Consumer Health Data Privacy Policy

Effective Date: October 23, 2026 · Version 2026-10-23

This Consumer Health Data Privacy Policy applies to consumer health data of consumers in Washington and Nevada and, as WOMP's practice, to all users. It is separate from the general Privacy Policy (https://womp.pro/privacy.html) and supplements it. "Consumer health data" means personal information that identifies a consumer's past, present, or future physical or mental health status, as defined in the Washington My Health My Data Act (RCW 19.373) and the Nevada health data law. The English text prevails over the Russian note below.

1. WHO WE ARE AND HOW TO CONTACT US

Denis Shchennikov, sole proprietor operating as "WOMP", Dubai, United Arab Emirates ("WOMP", "we", "us").

Email (requests, questions, complaints, withdrawal of consent):
support@womp.pro

2. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT, AND WHY

• Body and goal data: weight, height, age, sex, body measurements, goals, targets. Purpose: to calculate norms and progress and to personalize reports, menus and tips. How used: calculations on our servers and, with your consent, AI processing (section 4).
• Nutrition and habit data: meals, food photos, voice and text entries, water, alcohol records, allergies and intolerances, notes, household members' dietary information that you enter. Purpose: to keep your diary, analyze meals, warn about possible allergens, and prepare reports, menus and tips. How used: stored in your account; processed by AI for analysis (section 4).
• Wellbeing data in My Plan: answers to wellbeing questions (stored as short codes), the optional note "What should we know about your health?", workout sessions, sessions stopped for how you felt, optional progress photos. Purpose: to build a safe plan for movement and to prepare your AI plan for the day. How used: by fixed rules and, with your consent, AI processing.
• Data from Apple Health or Health Connect (only if you connect it and only the categories you allow): steps; sleep and sleep stages; heart rate and resting heart rate; heart rate variability (HRV); respiratory rate; blood oxygen (SpO2); workouts and active energy; body weight, body fat, lean body mass, VO2 max, temperature during sleep, time in daylight, and mindful minutes. Blood pressure and blood glucose are only displayed to you and are never stored on our servers or sent to AI. Purpose: to show your Health screen and to take sleep, recovery and activity into account in tips and plans. How used: calculated on your device; daily summaries are sent to our servers and to our AI provider (section 4).
• Derived indicators: sleep quality and need, recovery, daily load, accumulated fatigue, plan. Purpose: the Health screen, tips, and My Plan. How used: calculated from the data above.

We collect only what is needed for the features you use. We do not collect precise location data, and we do not use a geofence around any health-care facility.

3. SOURCES

You (what you enter, upload, photograph or say); your device and Apple Health or Health Connect if you connect it; and inferences that our AI features draw from your data (for example, a nutrition estimate or a plan).

4. WHOM WE SHARE CONSUMER HEALTH DATA WITH

We share consumer health data only with the following categories of recipients, which act as our processors under contract, only on our instructions:

• AI service provider: OpenAI, L.L.C. (United States). Receives, to run the AI features you use: meal photos, voice recordings and text; recipe material you import; goal, profile numbers, weight and food and water totals; for the AI plan for the day, My Plan settings, wellbeing answers, your note and your recent activity; and, if you connected Apple Health or Health Connect, daily summaries of the data listed in section 2. It does not receive your name, email or account identifier, minute-level samples or device names.
• Hosting and database provider (European Union): stores your account, entries and files.
• WOMP's relay server (Russia, Moscow), operated by WOMP: forwards traffic and keeps only short-term data (Privacy Policy section 15).

Subscription provider (RevenueCat, Inc., United States) and Apple and Google (stores, push notifications, health platforms) do not receive consumer health data from WOMP. We may disclose data where the law requires it (for example, to a court) or to protect safety, and in a merger or sale of the business, subject to this policy.

We do not sell consumer health data. We do not share it with advertisers, data brokers, or any third party for their own purposes. We do not use it for advertising. Selling consumer health data would require a separate, signed valid authorization from you; we do not ask for one.

Specific list: on request, we send you the list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data (we have sold none), and a way to contact them, at the email address above.

5. YOUR RIGHTS AND HOW TO USE THEM

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and access it, including the list of all third parties and affiliates in section 4;
• withdraw your consent to the collection and sharing of consumer health data at any time (write to support@womp.pro from the email of your account, or delete your account); withdrawal applies to future collection and sharing, and features that depend on the data stop working;
• have your consumer health data deleted;
• appeal our decision on a request.

