Consumer Health Data Privacy Policy

This policy applies to consumers covered by the Washington My Health My Data Act, Nevada SB 370 and similar US state consumer health data laws. It supplements our Privacy Policy, which covers everything else. Bhansa is made by ANPO PTY LTD (ACN 698 868 147), Melbourne, Victoria, Australia.

1. Consumer health data we collect and why

Health features in Bhansa are optional. If you use them, we collect:

• Food log entries: what you ate, when, portions and nutrition values. Used to show your intake against your targets.
• Nutrition profile: birth year or age, sex, height, weight, goal weight and activity level, and the targets calculated from them. Used to calculate calorie and nutrient targets.
• Focus areas you choose, such as blood pressure, blood sugar, heart and cholesterol, or digestion. Used to order and word general tips.
• Allergies and dietary restrictions. Used to filter and adapt recipes, meal plans and Mira's answers.
• Photos and voice you choose to use for logging, such as a photo of a meal or nutrition label, or a spoken meal. Used to estimate what you ate. Photos and recordings are not kept on our servers.

We use this data only to provide the features you ask for, keep the service secure, and meet legal obligations. We do not use it for advertising and we do not sell it.

2. Where it comes from

Directly from you, when you enter it, scan a photo or speak to the app, and from calculations we make from what you entered (such as your calorie target).

3. Who we share it with

We share consumer health data only with service providers (processors) that handle it for us under contract, to provide the feature you are using:

• AI providers (OpenAI and Google Gemini): the food log entries, allergies, diet and nutrition targets a feature needs, the meal photos you scan and short voice recordings, only while AI Features is on
• Your device's speech service (Apple or Google): spoken meals, when that feature uses on-device speech recognition
• Hosting providers (Railway and Vercel): stored data
• Error reporting (Sentry): error details, which can occasionally contain content from the screen where the error happened

We have no affiliates that receive consumer health data. We do not sell consumer health data or share it with third parties for their own purposes. Food log and nutrition profile data is not shared with household members.

4. Your rights

You have the right to:

• Confirm whether we collect, share or sell your consumer health data, and access it, including a list of the third parties and affiliates we have shared it with and how to contact them
• Withdraw consent, for example by turning off AI Features in Settings > Privacy & Data or deleting your nutrition profile and food log
• Delete your consumer health data. You can delete entries in the app or delete your account in Settings > Privacy & Data > Delete Account. Copies held by our processors are deleted under their retention periods, and backups are overwritten when they expire (see section 6 of our Privacy Policy)
• Not be discriminated against for exercising these rights

To make a request, email privacy@bhansa.app from the email address on your account. We will verify the request and respond within 45 days. If we need more time, we may extend this by a further 45 days and will tell you why. Requests are free, up to twice a year.

Appeals: if we decline your request, you can appeal by replying to our decision. We will respond to an appeal within 45 days and explain our reasons. If your appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint or your state's Attorney General.

5. Contact

Questions about this policy: privacy@bhansa.app or our Data Protection Officer at dpo@bhansa.app.