Consumer Health Data Privacy Policy

Last updated: October 22, 2026

This policy applies to consumer health data: personal information that identifies you and relates to your past, present, or future physical or mental health. It describes the consumer health data What We Do Collective ("we", "us") collects through the TrakMac app and trakmac.com, why we collect it, who receives it, and how you can access, delete, or stop the use of it. It supplements our Privacy Policy, which governs all other data. We have no affiliates.

1. Consumer health data we collect

• Profile: height, weight, birthday, gender (if you provide it), goals, activity level, dietary preferences, allergies, and answers to the optional fitness assessment.
• Food logs: the meals you describe by voice, text, or photo, and the calorie and macro estimates for them.
• Workout logs: the activity, its duration, the estimated calories burned, and, if you answer, how it felt.
• Daily check-ins: if you use "How was today?", your energy and mood scores, the tags you select (for example "slept badly" or "sore"), and any note you add.
• Coach messages: what you tell the in-app Coach.

2. Sources

We collect consumer health data only from you, when you enter it in the app. We do not buy it, receive it from other companies, or infer it from your location.

3. Purposes

We use consumer health data only to:

• estimate your food and workouts and calculate your daily targets;
• show you your own history and patterns;
• let the Coach answer you in light of your profile and logs; and
• operate, secure, and troubleshoot the app.

We do not sell consumer health data. We do not use it for advertising or marketing.

4. Who receives it

We disclose consumer health data only to the following service providers, which process it on our behalf and under our instructions:

• Supabase, Inc. hosts our database and stores your profile and logs.
• Anthropic, PBC provides the AI that estimates your meals and workouts, reads check-in notes you choose to send, and powers the Coach. It receives that content and, for the Coach, a summary of your profile and recent logs. We do not send Anthropic your name, email address, account ID, or device or network address, so it cannot tell which TrakMac user a request came from, unless you include identifying details in what you write. Under its commercial terms, Anthropic does not train its models on this data.
• OpenAI, L.L.C. and OpenRouter, Inc. are additional AI providers we may use to estimate your meals, only if you have accepted the updated AI notice in the app. If we do, they receive the meal description or photo and the profile details used to size portions (height, weight, goal, diet, and any allergies or GLP-1 use). As with Anthropic, we never send your name, email address, account ID, or device or network address. They never receive your check-ins or Coach messages. OpenAI does not train its models on data sent through its API, and we instruct OpenRouter to use only model hosts that do not keep or train on this data.

Our analytics, marketing-attribution, and email providers do not receive consumer health data. We may also disclose it when the law requires, such as in response to a valid court order; we will narrow or challenge requests that are overly broad.

5. Your rights

You have the right to:

• Consent, or decline. We ask for your consent before collecting check-in data and before sending a check-in note to our AI provider. If you decline, the rest of TrakMac still works.
• Withdraw consent at any time, by deleting your check-ins in the app or by emailing us.
• Access your consumer health data, through the export in the app or by request, and receive a list of every third party we have shared it with, with their contact details.
• Delete it. You can delete a single check-in in the app. Deleting your account erases your consumer health data from our database. Copies in our encrypted backups are deleted as those backups expire, within 90 days. Our AI providers delete what they receive under their own retention terms, normally within 30 days, but they may keep data longer where the law requires or to investigate misuse of their service.

We will not charge you, deny you service, or treat you differently for exercising these rights.

6. How to make a request

Email [email protected] from the address on your account. We will respond within 45 days. If we need more time, we will tell you why within that period and take no more than 45 additional days. If we deny your request, you may appeal by replying to our response; we will decide the appeal within 45 days and explain our decision. If your appeal is denied, you may contact your state attorney general. In Washington, that is atg.wa.gov/file-complaint.

7. Changes to this policy

If we make a material change to how we collect, use, or share consumer health data, we will update this page, notify account holders by email before the change takes effect, and obtain your consent again where the law requires it.