Consumer Health Data Privacy Policy

Effective date: July 11, 2026

This Consumer Health Data Privacy Policy describes how iM Bite collects, uses, and discloses consumer health data. It supplements the general iM Bite Privacy Policy.

1. Consumer health data we collect

Depending on the features you choose, iM Bite may collect or generate consumer health data relating to:

• Allergies and food sensitivities.
• Digestion, reflux, lactose, FODMAP, or similar concerns.
• Diabetes or blood-sugar-related preferences.
• Heart-health or cholesterol-related preferences.
• Pregnancy-related food checks.
• Kidney-condition or gout-related food checks.
• Weight or nutritional goals.
• Symptoms, conditions, sensitivities, or food-related concerns you enter.
• Foods, ingredients, nutrients, or additives you avoid for health-related reasons.
• Food searches, barcode scans, non-image results from on-device meal-photo analysis, saved foods, and food histories when they reveal or are used to infer health information.
• Personal suitability scores, warnings, recommendations, and other health-related inferences generated by the Service.

Dietary settings such as halal or kosher may be treated as sensitive information where they reveal or suggest religious beliefs, although they are not necessarily consumer health data in every jurisdiction.

2. Sources of consumer health data

We collect consumer health data from:

• Information you directly enter or select.
• Foods, ingredients, barcodes, and non-image labels or search terms generated by on-device photo analysis that you submit.
• Your interactions with the Service.
• Results and inferences generated when the Service applies your selected checks to food and nutrition information.
• A person who is legally authorized to manage a profile on your behalf.

We do not obtain medical records from healthcare providers, insurers, pharmacies, or government health systems.

3. Why we collect and use consumer health data

We collect and use consumer health data to:

• Provide the personalized checks you request.
• Generate food suitability scores, explanations, and warnings.
• Use non-image labels or search terms generated by on-device food or meal-photo analysis.
• Compare foods and suggest possible alternatives.
• Save and synchronize your selected checks and history.
• Respond to support and privacy requests.
• Maintain security, prevent abuse, and diagnose technical problems.
• Comply with applicable law.

We do not use consumer health data for advertising, behavioral profiling, data brokerage, insurance decisions, employment decisions, credit decisions, or unrelated marketing.

4. Consumer consent

Where required, we obtain affirmative consent before collecting consumer health data beyond what is necessary to provide a feature you directly request.

We obtain separate consent before sharing consumer health data with a third party where such consent is legally required.

You may withdraw consent through the Service, delete the relevant information or profile, delete your account, or contact us.

Withdrawing consent may disable personalized health-related features.

5. Consumer health data disclosures

We do not sell consumer health data.

We may disclose consumer health data to processors that act under our instructions and are necessary to operate the features you request.

Affiliates

We do not disclose consumer health data to affiliates for their independent advertising, marketing, profiling, or commercial purposes.

Categories of processors and third parties

Consumer health data may be processed by providers supporting:

• Secure cloud hosting and database storage.
• User authentication and account management.
• AI-assisted food explanations and analysis of non-image data.
• Security, error reporting, and technical diagnostics.
• Customer support.
• Subscription verification where limited health-related account information is not required or intentionally included.

Processors are contractually restricted from using consumer health data for their own advertising, data brokerage, or general-purpose AI model training.

We may also disclose information when required by law or reasonably necessary to protect users, investigate fraud or security incidents, or establish and defend legal claims.

6. Your consumer health data rights

Subject to applicable law, you may have the right to:

• Confirm whether we collect, use, or disclose your consumer health data.
• Access the consumer health data associated with you.
• Request a list of relevant third parties or categories of third parties with which it has been disclosed.
• Correct inaccurate information.
• Request deletion from active systems and, where required, archived and backup systems.
• Withdraw consent to collection or sharing.
• Appeal a refusal to act on your request.

You may exercise these rights through the account controls in the Service or by emailing [email protected] with the subject “Consumer Health Data Request.”

We may take reasonable steps to verify your identity before completing a request.

If we deny your request, you may appeal by replying to our decision and stating that you wish to appeal. We will review the appeal and provide a written response within the period required by applicable law.

7. Deletion

When you submit a valid deletion request, we will delete the applicable consumer health data from active systems unless retention is legally permitted or required.

Deletion from encrypted backups may take up to 90 days. During that period, backup information will not be restored to active use except where necessary for disaster recovery, security, or legal compliance.

8. Changes

We will not materially expand the categories of consumer health data we collect or the purposes for which we use it without providing notice and obtaining additional consent where required.

9. Contact

For consumer health data questions or requests, email [email protected].