Privacy Policy
Last updated 25 August 2026
Who we are
Healthyish ("we", "us") operates the Healthyish nutrition tracking app at healthyish.app. This policy explains what we collect, why, and the choices you have. Questions or requests: privacy@healthyish.app.
What we collect
- Account data — email address and an encrypted password hash, used to sign you in.
- Food and health information you enter — meal photos, meal titles and ingredients, calories and macros, water and mood logs, body weight, height, age, sex, activity level and goals from the onboarding questions.
- Derived nutrition figures — scores and pattern averages calculated from the entries above.
- Contact details you volunteer — name, email and phone if you RSVP to a group call.
- Basic technical data — device type, browser and error logs needed to keep the app running and secure.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Sensitive / consumer health data
Food logs, body weight and the goals you set are treated as consumer health data. We collect them only to provide the tracking and educational features you asked for, and only with your separate, explicit consent, which you give with a dedicated checkbox when you create your account (alongside confirming you are 18 or older). Healthyish is not a healthcare provider and this data is not medical records — HIPAA does not apply.
If you are in Washington, Nevada, Connecticut or another state with a consumer health data law, you may withdraw consent and request deletion at any time (see "Your choices"). We do not sell consumer health data under any definition of "sale".
How photos are processed
When you scan a meal, the photo is sent to our AI provider to estimate the foods and portions in it. The provider processes the image to return that estimate and does not use it to train models. Estimates are approximate and are not a measurement.
Who processes data for us
We use service providers strictly to run the app: cloud database and authentication hosting, application hosting, and an AI model provider for photo analysis. They act on our instructions under contract and may not use your data for their own purposes.
How long we keep it
Your logs stay in your account until you delete them or your account. Deleting your data from the profile screen removes your logs; deleted records are purged from backups within 30 days.
Your choices
- Export a copy of your data from the profile screen.
- Delete your logs, or your whole account, from the profile screen.
- Request access, correction, deletion, or an appeal of a decision by emailing privacy@healthyish.app. We respond within 45 days.
- California residents: you may exercise CCPA/CPRA rights above. We do not sell or share personal information for cross-context behavioural advertising.
California privacy rights
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to know, delete, and correct their personal information, and to opt out of the sale or sharing of personal information for cross-context behavioural advertising.
Healthyish does not sell personal information. We do not share personal information with third parties for cross-context behavioural advertising. If this ever changes, we will update this policy and provide a clear way to opt out.
To exercise any of these rights, email privacy@healthyish.app with the subject line “California Privacy Rights Request”. We will verify your identity before processing the request and respond within 45 days.
Children
Healthyish is for adults. You must be 18 or older to create an account. We do not knowingly collect information from children under 13, and will delete it if we learn we have.
Security
Data is encrypted in transit and at rest, and each account can only read and write its own rows. No system is perfect; please use a strong, unique password.
Changes
If we make a material change we will update the date above and show a notice in the app before the change takes effect.