Consumer Health Data Privacy Policy

Categories and purposes

Myo Rhythms collects the health information you provide or authorize: food intake, nutrition, allergies, dietary restrictions, weight and body measurements, activity and training, sleep and recovery, energy and symptoms, injuries or limitations you describe, menstrual or reproductive-cycle information, supplement products and intake, and health information in messages. We also generate inferred wellness information, including targets, readiness summaries, patterns, and plan adaptations.

We use these categories to provide the planning, tracking, explanations, household meal coordination, and connected-device features you request. Where you separately opt in, we retain conversations and related interaction details for evaluation and improvement of Myo. Optional features can be declined; choosing a service that needs a particular signal allows us to use that signal to provide that service. A privacy policy or general acceptance of terms does not itself give consent to optional collection or sharing.

Sources of consumer health data

Sources include you; an authorized household adult providing shared meal-planning or dependent constraints; WHOOP or Oura when you connect an account and grant access; and calculations or inferences Myo makes from those inputs. We do not buy consumer health information from data brokers.

Categories shared and recipients

The categories above may be processed by hosting, database, security, and AI service providers as needed for the requested feature. Current technical providers include Supabase, Railway, and Anthropic. AI requests may include messages, relevant conversation context, and selected wellness details. Authorized operators and reviewers may access information for requested support, privacy fulfillment, security, or consented evaluation.

Household members receive shared meal, grocery, recipe, and cooking information, including restrictions you place in shared content; they do not receive another adult’s private cycle, weight, or other health records merely by sharing a membership. Connected wearable providers receive the authorization and connection information needed for their service. We do not send health or conversation content to Stripe as part of payment checkout.

We do not sell consumer health data, share it for targeted advertising, or disclose it to corporate affiliates. Legally required disclosures remain subject to applicable law. We seek separate consent for other collection or sharing when required, rather than treating optional conversation capture as blanket permission.

How to exercise health-data rights

You can request access, confirm our health-data practices, ask for recipient identities and contact methods, withdraw consent, or request deletion. Use Data and privacy or Support. You need not create a new account. We verify identity and explain any lawful limit. Disconnecting a wearable stops future imports; it does not erase provider-held data.

For Washington requests covered by its health-data law, we respond within 45 days, with notice if a permitted 45-day extension is needed. Covered deletion requests extend to processors and recipients; backup deletion may take up to six months after authentication. Appeal a denial using the same channel with “Privacy appeal”; we respond within 45 days. You may complain to the Washington Attorney General. We do not unlawfully discriminate for exercising these rights.

Business mail can be sent to Dive In Ventures LLC, 5900 Balcones Drive, STE 100, Austin, TX 78731.