US consumer health data privacy · Updated 22 October 2026
Your health information. Your choices.
Read the separate Feed Your Zest referral notice first if you use that pathway. The normal adult US wellness-service sections follow. Our general privacy notice also describes account and billing information.
Feed Your Zest referral service — separate health-data notice
This section applies to the Feed Your Zest source-enrolled service and separately consenting invited adults. The normal wellness-service sections below are separate. The referring clinic cannot consent for you, and possession of a referral link is not evidence of an individual clinical assessment.
Your information and its sources
You provide your own food, symptom and bowel diary; dietary restrictions and allergies; goals, measurements and nutrition answers; date and type of birth, feeding and recovery answers where applicable; movement readiness; and privacy choices. The service derives estimated meal targets, recovery-aware planning, diary associations and consultation recommendations from those answers. Associations are not diagnoses or confirmed ingredient causes. Ingredient removal and reintroduction remain clinician-directed outside this app.
Your signup link records the referral source. Your partner separately supplies their own account and health answers. Payment providers supply billing status, not clinical assessment. Security providers process technical connection information; this is not background location tracking or geofencing around healthcare services.
Why we process it and your separate choices
Your explicit health-data consent supports the private diary, eligible meal planning, recovery guidance and your own consultation summary. Membership payment is not health-data consent. Optional comparison of your own diary has a separate choice; it is not global AI training. This referral diary is not sent to Pocket Coach/OpenAI, sold or used for targeted advertising.
Two adults must each separately agree before shared dinners and combined ingredient quantities are shown. Your private intake, weight, symptom diary and targets are not shared with a partner. Serving quantities can reveal dietary information; you can revoke shared-dinner consent. Food restrictions for each adult remain separate safety inputs.
Who receives what
Cloudflare hosts the service and encrypted application records; Supabase supplies account login and recovery. Stripe processes the website payment and opaque membership identifiers, not your symptom or postpartum diary. Resend and relevant app notification providers receive only the identifiers needed for generic account or service messages, not your full diary. Processing can occur outside your state or the United States. No US-only storage or HIPAA certification is claimed.
Feed Your Zest has no dashboard access to your private records. Booking opens its website without putting your diary or identity in the link. You decide whether to download and share a consultation summary yourself; the clinic then handles information you give it under its own notice. MyPocketPT's owner can see referral, signup and membership status. Only with your separate optional consent can the owner also see that a consultation was recommended to you or your partner—not symptoms, reasons or private health records. No creator or corporate affiliate receives your referral health diary.
Non-identifying service totals
To understand how the service is used, we count the first consultation recommendation issued to a consenting active referral profile. This is not a booking, attendance or treatment-outcome measure. A private deduplication receipt stays with your account and is removed with it; the separate monthly counter contains no name, account identifier, symptoms, reason, exact date, location or partner link. No historical private diary is mined to backfill these totals.
Owner reporting withholds current months and cohorts below 10 profiles, and rounds published monthly totals down to tens. These totals cannot be filtered by person, partner, symptom or other characteristic. We use these non-identifying totals only for service administration, do not try to identify anyone from them and do not share them with external recipients. We do not combine them with named referral records. Your separate optional choice still controls whether the owner sees a recommendation linked to you.
Access, correction, withdrawal and deletion
Your own privacy controls provide a private download and consent history. You can correct your entries, revoke optional sharing, or withdraw health consent and remove the diary health records from this service. Withdrawal stops recording and analysis; it does not cancel your login or subscription. Cancellation and account deletion have separate controls, and verified billing closure comes before account removal. Limited consent and financial receipts may remain for accountability; they do not justify retaining the full diary. Non-identifying pooled monthly counters cannot be traced back to remove one person's contribution.
For access, correction, health-data deletion, recipient details or a privacy appeal, contact support@mypocketpt.com — Privacy request. Use your registered email; never send passwords, card details or your complete medical history. We verify ownership, respond without undue delay, normally within 45 days, and explain any permitted extension. If refused, reply “Privacy appeal”; we provide reasons and the relevant complaint route. Exercising rights does not change your referral price.
Restricted recovery copies follow the relevant provider's retention cycle and must not be reused for ordinary service. Deletion records must be reapplied before recovery. Contact support for a specific recovery-copy request; immediate deletion of every backup is not promised. Material new health-data categories, purposes or recipients require notice and assessment of the required affirmative choice before use.
Normal adult US wellness service — separate notice
Who is responsible
FARR WELLNESS TECHNOLOGIES LTD, trading as MyPocketPT, is responsible for this service. Contact support@mypocketpt.com about privacy. A creator, partner or referring professional cannot consent for you.
