Consumer Health Data Privacy Notice

Scope

This Consumer Health Data Privacy Notice supplements Capy’s Privacy Policy. It explains how Capy handles information that may identify or relate to a person’s health, treatment routine, weight, steps, or active energy.

Categories and sources

• Information you enter into Capy, which remains on your device.
• Weight, steps, and active energy read from Apple HealthKit or Android Health Connect only after you grant permission.
• Information contained in a local export that you choose to create.
• A support communication if you choose to include health or treatment information in your email.
• Website activity such as IP address, user agent, request time, requested Capy page, and security information. Because Capy is health-related, this activity may permit an inference about health interests.

Why Capy uses it

Capy uses consumer health data on your device to provide the tracking, reminder, summary, and export features you request. Health-platform access is read-only and limited to weight, steps, and active energy. Support communications are used to respond to you, and technical website activity is used to deliver, secure, and troubleshoot the site.

Disclosures

Capy does not sell consumer health data, share it with affiliates, or disclose it for advertising or behavioral tracking. RevenueCat receives an anonymous app user identifier plus limited purchase and device information, not your Capy health entries. Cloudflare processes the website technical data described above. Google processes support email content you choose to send. You disclose an export only when you direct your device to save or share it.

Processors and categories of recipients

Capy has no advertising partners and does not provide app health entries to data brokers, employers or insurers. Categories of recipients are: Apple Health or Health Connect as sources only when you grant read access; Apple or Google for store purchases; RevenueCat for limited subscription information; Cloudflare for public-website delivery and security; Google for support email; and any recipient you select when sharing an export. These processors do not receive the local Capy health log from Capy unless you deliberately include information in an email or shared export.

Sale, authorization, and consent

Capy does not sell consumer health data. Because there is no sale, there is no sale authorization to revoke. You can withdraw Apple Health or Health Connect permission in device settings and stop future reads. You control any disclosure made by exporting or sharing a file from your device.

Access, export, deletion, and withdrawal

• Review your information inside Capy and create a local PDF or CSV export when available in the app.
• Withdraw HealthKit or Health Connect permission in your device settings; withdrawal prevents future reads but does not automatically erase information already stored locally in Capy.
• On iPhone, use Capy Settings → Privacy → Delete Data. On Android, use Capy Settings → Delete all my data. Then delete saved exports separately.
• Washington and Nevada consumers may ask us to confirm whether we collect, share, or sell their consumer health data; access that data and a list of recipients; withdraw consent or ask us to cease collection or sharing; request correction or deletion; and appeal a refusal. Email milana.app.support@gmail.com.
• We authenticate a request using only information reasonably necessary for the request, may ask for limited verification, and respond within the period required by applicable law. If we deny a request, our response will explain how to appeal.

Questions or appeals

Contact Blue Nova Tech S. de R.L. de C.V. at milana.app.support@gmail.com. If you disagree with a response to a privacy request, reply with “Appeal” in the subject line and explain why you would like the response reviewed.

Changes to this notice

This notice is effective 3 Sep 2026. If practices materially change, this page and its effective date will be updated before the new practice applies where required, and we will provide any additional notice or consent process required by law.