Consumer Health Data Privacy Policy

This policy is for people in Washington, Nevada and other US states with consumer health data laws, such as Washington’s My Health My Data Act and Nevada’s SB 370. It adds to our privacy policy, which covers everything else. Fabee is made by Nicolas Demanez, trading as NICODMZ Company in Belgium (“we”).

The short version

The health data Fabee handles is what you log about food and your body.
It lives on your iPhone. We can’t see it there, unless you turn on sync, which saves a copy to your Fabee account in the EU.
To answer you, your message and any meal photo pass through our server to an AI model that keeps nothing. We don’t store them either.
We never sell health data, never use it for ads, and share it only with the companies that help run Fabee.

What health data Fabee handles, and why

Your food log (meals, foods, amounts and times): to keep your log and show your day.
Calories, protein, carbs and fat for each food and each day: to count what you ate against your targets.
Meal photos you add to a message: so the AI model can see what’s on the plate and log it.
What you tell Fabee in setup (goal, sex, age, height, weight and activity): to work out your calorie and macro targets.
Your weight entries and your targets: to show your progress and what’s left today.
What you write or say in the chat: to understand what you ate and write a reply.
What Fabee remembers about you (such as allergies, food preferences, goals, symptoms, and injuries, conditions or medications you tell it about) and your check-in answers (such as energy, sleep and hunger): to tailor its answers to you.
Feedback you send, which may mention your health: to answer it and fix what’s wrong.
Apple Health, if you connect it (weight, body fat, height, date of birth, sex, steps, workouts, sleep, blood glucose, and period days if you add them): to give Fabee’s AI coach context, show your Trends and a meal’s glucose rise, and fill in setup. Fabee only reads it and never writes to Apple Health. See Apple Health in our privacy policy.

Usage analytics say that something happened, for example that a meal was logged or that it came with a photo. They never say what you ate, your numbers or your messages. After setup they also carry a few broad details: your goal, activity level, sex and an age range (not your exact age, height or weight), linked to your anonymous account ID. No Apple Health value is used for analytics, and safety flags record a category only and aren’t linked to you in analytics. You can turn usage analytics off in Settings.

Where it comes from

From you: what you type, dictate or photograph, and what you enter during setup or in Settings.
From Fabee, on your iPhone: totals and targets worked out from what you logged and told it.
From Apple Health, if you connect it: only the types you allow in Apple’s Health settings.
From the AI model: the foods, amounts and nutrition values it proposes for a meal, which you can change.

Where it lives

On your iPhone: your food log, photos, targets, body details and recent chat.
Apple Health readings stay on your iPhone. They are never used for analytics, and not stored on our server, except the daily activity summary (active energy and workouts) while you share with a personal coach. While “Coach reads my Health” is on, Fabee’s AI coach reads a short daily summary of them through the AI model (below). Weigh-ins you choose to bring in from Health become Fabee weight entries, and the AI coach’s replies are part of your chat: both sync like the rest, only if you turned on sync.
In your Fabee account, if you turn on sync: your meals and their nutrition values, meal photos, weight, age, sex, height, activity, goal and targets, what Fabee remembers about you, your check-in answers, saved foods, learned food estimates and the last 3 days of chat. Only to keep your data safe and the same on your devices. The records are in a Neon database in Frankfurt, Germany, and the photos in Cloudflare R2 storage held in the EU. Your account and the record of your sync choice are with Neon in Frankfurt too.
With your personal coach, if you join one: from the day you agree, your coach sees your meals and meal photos, weight, body photos and measurements, a daily summary of your activity from Apple Health, and your profile, goal and targets, on coach.heyfabee.app through our server. Body photos, measurements and activity summaries are saved on our servers only while you share, and deleted when you stop. See Sharing with your own coach.
Passing through, never stored: each chat message, with the context a reply needs (for example today’s meals and your targets) and a meal photo if you added one, goes through our server to the AI model and back. Our server doesn’t store it, and we only use AI hosts that agree to zero data retention: they don’t keep your messages or photos and don’t train on them. We choose the AI models ourselves, only from providers based in the US or the EU. A photo is sent to the AI model once, with its message, and never again.
On our server: feedback you send, linked to your anonymous account. Food names and nutrition values go into a shared food table. For each sighting it also keeps the day and a one-way code that can’t be traced back to you without our server’s secret key, only to count how many different people agree on a portion size.

We share health data only with companies that process it for us, under contract, to run Fabee:

Cloudflare runs our server, which passes your messages and photos to the AI model, and stores your synced meal photos in the EU if you turn on sync.
OpenRouter connects our server to the AI model, and the AI provider we choose, only providers based in the US or the EU with zero data retention, reads your message and photo to write the reply.
Neon (our databases) stores your synced data in the EU if you turn on sync, and holds feedback you send.
Your personal coach, if you join one, sees what Sharing with your own coach lists, from the day you agree, until you stop sharing.
GitHub (our issue tracker) holds feedback you send, and serious safety flags (a category and a time, never your words or readings).

We don’t share health data with anyone else, including affiliates, and we never:

sell it, or trade it for anything of value;
use it for ads, or share it with advertisers;
use it to train AI models;
use geofencing around places where people get health care.

We collect and use health data only to give you what you ask for: logging your food and answering you. By using Fabee and logging food, you consent to that. Sending a message or a photo in the chat is your consent to it being passed to the AI model for that reply. Sync is off until you tap “Turn on sync”; that tap is your consent to saving a copy in your Fabee account, and we record when you did.

You can withdraw consent at any time:

Stop sending messages or photos. Nothing leaves your iPhone until you send something.
Turn off sync in Settings, under Sync. Nothing new is saved to your account after that. The copy already saved stays in your account until you delete it.
Turn off usage analytics in Settings.
Delete your data (see below), which also ends our use of it.

Your rights

You can ask us to:

confirm whether we collect, share or sell your health data (we don’t sell it);
see the health data we hold about you, and the list of companies we share it with;
delete it;
withdraw your consent.

You can see, copy and delete your health data yourself:

Get a copy: Settings, then “Download my data”.
In the app: Settings, then “Delete my data”, then “Delete everywhere”, which deletes your data on your iPhone and your account on our server, with everything synced to it. “Delete from this iPhone only” keeps the copy in your account.
On your iPhone: delete the app to remove everything on the phone. That doesn’t delete your account or its synced copy.
On our server: email [email protected], or send a request through Feedback in the app so we can find your account.

We answer within 45 days, and tell you if we need up to 45 more. There’s no charge. We won’t treat you differently for using these rights. If we say no, we’ll tell you why, and you can appeal by replying to that email; we answer appeals within 45 days. If you’re not happy with the result, you can contact your state’s attorney general.

Changes

If this policy changes, we’ll update this page and the date at the top. For big changes, we’ll also tell you in the app.

Contact

Questions about your health data: [email protected].