Health information and its sources
You supply measurements such as age, calculation sex, height and weight; goals; activity and exercise ability; injuries or limitations; dietary restrictions and allergens; food entries; and progress, appetite, energy and adherence feedback. The service derives estimated nutrition targets, your weight trend, meal preferences and proposed future-plan changes from those entries. Estimates and associations are not diagnoses or proven causes.
You choose your own country, US state and planning time zone. A separately agreed Couples calendar governs shared meal dates without sharing your private home state. Payment providers supply subscription and billing-status information. Hosting providers also process technical network/security information, including IP-derived approximate location; this is not background GPS tracking or geofencing around health services.
Ordinary US profiles do not collect referral symptom/bowel diaries, clinician records or ingredient-challenge results. Watch collection and referral access remain disabled for this normal wellness service; they require separate approval and notice before any new collection.
Purposes and choices before collection
Health information supports the personalised meals, workouts, shopping and progress features you request. A separate affirmative health-data choice is required before these features process your health answers; accepting terms or buying a membership is not that choice. Declining or withdrawing pauses personalised planning and health logs but does not cancel billing or close your account.
Optional group-level product learning is off by default and has its own choice. Creator attribution and optional first-party campaign measurement are separate from health personalisation. Health information is not sold, rented or used for targeted advertising.
Choosing Pocket Coach sends your question and limited plan context to OpenAI to answer that request. Do not include information about other people or unnecessary medical details. A partner sees only the shared planning information that both adults explicitly agree to share, not your private weight, intake, restrictions, diary or questionnaire.
Recipients and categories
Cloudflare hosts the website/API, database and planning queues. Supabase supplies login and recovery. These service providers process the information needed to operate the requested service. OpenAI receives an optional Pocket Coach question and limited plan context when that feature is used. These are technology service providers, not a clinician or insurance company.
Stripe, Apple, Google and RevenueCat process purchase, subscription and transaction information; they do not receive your food diary or private weight logs from this integration. Resend and Expo/Apple/Google notification services receive the contact or device identifiers needed for account and generic service notifications, not the full health record. Creators receive aggregate attribution/commission information, not customer health records. No corporate affiliate receives health information under this service's data flow.
We do not add new recipients, new health-data categories or new uses on the strength of a previous terms acceptance. Additional consent or another applicable service-request basis must be assessed and disclosed first. Contact support for the relevant recipients and their contact routes when exercising your rights.
Withdrawal, access, correction and deletion
Use Health-data privacy controls to decline or withdraw personalisation. Optional learning and partner sharing have separate controls. To confirm whether we process your health information, obtain a copy, correct it, request health-data deletion without closing your account, or request the recipients and their contact routes, email support@mypocketpt.com — Privacy request. Do not send your password, payment-card details or your full health history by email.
You do not need to create a new account to make a request. We verify ownership using information reasonably needed for that request, normally your existing account or registered email. Exercising privacy rights does not change your membership price. Account deletion is a separate option and also closes website-subscription renewal after cancellation is verified; Apple/Google subscription management remains with the relevant store.
Requests are handled without undue delay, normally within 45 days. If an applicable law permits an extension, we explain the reason and deadline within the initial response period. If a request is refused, reply to the same support address with “Privacy appeal”; we provide a written appeal response and reasons within 45 days and the relevant state authority's complaint route if the appeal is denied.
Retention, recovery and security
Plan and progress records support your open account. Withdrawal stops new personalisation; it is not automatic erasure of previously saved information. A deletion request must cover application records and any relevant recipients, archive and backup copies, subject to a specific lawful retention exception. Restricted recovery copies must not be reused for normal service, and deletion/withdrawal records must be reapplied before restoration. Recovery copies follow the relevant provider's retention cycle; contact support for the applicable period and the handling of a specific request. No immediate erasure of every disaster-recovery copy is promised.
Limited financial, transaction, consent or fraud-prevention records may require separate retention for their stated purpose. They are not permission to retain your full health profile indefinitely. Network connections are encrypted and access is limited by your authenticated account; a Couples membership is not blanket access to another adult's health record. Information may be processed outside your state or the United States. No US-only storage, complete anonymity or HIPAA certification is claimed.
Changes to this notice
A material new health-data use, category or recipient must be disclosed before it is enabled and reviewed for the required affirmative choice. The general privacy notice remains available; existing UK accounts and prices are not converted by this notice.