Consumer Health Data Privacy Policy

Last updated 25 October 2026

This policy is for residents of Washington State, Nevada, Connecticut and other US states with consumer health data laws. It explains how CyberInnovate FZ-LLC handles "consumer health data" in connection with the Daily Body app. Our general privacy policy covers everything else.

Consumer health data the app processes

The Daily Body app creates and processes the following on your device:

• Photographs of your body, front and side, and the outlines made from them.
• Appearance measurements made from those outlines (relative widths of shoulders, waist, hips and similar), and the weekly summary written from them ("Waist appears narrower").
• Tags you choose (for example "cutting" or "injured") and when photos were taken.

Our app processes this on your device. We do not access, receive or keep it. We do not use location or geofencing.

What may reach us

• Messages you send us. If you send us an email, a website contact-form message or TestFlight feedback (for example a screenshot), it may contain consumer health data you chose to include. We use it only to answer you and fix problems. We share it with no one except the email and hosting providers that carry it. We keep it as stated in our privacy policy (email for 24 months after the conversation, contact form for 12 months, TestFlight until 90 days after the beta), and we delete it when you ask.
• When paid plans launch, purchase records (an anonymous app user ID and purchase history) will go through Apple and RevenueCat. This is not health data, but because it shows that someone uses a body-progress app, we will treat it with the same care. We will update this policy before that happens.
• If we add usage counts, they will be off unless you turn them on, will cover only which features are used, and will never include photos, measurements or text. We will update this policy before that happens.

Why

• To align, measure and summarise your photos on your device, and show them back to you.
• To answer messages you send us.
• When paid plans launch: to give you what you paid for and restore purchases.

Sources

You, through the app on your device and the messages you send. We do not buy or receive health data from anyone else.

Sharing

• We do not sell consumer health data, and we do not share it for advertising.
• Third parties and affiliates that receive consumer health data: none, other than the email and hosting providers that carry messages you send us (Zoho Corporation for email; Cloudflare, Inc. for the website). We have no affiliates that receive it.
• Content you export or share from the app goes only where you send it.

Consent

The app processes this data only to provide the features you ask for. We will ask for your separate, explicit consent before sharing any consumer health data, and before collecting any for another purpose. You can withdraw consent at any time in the app's Settings or by emailing us.

Your rights

You can:

• confirm whether we collect, share or sell your consumer health data, and get a copy;
• get a list of the third parties and affiliates it was shared with;
• withdraw consent;
• ask us to stop collecting, sharing or selling it;
• ask us to delete it, including copies held by our processors, whom we will notify.

Most of this data exists only on your device. Settings ▸ Storage ▸ Delete everything deletes it immediately.

For anything we hold, email privacy@cyberinnovate.ai with the subject "Consumer health data request". We hold no account, so we may ask for details of your message to find it.

Response times:

• We answer within 45 days.
• If we need more time, we tell you why. We may take up to 45 more days (Washington) or 15 more days (Nevada).
• If we decline, you can appeal by replying to our answer, and we respond within 45 days of your appeal.

We will not treat you differently for using these rights. If you are not satisfied, you can contact the Washington State Attorney General (atg.wa.gov/file-complaint), the Nevada Attorney General, or the Connecticut Attorney General.

Contact

CyberInnovate FZ-LLC · P.O. Box 10055, Al Nakheel, Ras Al Khaimah, United Arab Emirates · Privacy Lead: privacy@cyberinnovate.ai