TrueMe← Back to the app

Consumer health data

A distinct notice for your most sensitive information.

This notice explains the health-data categories TrueMe handles, their sources, why they are used, when they are shared, and how to exercise your rights.

Effective August 12, 2026

1. Scope

This Consumer Health Data Privacy Notice supplements the TrueMe Privacy Policy. It is designed to address consumer-health-data laws that may apply to wellness apps outside HIPAA, including Washington’s My Health My Data Act. It applies according to the definitions and territorial scope of applicable law.

2. Consumer health data collected

  • medication, dose, schedule, injection, symptom, side-effect, and treatment information you enter;
  • weight, body measurements, nutrition, macros, water, activity, exercise, steps, workouts, sleep, goals, mood, and journal information;
  • Apple Health categories you expressly authorize TrueMe to access;
  • meal or progress photos, label images and text, voice transcripts, food searches, barcodes, and serving information;
  • inferences needed to show trends, personalize goals, or respond to a feature you request; and
  • other information that applicable law defines as consumer health data because it identifies or can reasonably be linked to your physical or mental health status.

3. Sources

TrueMe receives consumer health data directly from you; from Apple Health when you authorize access; from your device when you use optional camera, photo, speech, notification, or widget features; and from FatSecret or USDA when a nutrition request returns food information associated with your log.

4. Why it is collected and used

TrueMe collects and uses consumer health data only to provide features you request, synchronize and restore signed-in records, show trends and progress, personalize goals and companion behavior, process food and AI requests, create reminders and widgets, export or delete your record, respond to support, keep the service secure, and comply with law.

5. Consumer health data shared

Depending on the features you choose, TrueMe shares only the consumer health data reasonably needed with these categories of recipients:

  • cloud infrastructure: Supabase for account-scoped database, private media storage, authentication, and protected server functions;
  • AI processing: OpenAI for companion or food features you request;
  • platform services: Apple for HealthKit and other iOS features you authorize;
  • nutrition sources: FatSecret and USDA FoodData Central for food, barcode, serving, and nutrition results; and
  • restricted network infrastructure: Hetzner for the FatSecret egress proxy.

TrueMe may also disclose information when required by law or necessary to protect rights, safety, service integrity, or prevent fraud. TrueMe does not sell consumer health data.

6. Consent and additional uses

TrueMe will not collect, use, or share additional categories of consumer health data—or use disclosed categories for additional purposes—where applicable law requires prior notice and affirmative consent, unless a legal exception applies.

7. Your consumer health data rights

Subject to applicable law, you may request confirmation of whether TrueMe collects, shares, or sells your consumer health data; access the data; obtain a list of recipients; withdraw consent; or have the data deleted. TrueMe does not sell consumer health data, and therefore does not request authorization for sale.

You can export or delete account data from TrueMe’s Account controls. You may also email privacy@trueme.io. We may verify your identity. If a request is denied, you may appeal by replying with “Privacy Appeal” in the subject line. We will explain the result and, where required, how to contact the appropriate regulator.

8. Security and deletion

TrueMe uses HTTPS, authenticated owner-scoped cloud rules, private media storage, server-held provider credentials, and request-integrity controls. Confirmed account deletion removes TrueMe-controlled account records and private media, subject to the limited operational, legal, provider, and backup exceptions described in the main Privacy Policy.

9. No geofencing around health facilities

TrueMe does not use geofences around healthcare facilities to identify, track, collect data from, or send messages to consumers about their consumer health data.

10. Contact

Consumer health privacy requests: privacy@trueme.io
Legal entity: Dongho Kang
Mailing address: 605 West 42nd Street, Apt. 36K, New York, NY 10036, United States