Effective date: September 15, 2026 Last updated: September 15, 2026
This notice explains how Alvino Bernardo, operating Noxy in Indonesia, collects, uses, and shares consumer health data and how you can exercise applicable rights, including under Washington's My Health My Data Act. Contact: alvino.support@gmail.com.
1. Categories of consumer health data and purposes
We process the following information when you choose the relevant features:
- body measurements, including height, current/target weight, and weight imported with permission from Apple Health; birthday, gender, activity level, goals, and plan settings used to personalize calorie and nutrient targets;
- food descriptions, selected meal photos, portions, nutritional estimates, meal times, food logs, and saved foods used for logging and nutrition estimates;
- journal notes and mood selections used for your wellness journal;
- calorie/macro goals, meal-derived labels, fox companion feedback, and streak information inferred or calculated from your inputs to provide progress and habit features;
- Apple Health information you permit: weight and height access checks, and active energy for the Health settings screen; and
- account identifiers associated with this information and, if you enable analytics, metadata about use of meal, wellness, and Health-connection features that may reveal use of a health-related service.
We use this data to provide your requested personal plan, food and wellness journal, account recovery/cloud sync, AI estimates, optional Apple Health integration, and progress features. With your separate analytics choice, we use limited action metadata to understand product usage and diagnose problems. We also process relevant information to answer your requests, protect the service, carry out deletion, and meet applicable legal obligations. We do not use consumer health data for third-party advertising or sell it.
2. Sources
We receive consumer health data directly from your questionnaire answers, food text and selected photos, edits, journals, mood selections, and support messages; from Apple Health when you grant access; from your use of Noxy; and from calculations or AI estimates based on that information. Meal estimates can incorporate public menu/nutrition sources. Account and system identifiers come from your sign-in and device interfaces.
3. Categories shared and recipients
We disclose the following categories as needed for the feature you request and any consent required by law:
- Google Firebase, our cloud service provider: profile, body measurements, goals, food logs/photos, saved foods/photos, journals, streaks, and associated account identifiers when you use your signed-in account; operational account/security information and support content to provide those services.
- Google Gemini and Google Search grounding, our AI providers: food text, corrections, and selected meal photos for permitted estimates. Search grounding receives food text and food descriptions derived from a photo, not the photo itself. We do not send Apple Health measurements or journal entries as estimate inputs.
- PostHog, our optional analytics and diagnostics provider: account-linked usage metadata, permission outcomes, and crash context when you enable collection. Our custom usage events exclude actual meal text/photos, journal text, exact body measurements, and calorie/macronutrient values. Available email/name is attached to the analytics account profile.
- Apple Health: meal nutrition, meal names/times/identifiers, and body measurements that you permit Noxy to write. Other apps can access Health records only under Apple's permission system.
- Service providers handling security, support, and legal requests, and authorities or advisers where an applicable law permits or requires disclosure. Information you voluntarily place in a support email is handled by our email provider.
Noxy is operated by an individual and has no corporate affiliates with whom it shares consumer health data. We do not sell consumer health data to data brokers or advertisers. We do not use geofences around healthcare facilities to identify or track people, collect health data, or send health-related messages or advertisements.
4. Consent and withdrawal
We obtain consent where required for collection and, separately, for sharing; applicable law may permit processing necessary to provide a product or service you request. We do not treat agreement to general Terms as a replacement for required consent.
The first-launch analytics prompt is optional and remembers either answer. Analytics and crash reporting can also be turned off in Settings → Your data. Account sync is part of the signed-in service. Apple Health permissions can be withdrawn through Noxy's Health settings or Apple Health. AI processing is subject to the separate AI notice; stop submitting requests and sign out to clear that permission. Contact us to withdraw consent across your account or request deletion. A request already transmitted cannot be recalled. Withdrawal does not itself erase information already held or cancel an Apple subscription.
5. Access, deletion, and appeals
Where applicable, you may confirm whether we collect, share, or sell your consumer health data; access it and obtain the required list of third parties and affiliates with whom it was shared or sold, including contact information; withdraw consent; and request deletion. We do not discriminate against you for exercising these rights. A feature may be unavailable if it cannot function without information you decline to provide.
Email alvino.support@gmail.com with “Health data request” and identify your Noxy account. Do not send a password or unnecessary sensitive information. We may request proportionate information to authenticate the request. We normally respond to Washington requests within 45 days; when a lawful extension is necessary, we notify you within that period and explain why. We provide information without charge to the extent required by law.
You can also use Settings → Delete account. We notify the processors and other recipients required by applicable law to carry out deletion. Backup deletion may be delayed only as applicable law permits, with the information restricted from other use. Food-log expiry, retained saved-food copies, and asynchronous provider processing mean deletion is not always instantaneous. Account deletion does not cancel an App Store subscription or automatically erase records in Apple Health or local copies on another offline device.
If we refuse a request, we explain the reason and how to appeal. Email the same address with “Health data appeal.” We respond to a Washington appeal within 45 days with a written explanation. If denied, you may complain to the Washington Attorney General.