Draft. This policy is in legal review ahead of launch and is published here for transparency while we finish it. The commitments in “What we never do” are final either way.
Privacy policy
Consumer health data privacy notice · draft of July 18, 2026
What we collect
Account basics (email, display name, password hash), and the wellness data you choose to log: foods and meals, recipes, water, fasting sessions, exercise, body measurements, and blood glucose / ketone readings you enter. If you connect Fitbit, we sync the activity, weight, and sleep data you authorize. We collect this data from you directly, or from the integration you explicitly connect — nowhere else.
What we use it for
One purpose: showing your data back to you — logs, charts, goals, reports, and features you ask for. We also keep the operational records needed to run the service securely (sessions, API keys you create, billing status once payments exist).
What we never do
We do not sell your data. We do not share your health data with advertisers or data brokers. We run no advertising, no ad-tech pixels, and no third-party trackers — on this site or in the app. We will never use your health data for marketing without your separate, explicit consent.
Sharing
Your data is shared only with the infrastructure providers required to run the service (hosting, email delivery, payment processing once live), bound by contract to process it solely on our instructions — or when the law requires it. Nothing in your log is ever visible to other users unless you explicitly post or share it.
Your rights
You can access the data you have logged at any time in the app. You can ask us to confirm what we hold, correct it, or delete your account and its data entirely by emailing privacy@metabomap.com. If you have connected an integration, you can withdraw that consent by disconnecting it in Settings. We respond to verified requests within the timelines Washington's My Health My Data Act and other applicable consumer-health privacy laws require.
Security & retention
Data is encrypted in transit, access is limited to what operating the service requires, and backups are encrypted. We keep your data while your account exists and delete it when you ask us to close the account, except for records we are legally required to retain.
Contact
privacy@metabomap.com — WeirdWorldMedia, LLC, Washington, USA. If we change this policy, we will post the new version here with its effective date, and notify you in the app if the change is material.