Consumer Health Data Privacy Policy

Subjective Health is operated by Centurion Movement, LLC. Consumer health data is information linked or reasonably linkable to you that identifies your physical or mental health status. We collect the information you choose to use in wellness features, including saved information from your shared Subjective and Centurion account.

Food and energy: food descriptions, meal photos submitted for estimation, meal records, nutrition estimates, calorie and protein targets, estimated full-day energy output, and daily or weekly completion and review records.

Body and goals: weight, body measurements, goals, starting-program answers including medication-use choices, preferences, and targets you accept. Personal check-ins and notes can include connection, friends, family, time for yourself, values, meaningful progress, appetite, energy, mood, sleep, symptoms, side effects, or medication and dose if you choose to enter them. AI messages or images you submit can also contain health information.

Connected Apple Health information: with the permissions you choose in the iPhone app, the current sync bridge can upload weight, daily steps, active energy, and resting energy, with dates, sources, and sync status. Sleep is not uploaded by this bridge. Earlier records from other connected account features may contain additional information you previously chose to save.

Derived information: summaries, trends, comparisons, AI-generated food estimates, and proposed setup or check-in answers based on the replies you submit. These are part of your health information even when calculated rather than directly entered.

Optional health-service usage information: with a separate choice, selected screen and feature names, button actions, guide progress, broad screen-size categories, approved campaign/source codes, approximate time and scroll depth, and success or general failure of an action. These records include times and random identifiers and can reveal that you use a health-related service. Signed-in usage is associated with your account. They exclude your guide answers, typed content, saved health values, photos, and raw page addresses or referring links; they are not anonymous.

For public guides and tools, optional analytics records which resource page you visit and whether you click to build a free plan. It does not record calculator activity, readings, results, or completed worksheet contents. Public-browser usage is kept separate from account usage.

Related account and service information: account identifiers, contact details, support messages, and technical request or error details when they are linked to health records or reveal use of a health-related feature. These can be health information even though they are not meal or weight entries.

You provide information through account setup, starting-plan questions, saved records, AI requests, check-ins, reviews, support messages, and any earlier intake forms. Your existing shared-account records can also appear when you sign in.

Apple Health supplies only information permitted by your device settings. Our service calculates summaries and estimates from the records you provide. You can revoke Apple Health access in your iPhone’s Health settings; revoking access stops future permitted reads but does not itself delete information already saved to your account.

When you enable optional analytics, selected actions in your browser supply the usage records. We do not join website analytics from before sign-in to your signed-in account history.

Your browser or device and our hosting and diagnostic services supply technical request and error details when you use a feature or encounter a problem.

We use health information to provide the personal tracking you request: save your starting program, record meals and weight, display your chosen targets, estimate food nutrition when requested, calculate daily and weekly summaries, show your notes and connected observations, and let you review or export your record.

We also process necessary information to answer your support or privacy request, keep the service safe and working, and comply with applicable law. The current service does not provide prescribing, diagnosis, treatment decisions, or a clinician portal.

With separate permission, optional usage records help us understand which pages help people get started, which features people use or return to, and where steps fail or cause confusion. These records include session identifiers and times for calculating visit and completion patterns. A further choice lets our team use the built-in step-by-step activity view. The separate PostHog choice described below also permits session and activity-sequence analysis there. This is product improvement, not a necessary part of saving or displaying your health record.

We do not use consumer health data for advertising, audience building, affiliate targeting, or the sale of unrelated products. We do not sell consumer health data. We do not use geofencing to identify people at health-care facilities or target health-related advertising.

You choose which records to enter and which optional features to use. The web companion asks for your affirmative choice before opening or saving health records with your account. The free starting guide uses your answers in your browser before account entry; saving them to your account requires the account permission step. Connected services also process information necessary to provide the features you request. Agreeing to service terms is not permission for unrelated health-data uses.

Optional AI food estimation sends your description and any selected meal photo to OpenAI through our server when you request an estimate. Review the returned estimate before saving it. Manual food entry is available if you do not want to send information for AI estimation. Apple Health requires its own device permission.

Optional analytics has its own choice, separate from permission for account health records. Letting our team use the built-in step-by-step activity view and sending a limited usage copy to PostHog have additional choices. PostHog analysis can include visits and activity sequences, independently of the built-in timeline choice. PostHog is offered only after we verify the provider setup. Declining these options does not prevent use of the service. A timeline records selected action names, not a screen video, page contents, input contents, images, or network contents.

Open Optional analytics to change these choices, download the associated usage records, or turn collection off and delete those records. Website choices before sign-in and signed-in choices are separate. For earlier website usage, use the same browser before its 30-day cookie expires or you clear it; the cookie lets us locate and manage those records without a new account. We may be unable to locate them once it is gone. You can also contact us for assistance.

Before collecting, using, or sharing an additional category of consumer health data or using it for an additional purpose not disclosed here, we will disclose the change and obtain your affirmative consent. Sharing that requires consent will have a choice separate from consent to collect; accepting this notice alone does not provide that consent.

You can withdraw health-data permission in the web companion under You → Your data & account, or use Your data & account on the permission screen before accepting. You can also contact dev@centurionmovement.com for withdrawal, including for earlier records or connected services. See the rights section below for what withdrawal changes.

Infrastructure providers: Vercel processes web requests that carry the health information you submit or retrieve. Amazon Web Services provides the shared backend, storage, and authentication for the health-record categories described above, including saved entries, connected observations, summaries, and associated account information. This processing delivers the features you request.

Optional product-analysis providers: Vercel processes optional usage requests and AWS stores the associated usage records. If you enable the separate PostHog choice when it is available, PostHog receives a limited copy of selected usage events for product analysis, including visits and activity sequences, with a random identifier instead of your account email. These events can reveal health-service use. We do not send saved health values or typed content for this purpose. The separate choice governs this transfer.

