There is nothing to list.
- Health data sold: none, ever.
The company that stores it for us
One outside company holds your health data, and it holds it as our processor, meaning it stores and serves the data on our instructions and for our purposes, not its own. Under the Washington law, giving data to a processor in order to run the service you asked for is not the same as sharing it, which is why it is not in the list above. It is named here anyway, because you should know where your record physically is.
- Supabase hosts the database record that holds everything you enter, and the separate private storage bucket that holds physique photos, one folder per account. Both are in Supabase's Canada (Central) region, near Montreal, so your record and any backed-up physique photos are stored in Canada, whichever country you use Foundation from. Supabase is under its published data processing addendum, which restricts what it may do with the data to what we instruct.
Two honest limits, the same two named on the Privacy Policy. Supabase takes routine backups of its database as part of running the service, and its documentation does not say which region those sit in, so this page does not claim one. And when you open one of your own photos, the file reaches you through a content delivery network with servers in many countries, the same way every image on the internet reaches you. Where the photo is stored is Canada. Where a copy travels on the way to your screen is wherever you are.
The other outside services Foundation uses do not receive health data at all. Brevo receives your email address in order to send your sign-in codes. RevenueCat receives a random identifier for your account, your app version, device model and country, and a record of each purchase and renewal, and it is never sent anything you log. Apple takes payment and tells us nothing about you beyond whether a subscription is live.
The lookups the app makes
This is not sharing and none of it carries your name, your account or anything from your record, but it is the closest thing to it and you should know it happens. When you search for a food or scan a barcode, those words or that barcode go to Open Food Facts, which is the food database, and they go as you type rather than when you pick something. That is the only one of these lookups that touches anything to do with health. The others are money lookups: investment searches and the symbols of things you hold go to CoinGecko and Yahoo Finance for prices, and a currency change asks Frankfurter for one exchange rate.
None of those requests carries an account identifier, so none of those companies can tie what was asked to you, and we do not tell them. Each of them sees the internet address the request came from, as every website you visit does.
Your rights, and how to use them
Under the Washington law you have three rights over your health data, and you can use all three today.
- To know what we hold and who it has been shared with. The complete answer to the second half is nobody. For the first half, do not wait for us: Settings, Account, Export gives you a JSON file holding everything the app is currently holding about you. It carries any private entries and notes in plain text, which is why it asks for Face ID first if you have any. The photo images themselves are not in the file. The date of each photo is.
- To withdraw your consent. Settings, Privacy, Photo Backup turns off physique photo uploads. Settings, Privacy, Apple Health turns off reading from Apple Health, and you can also withdraw it in the Health app under Sharing. Neither takes effect at some later date. They take effect immediately.
- To have it deleted. Settings, Account, tap the row showing your email, then Delete Account at the foot of that screen. It removes your database record, your stored photos and your sign-in, and it deletes the photo files from that device. It cannot be undone.
If you would rather we did any of it for you, or you cannot get into the app, write to Support@foundation100.com. We will answer within 45 days. If something makes that impossible we may take one further 45 days, and if we do we will write and tell you why before the first 45 days are up. There is no charge for any of this.
If we say no
If we refuse a request, you can appeal it. Reply to the same email, or write to Support@foundation100.com with the word Appeal in the subject line. We will look at it again and send you a written decision, with our reasons, within 45 days.
If we turn the appeal down as well, you can complain to the Washington State Attorney General, and the form is at atg.wa.gov/file-complaint. We will include that link in the decision itself so you do not have to come back here to find it.
What deleting actually reaches
Deleting your account removes the database record, the photo folder in storage, and your sign-in, at once. Three things outlive it, and it is fairer to name them here than to let you find out later.
- Supabase keeps routine backups of its database as part of running the service. Anything of yours inside one goes when that backup expires. The Washington law allows up to six months for archived and backup copies to clear, and that is the outside figure we work to.
- If you ever subscribed, RevenueCat keeps its own record of that subscription against your old random account identifier, and Apple keeps its own record of the transaction under your Apple Account. Neither holds anything you logged, and neither holds any health data.
- Brevo keeps a delivery log showing that an email went to your address and when.
Write to Support@foundation100.com if you want those chased, and we will ask each service to remove what it holds about you and tell you what came back.
Separately, some of it the app deletes by itself whether or not you ask. Individual meals go at the end of the following day and individual workout sessions go when the week rolls over, although the daily and weekly totals behind the charts are banked before they do. Daily scores, eating totals, step counts and the day-by-day checklist record are kept for the most recent 730 days. Weekly training totals are kept for 260 weeks. Weigh-ins, journal entries, notes and physique photos are kept until you delete them. Nothing is deleted for being old or unused beyond what is listed there.
We do not sell health data
Foundation does not sell consumer health data, has never sold any, and has no arrangement or intention to. The Washington law requires a separate signed authorisation from you before any sale could happen, and we have no such process because we will never need one. If that ever changed, it would require asking you in writing first, and this page would change before anything else did.
We do not use geofencing
Foundation does not operate a geofence around any health care facility, and does not track, watch for or collect anything based on your being near one. The app does not use your location at all.
How it is kept
Your database record is protected by row-level security, so no other Foundation user can read it and no request the app makes can reach anyone else's. Physique photos sit in a separate private bucket, one folder per account, readable only by your account. Only one person works on Foundation, so nobody else has access to any of it.
Said plainly, because it is true of every app like this one and it would be dishonest to leave out: we run the database, so we hold administrative access to it. We do not read your record. Two things would make us open it, which are you asking us to look at something for you, or a lawful order we are required to answer. If the second one ever happens we will tell you, unless we are forbidden from telling you.
Private journal entries and private notes are hidden behind Face ID or your device passcode on this app's own screens. That is a lock on Foundation's screens, not encryption. The words sit in your account record as written, and your export file contains them in plain text. The browser version has no Face ID and no passcode check, so nothing marked private is hidden there.
Nevada
Nevada's consumer health data law asks for a notice much like this one. Rather than write a second page saying the same things, this page serves as both. The facts do not change from one state to the other: Foundation collects the same health data from everyone, uses it for the same single purpose, shares it with nobody and sells none of it. If you are in Nevada, the rights described above are available to you on the same terms and at the same email address. The appeal route and the Attorney General complaint link in the section above are the Washington ones specifically.
Changes to this page
If Foundation ever starts collecting a category of health data not listed here, or using it for a purpose not listed here, this page changes first and the date at the top changes with it. That is not a courtesy. Collecting or using health data in a way this page does not describe is itself a breach of the law this page exists under, so keeping it current is part of the obligation.
Contact
Anything at all about health data, including a request, an appeal, or a question about a sentence on this page: Support@foundation100.com