Consumer Health Data Privacy Policy

Effective date: September 30, 2026

This is a separate policy from our general Privacy Policy, published on its own as required by the Washington My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A.400–.550). It applies to everyone who uses the App, not only residents of Washington or Nevada.

Categories of consumer health data we collect, and why

Sleep duration and timing; nutrition and dietary habits; physical activity; smoking status and frequency; alcohol consumption; self-reported stress, social connection, cognitive activity, and sense of purpose; age, sex, height, weight, and body fat percentage. We use this data solely to calculate and display your personal "health capital" score and how it changes with your habits. We do not use it for advertising, profiling for marketing, or eligibility decisions of any kind (employment, insurance, credit, or otherwise).

Categories of sources

All of the above comes directly from you, entered by hand into the App. We do not obtain health data about you from any other source.

Categories of consumer health data shared, and with whom

We do not sell your consumer health data, and we do not share it with any third party for their own purposes. We disclose it only to our processor, Supabase, which runs our calculation service on our behalf under a contract that limits it to that purpose: your entries are processed only to calculate your score and are not stored after the result is returned. If you create an account, Supabase also processes your email address so you can sign in.

Where this data is stored

Your consumer health data is stored only locally, in your browser's storage on your own device. We do not maintain a server-side database of it. When the App calculates your score, the necessary entries are sent over an encrypted connection to our calculation service (Supabase, data centers in the United States), processed, and discarded — no copy is kept.

The trade-off you should know about: because we never receive this data, we also can't restore it. If you clear your browser's site data, open the App in a different browser or in an in-app browser (Telegram, Instagram, and similar apps run their own isolated browser that doesn't share storage with Safari or Chrome), switch devices, or lose your device, your health data is gone — there is no backup on our end to recover it from. Creating an account does not change this; it only saves your email so you can sign in.

Your consent

Before you enter any health information, the App presents a clear, standalone consent checkbox that names and links this policy, our Privacy Policy, and our Terms of Use — separate from any other agreement. By checking it you consent to the collection of your consumer health data and to its processing by our calculation service as described above. Existing users are asked for this consent again, on a separate screen, before their data is first sent for calculation. You can withdraw consent at any time in Settings → Account; the App will then stop sending your data and stop updating your score. Because we never sell your consumer health data, no sale authorization is requested.

Your rights

You have the right to: (1) confirm and access — ask us to confirm whether we are collecting, sharing, or selling your consumer health data, and to access it, including a list of third parties and processors it has been disclosed to (currently only our processor Supabase, for calculation); (2) delete — request deletion of your consumer health data; since it lives on your device, you can delete it yourself at any time by clearing your browser's local storage for this site, or email us to delete your account email from our servers; (3) withdraw consent — at any time, in Settings → Account or by email; the App will stop sending your data for calculation.

We will respond to requests under (1) and (2) within 45 days of receipt, extendable once by an additional 45 days when reasonably necessary. If any account data is held in backups, deletion from those backups may take up to 6 months. We will not discriminate against you for exercising these rights.

To exercise any of these rights, email support@dayvest.app.

If we refuse your request: appeal

If we decline to act on your request, we will tell you why. You may appeal that decision within a reasonable time by replying to our decision or emailing support@dayvest.app with "Appeal" in the subject line. We will respond to your appeal in writing within 45 days, explaining our decision. If we deny the appeal, we will also provide you with a way to contact the Washington State Attorney General to submit a complaint, which you can do directly at atg.wa.gov/file-complaint.

No geofencing

We do not use geofencing or any location-based technology to identify, track, collect data from, or send notifications to users based on their proximity to a healthcare facility or any other location.

Changes

We will update this policy if our data practices change and will update the effective date above accordingly.

Contact: support@dayvest.app