AI processing providers: OpenAI receives the input needed for requested AI features. Food estimation uses the description and any selected meal photo; other connected AI features may use submitted messages, images, and relevant record context. Optional AI reply help sends only the current question and the reply you choose to submit, with one clarification if needed. Your other notes and account records are not automatically included. You review any proposed answer before using it and save separately. Provider processing and retention can apply. We do not promise that these requests have zero retention.

Operational service providers: diagnostic services, including Sentry where enabled, process technical request and error details for troubleshooting; these details can identify use of a health-related feature. Our email services process the contact information and health details you include in a support or privacy request. These disclosures support troubleshooting or your request, not advertising.

No clinician, employer, health plan, advertiser, or affiliate receives access to your personal account through the current companion. If you choose to download or share a record, the recipient receives the copy you provide. We may disclose information when required by a valid legal obligation, subject to applicable law.

You may request the identities and contact details of third parties and affiliates with whom your consumer health data has been shared, as provided by applicable law. We do not provide health data to advertising networks or data brokers. The current website and companion do not enable third-party trackers to collect your health data over time across websites or services.

Connecting ChatGPT is optional and has a separate permission screen. If you approve it, OpenAI receives the meal or weight records and food summaries requested through that connection, within the permissions shown. These may include food names, dates, nutrition estimates and their sources, weight values and units, measurement sources, and your logging timezone. They can reveal sensitive health information.

ChatGPT can submit a meal or weight reading you ask to save, and can correct or remove selected meals if you grant those actions. We store the structured records in your existing shared account. This connection does not retrieve your medication notes, family history, insurance information, body scans, or full conversation history. It does not upload meal photos to Subjective or give ChatGPT your Subjective password.

OpenAI handles information in ChatGPT under its own terms and your ChatGPT privacy settings. This is different from using the food-estimation feature inside Subjective. We do not promise that information shared into ChatGPT is used only under the OpenAI API data terms.

Review and revoke connections at Manage ChatGPT connections. Revoking in Subjective blocks further access under that connection. Health-data withdrawal also blocks it; granting general health-data permission again does not reactivate an old connection. Information already returned to a conversation is not recalled. Manage those copies through ChatGPT and contact us for help with a privacy request.

We retain connection permission records to document your choices until account deletion, and use limited operation receipts to prevent duplicate saves. Removing a meal or weight reading clears its corresponding details from those receipts, including when you remove it from another Subjective client. Disconnecting leaves your saved account records in place. Account export and deletion include the connection records.

We offer the account controls and request channels described here to all users. You can ask whether we collect, share, or sell your health information, access it, request correction or deletion, obtain information about recipients, and withdraw consent for future collection or sharing. Email dev@centurionmovement.com or use the mailing address below. We will authenticate your request without asking for your password. You do not need to create an account to make a request. Contact us if you need an accessible format or help using a request method.

You can download your companion record and request shared-account deletion from You → Your data & account. Account deletion also affects the associated Centurion account. The companion download does not include every historical Centurion feature; contact us for a broader request. Earlier intake submissions may need a separate request because they are stored outside your app account.

Optional usage records expire from access and reports after 30 days; an hourly cleanup removes expired records from the active event store. Turning off optional analytics deletes its active usage records and stops new collection for that choice. We retain limited permission and deletion records to honor and document the request. Account deletion covers account-linked usage records, and withdrawing health-data permission also turns off account analytics. Neither action automatically locates separate website usage from before sign-in; use that browser’s Optional analytics control or contact us for help.

If you enabled PostHog, turning that option off or deleting the associated analytics requests deletion of the provider copies. We also request removal of older provider copies as the associated usage identifiers expire. Provider deletion may take longer than deletion from our active records, and we follow up until it is resolved. We do not describe an accepted deletion request as confirmed erasure. The applicable deletion deadlines and backup safeguards below still apply.

Deletion requests cover applicable active records and backup copies. We notify processors, contractors, affiliates, and other recipients of a deletion request where required, and follow up on their handling of it. Deletion from backups may take longer than deletion from active systems; where Washington law applies, the permitted backup delay cannot exceed six months after authenticating the request. Any legal retention exception must be limited to its permitted purpose. Account deletion does not retrieve copies that you have already downloaded or shared yourself.

We respond without undue delay and within 45 days of receiving a request. Where legally permitted, a complex request may take one additional 45-day period; we will explain the extension within the initial period. If we deny a request, reply to appeal. We will provide the appeal decision and reasons within 45 days of receiving the appeal. Requests are ordinarily free; any legally permitted fee or refusal for excessive requests will be explained. A shorter applicable legal deadline takes precedence.

Withdrawal stops future processing that relied on your consent as soon as practicable. The web control pauses new health-data service requests and scheduled processing for your shared account. A request already running may finish, and information already transmitted to a provider cannot be recalled by that control. Your saved records remain unless you also request deletion. Privacy requests, export, deletion, and necessary account administration remain available without granting health-data permission again.

If an appeal is denied, Washington users may contact the Washington Attorney General. Other users may contact their state regulator; additional state request information appears in our Privacy Policy. We do not retaliate for exercising these rights. Choosing not to provide information can make a feature unavailable where that information is necessary to deliver it.

We update this notice when health-data practices change and provide notice of material changes in the app or by email. A change to this page is not retroactive consent. New categories or purposes require the disclosure and affirmative permission described above.

Questions, requests, or appeals: dev@centurionmovement.com. General website and account practices are described in our Privacy Policy.

Centurion Movement, LLC, 421 West 3rd Street Apartment 1215, Austin, TX 78701. Email: dev@centurionmovement.com.