Consumer Health Data Privacy Policy
What this policy is
- This is the Consumer Health Data Privacy Policy of Armat Health and Wellness LLC (“Armat,” “we,” “us”). It gives the disclosures required by Washington’s My Health My Data Act (Revised Code of Washington chapter 19.373), Nevada’s consumer health data law (Senate Bill 370, Nevada Revised Statutes chapter 603A), and the consumer health data provisions of the Connecticut Data Privacy Act.
- It covers “consumer health data” we collect through the Armat app and armatfit.com. It is separate from, and in addition to, our general Privacy Policy (armatfit.com/privacy) and Terms of Use (armatfit.com/terms).
- We apply the rights and protections in this policy to all users in the United States, not only residents of those states.
- In short: we collect health information only to run the features you choose, we ask your permission first, we never sell it, and you can see it, delete it, or take your permission back at any time.
1. Who we are
Armat Health and Wellness LLC is a California limited liability company in Los Angeles, California. Armat is a habit, food, and water tracking app for general wellness. We are not a healthcare provider and are not affiliated with any doctor, practitioner, or medical organization. We have no corporate affiliates.
2. Categories of consumer health data we collect, and why
In plain English: This table lists the kinds of health information Armat holds and what each is used for. We use each category only for the purpose shown.
| Category | Examples | Purpose and use |
|---|---|---|
| Body measurements and goals | Weight and weigh-ins, height, date of birth, sex, activity level, and the weight or nutrition goal you choose. | Work out your calorie and nutrition targets, show your trends, and confirm you are 18 or older. |
| Food, nutrition, and water | Foods you log with the calories and nutrition recorded at that time; water; recipes you save, generate, or import; meal plans; meal photos. | Show your daily totals and progress; build recipes and meal plans for you; identify foods in a photo (the photo is read once and not stored). |
| Dietary needs and allergies | Your diet and any food allergies you enter. | Shape the recipes and meal plans we suggest. |
| Physical activity | Step count (iPhone only, only if you keep a steps habit and allow motion access) and activity habits you track. | Show your step progress and habit streaks. |
| Habits and notes you write | Habit names and notes. These may reveal health information if you write it. | Provide habit tracking and show your entries back to you. |
| Medication and supplements (Support tab, optional) | GLP-1 medication schedule (the medication, the dose you type, the day and time), a dose log with injection site, and a supplement checklist. | Record what you enter and send the reminders you set. We never suggest, check, or change any medication, dose, or supplement. |
| Daily check-in (Support tab, optional) | How you felt, your energy, stomach, appetite, and sleep on a 1 to 5 scale, and any note you add. | Record your entries and show them back to you. |
| Figures calculated from the above | BMI, calorie targets, daily scores, and growth stage. | Show you your own figures. They are general wellness information and are not used for advertising. |
We use consumer health data only to provide the features you request and to operate, secure, and support Armat. We do not sell it, use it for advertising or marketing profiles, or use it to train AI models.
3. Sources of consumer health data
- You: everything you enter or log, and the permissions you give.
- Your device: your time zone and, with your permission, your iPhone step count.
- Our own calculations: figures worked out from what you entered, as described in the last row of the table above.
We do not receive consumer health data from doctors, pharmacies, insurers, data brokers, or advertisers.
4. Categories of consumer health data we share, and with whom
In plain English: We share health information only with the companies needed to run the feature you are using, and with other people only if you tell us to.
Affiliates: we have none, so we share consumer health data with no affiliates. Sale: we do not sell consumer health data. Tracking: no third party collects consumer health data from your use of Armat over time and across other websites or online services.
| Recipient (and type) | Consumer health data shared | Why |
|---|---|---|
| Supabase (cloud database and sign-in provider acting for us) | All the categories in Section 2, stored with your account. | Store and secure your data and let you sign in. |
| Anthropic (AI provider acting for us) | Only when you use an AI feature, and after you give permission: a meal photo; a meal description; your diet, allergies, and targets (recipe builder); your diet, allergies, targets, names of foods and recipes you logged, and, if you turn on smaller-meals planning, that setting and your dose weekday (meal planner); or a recipe web address and page text. Never your medication name, dose, supplements, or check-ins, and never your name, email, or account ID. | Run the AI feature you asked for. |
| USDA FoodData Central (public food database) | The words you type into food search. | Look up foods. |
| Open Food Facts (public food database) | The barcode you scan. | Look up products. |
| Members of your garden (other users you choose to join) | The progress statistics you choose to share, and your emoji cheers. | Share progress with people you chose, at your direction. |
| Authorities, if the law requires | Only what a valid legal requirement compels. | Comply with law. |
Our other providers (for sign-in emails, payments and subscriptions, app updates, website hosting, and email) do not receive your consumer health data.
5. Your rights, and how to use them
In plain English: You can ask what we have, get a copy and a list of who got it, delete it, or withdraw your consent. We answer within 45 days. If you disagree with our answer, you can appeal.
You have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data.
- Access your consumer health data, including a list of all third parties and affiliates with whom we have shared or sold it, with an active email address or other online way to contact each of them. We will include these contacts in our response.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data. We will delete it from our records and tell our service providers and the third parties we shared it with to delete it too. Copies in backup or archive systems are deleted when those systems are restored to active use or next accessed, and we will not restore deleted data to active use. You can also delete entries, or your whole account, yourself in the app.
How to make a request. Email support@armatfit.com from the address on your account with the subject line “Consumer Health Data Request,” or use Privacy settings in the app. We may ask for a little more information to confirm it is you.
Timing. We will respond without undue delay and within 45 days of receiving your request. If we reasonably need more time, we may extend that once by 45 more days and will tell you why. There is no charge.
Appeal. If we decline your request, we will tell you why and how to appeal. To appeal, reply to our response or email support@armatfit.com with the subject line “Consumer Health Data Appeal.” We will respond in writing within 45 days with our decision and the reasons. If we deny your appeal, you may contact the Washington Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov), or the attorney general of your state, to submit a complaint.
6. Consent
Where the law requires it, we ask for your clear, opt-in consent in the app before we collect consumer health data, and we ask for a separate consent before we share it, for example before sending a meal photo to our AI provider or showing statistics to garden members. When we ask, we tell you which categories of data, for what purpose, with which kinds of recipients, and how to withdraw. Consent is never assumed from silence, a pre-ticked box, or acceptance of our Terms of Use. You can withdraw consent at any time in Privacy settings in the app or by emailing us. We will not collect, use, or share additional categories of consumer health data, or use it for additional purposes, without first updating this policy and getting your consent. We do not sell consumer health data, and we would need your separate signed authorization to do so.
7. Protecting and limiting access to consumer health data
We allow our personnel and service providers to access consumer health data only where reasonably necessary to provide the feature you requested or to keep Armat secure, and we require service providers to process it only on our instructions. We protect it with administrative, technical, and physical safeguards that are reasonable for its nature and volume, including encryption in transit and database rules that let a signed-in request read only that user’s own records.
8. Geofencing
We do not collect your location and do not use any geofence around a place that provides in-person health care to identify or track you, send you messages, or advertise to you.
9. Changes to this policy
If we change this policy, we will update the date above and tell you in the app or by email before the change takes effect. A change that would let us collect new categories of consumer health data, use it for a new purpose, or share it with new kinds of recipients will not apply to you until we get your consent.
10. Contact
Armat Health and Wellness LLC, Los Angeles, California
Email: support@armatfit.com
Website: armatfit.com