Your Health Data

This page covers the health information metrIQ holds about you specifically. It sits alongside our Privacy Policyrather than replacing it — Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's health-data rules each require this to be its own document, and we think that's right: your health data deserves a page that isn't buried in a longer one.

It applies to everyone, not only to residents of those states. One standard is easier to keep honest than three.

1. What we collect

Everything below comes from you — either typed in directly, or told to Sophia in conversation. We collect nothing about your health from any other source, and nothing from other apps or devices on your phone.

• Body measurements — height, weight, and your weigh-in history
• Birthdate and gender, which the calorie calculations need
• Meals and nutrition you log, and foods you save
• Workouts and activity you log
• Lifestyle check-ins — sleep, stress, energy, alcohol, movement, and eating out
• Your goals, and any health context you choose to share with Sophia
• Your conversations with Sophia, which may contain any of the above

2. Why we collect it

To run the service you asked for, and nothing else: calculating your calorie and macro targets, adapting them as your weight moves, letting Sophia coach you with knowledge of your actual week, and showing you your progress over time.

3. Who can see it

A small number of service providers process health data strictly on our behalf, under contracts that bar them from using it for anything else:

• Neon — stores your account and app data
• Anthropic — provides the AI behind Sophia; your relevant health context is sent so she can answer
• Vercel — hosts the application, and provides cookieless, aggregate analytics and performance measurement across the whole site. It stores nothing on your device, and the temporary request hash it uses to count repeat visits is discarded after 24 hours and never linked to your account.
• Sentry — error and performance monitoring, across the whole site including signed-in screens. It receives which screen a request or an error happened on, tied to your account identifier while you are signed in, plus whatever diagnostic detail the failure carries — which can occasionally describe what was being processed, such as the name of a meal whose calculated calories did not add up. It sets no cookie, records no session replay, and never receives your name, your email, or your IP address.
• Resend — sends account and service email
• Stripe — processes subscription billing (billing data only; Stripe receives no health data)

We never sell your health data, and we never share it for advertising of any kind — not to advertising networks, not to data brokers, not to anyone. Google Analytics runs on our public pages only — never on the app's own screens — so it never sees anything about your health. Vercel's measurement does run throughout the app, including on signed-in screens: it records which page was loaded and how fast. It sets no cookie and never tracks you across other sites. To tell repeat visits apart within a day it derives a temporary hash from the request itself, and discards that after 24 hours. It is never joined to your account, and it never carries what you logged. Sentry's error and performance monitoring also runs on signed-in screens, as described above; none of this is advertising, and none of it is a sale.

We may disclose data if the law compels us, and we'll tell you unless we're legally prohibited from doing so.

4. Your rights

• Know and access — get a list of what we hold and a copy of it, including who it has been shared with
• Delete— have your health data erased. Deleting your account removes it from metrIQ's own systems straight away. If you also want us to direct our service providers to delete any copy they hold, email us and we'll do that too.
• Withdraw consent — for collection, or for sharing, at any time and without deleting your account

Deleting is immediate and self-service: go to You → Delete my account and your app data is erased right away.

For access, a copy, or to withdraw consent, email privacy@metriq.fitness. We respond within 45 days. If we need longer we'll tell you why within that window and take at most 45 more.

5. If we say no

You can appeal any refused request by replying to our decision, or by writing to privacy@metriq.fitnesswith “Appeal” in the subject. We'll review it and respond within 45 days, explaining our reasoning either way. If we deny the appeal, Washington residents may complain to the Washington State Attorney General.

6. How long we keep it

For as long as your account exists. When you delete your account it goes immediately — see the retention section of our Privacy Policy for the two narrow exceptions (administrative audit entries, and billing records the law requires Stripe to keep). Neither contains health data.

7. Changes

If we materially change what we collect or who sees it, we'll ask for your consent again rather than assuming the old answer still stands. The “Last updated” date at the top shows the current revision.

8. Contact

Z Development EE
Karakasi 24, Thessaloniki, Greece
privacy@metriq.fitness