How: write to support@womp.pro from the email address of your account. You do not need to create a new account. We confirm receipt within 7 days and respond within 45 days; where reasonably necessary we may extend this once by a further 45 days and will tell you. If we decline a request, we explain why and how to appeal. You may appeal by replying to our message, and we answer the appeal in writing within 45 days. If your appeal is denied, you may contact the Washington State Attorney General (atg.wa.gov) or, if you live in Nevada, the Nevada Attorney General.

6. RETENTION AND DELETION

We keep consumer health data while your account exists. After you delete your account or ask us to delete data, we delete it from our working systems within 30 days. Backup copies are overwritten no later than 6 months after we confirm your request and are not used in the meantime. We tell our processors (for example OpenAI) to delete the data they hold; OpenAI may keep request data for up to 30 days to monitor abuse. A short record of your consent (document versions and time) and payment records are kept only as the law requires. Details for specific features are in the Privacy Policy, sections 2.7 and 10 to 11, and on https://womp.pro/delete-account.html.

7. SECURITY AND ACCESS

We restrict access to consumer health data to people and processors who need it to provide the features you use, and we use measures such as encryption in transit (HTTPS), private storage with short-lived signed links, and deletion of temporary data on a fixed schedule (Privacy Policy section 16). We have a contract with each processor that is consistent with this policy.

8. CONSENT

We collect and share consumer health data for the purposes in this policy with your consent, which you give by ticking the third box at registration ("I agree to the processing of my personal data, including health data and its processing by AI (OpenAI, USA), under the Consent") for the separate Personal Data Processing Consent (https://womp.pro/consent.html). The consent states the categories of data, the purposes including specific uses, the recipients, and how to withdraw. Connecting Apple Health or Health Connect also requires your permission in the system window of your device.

9. CHANGES

We will not collect new categories of consumer health data, or use or share it for new purposes, without first telling you about the change and getting your consent where the law requires. We publish changes here with a new date. Earlier versions are available on request.

10. EFFECTIVE DATE

This policy is effective from October 23, 2026 (version 2026-10-23).

Related documents: Privacy Policy https://womp.pro/privacy.html · Terms of Use https://womp.pro/terms.html · Personal Data Processing Consent https://womp.pro/consent.html

Политика о данных о здоровье потребителей (США)

Дата вступления в силу: 23 октября 2026 · Версия 2026-10-23

Краткая справка на русском. Полный текст политики — на английском языке (английская версия главная).

Эта страница — отдельная «Политика о данных о здоровье потребителей» для жителей штатов Вашингтон и Невада по закону My Health My Data Act (RCW 19.373) и закону Невады о данных о здоровье; WOMP применяет ее ко всем пользователям. Она дополняет общую Политику конфиденциальности (https://womp.pro/privacy.html).

Кратко:

• Оператор: Denis Shchennikov, sole proprietor operating as "WOMP", Dubai, United Arab Emirates. Контакт: support@womp.pro.
• Какие данные о здоровье мы обрабатываем: вес, рост, возраст, пол, замеры тела, цели; питание, вода, алкоголь, аллергии, заметки; ответы о самочувствии и тренировки в «Моём плане»; если вы подключили Apple Health или Health Connect — шаги, сон, пульс и пульс покоя, HRV, частота дыхания, SpO2, тренировки и активная энергия, масса тела и другие разрешенные вами категории. Давление и глюкоза только показываются вам, на серверах не хранятся и ИИ не передаются.
• Зачем: только чтобы работали функции, которыми вы пользуетесь (дневник, анализ блюд, отчеты, советы, «Мой план», «Здоровье»).
• Кому: OpenAI, L.L.C. (США) — для AI-функций, по нашему поручению; хостинг (Европейский союз); ретранслятор WOMP (Москва) — только пересылка трафика. Мы не продаем данные о здоровье и не передаем их рекламодателям и брокерам данных.
• Ваши права: узнать, какие данные мы собираем, и получить доступ вместе со списком получателей; отозвать согласие в любой момент (письмом на support@womp.pro или удалив учетную запись); удалить данные; обжаловать решение. Мы подтверждаем запрос в течение 7 дней и отвечаем в течение 45 дней (однократное продление еще на 45 дней); на апелляцию отвечаем в течение 45 дней; если апелляция отклонена, можно обратиться к генеральному прокурору штата.
• Хранение: пока существует учетная запись; после удаления — удаление из рабочих систем в течение 30 дней, резервные копии — не более 6 месяцев.
• Согласие вы даете третьей галочкой при регистрации (отдельное Согласие на обработку персональных данных, https://womp.pro/consent.html).

Версия 2026-10-23, действует с 23 октября 2026 года.