Effective date: August 17, 2026 Last updated: August 17, 2026
This Consumer Health Data Privacy Policy supplements the Enphana Privacy Policy. It describes how Colyden LLC handles consumer health data in Enphana and is intended to provide the disclosures required by applicable consumer-health privacy laws, including Washington's My Health My Data Act.
Privacy contact: privacy@colyden.com
Enphana is a general-audience app and is not directed to children under 13. See the Privacy Policy for our children's privacy practices.
1. Consumer health data we collect
In the current release, Enphana may handle the following consumer health data on your device:
- wellness reflections, symptoms or experiences, body-location notes, ratings, and free-text notes;
- meal, recipe, ingredient, nutrition, food-preference, barcode-lookup, and optional meal or recipe photo information;
- sleep-session timing, sleep stages, and related observations;
- activity or exercise-session type, timing, and related measurements;
- questions, self-directed experiments, results, and patterns generated from the information you enter; and
- information imported from Apple Health or Health Connect after you grant the relevant read permission, including sleep sessions and stages, exercise or workout type and timing, and Apple Health walking/running or cycling distance when available.
2. Sources and purposes
We receive consumer health data directly from you when you use the App, including when you choose to take or select a meal or recipe photo, and, only when you choose to connect them, from Apple Health or Health Connect. We use it to provide local logging, reflection, pattern, experiment, history, backup, restore, export, and optional health-data import features. Calculations and patterns are performed locally on your device.
Apple Health and Health Connect access is optional. You can refuse or withdraw access through Enphana and your device's connected-app or health settings. Withdrawing access stops future imports; you can delete already imported content through Settings → Reset Local Data and delete any local backups separately.
3. Sharing and sale
Enphana does not sell consumer health data. It does not use consumer health data for advertising or cross-context behavioral advertising.
In the current release, Enphana does not send consumer health data to its servers, Supabase, RevenueCat, Apple, Google, or another processor on Enphana's behalf. The categories of consumer health data Enphana shares are therefore none, except when you direct the App to export or share a copy through your device. In that case, the selected recipient, service, or destination receives the information you choose to send and handles it under its own practices.
Supabase Auth may process your email address, account identifier, authentication/session data, and security metadata for an optional Enphana account. RevenueCat and the applicable app store may process subscription or transaction information. These services do not receive consumer health data from the current Enphana App.
4. Consent and changes to use
You choose whether to connect Apple Health or Health Connect and grant the applicable read permissions. Enphana collects and uses the connected-health information needed for the import feature you request. If we plan to collect, use, or share a new category of consumer health data, or use it for a new purpose, we will first update this Policy and obtain consent when required by law.
5. Your rights and how to exercise them
Depending on where you live, you may have the right to confirm whether we collect, share, or sell consumer health data about you; access consumer health data we control; receive a list of third parties and affiliates with whom it has been shared; withdraw consent; and request deletion.
For locally stored App content, use the App controls described in our Data Deletion Policy. Because that content is not held in an Enphana cloud service in the current release, we generally cannot access or delete it remotely. To request action regarding information Colyden controls, email privacy@colyden.com with the subject line Consumer Health Data Request. Do not include health entries, passwords, or one-time codes in your request.
We may verify your identity before acting on a request. We aim to respond within 45 days. If an applicable law permits us to extend that period, we will notify you, explain the reason, and provide an updated timeline. If we deny your request, you may appeal by replying with the subject line Consumer Health Data Appeal. Washington residents may also submit a complaint to the Washington State Attorney General.
6. Data retention and deletion
Consumer health data remains on your device until you remove it, reset local data, delete local backups, uninstall the App, or your device/platform removes it. Discovery topics may remain recoverable for up to 30 days. Exports and files you share can remain with the service or person that receives them until you remove them there.
If you delete an optional Enphana account, we delete the account identity and authentication data that we control, subject to limited retention required for legal, security, or enforcement reasons. Account deletion does not delete local App content, exported files, or independent records kept by Apple, Google, or RevenueCat. See the Data Deletion Policy for instructions.
7. Updates and contact
We will update this Policy before material changes to our consumer-health-data practices and provide notice or consent when required. For questions, requests, or security reports, contact privacy@colyden.com.