Consumer Health Data Privacy Policy
Effective July 24, 2026
This policy explains how NUO handles consumer health data for every user, including rights provided by the Washington My Health My Data Act.
1. Consumer health data we collect
NUO collects only the health-adjacent information needed for features you choose: • Derived wellness and sleep outcomes: a commitment's title and type, whether an outcome was met, missed, or close, and derived streak, slip, or at-risk state. The underlying bedtime, duration, step count, threshold, and raw HealthKit samples stay on your device. • Health information you choose to put in a Future You message or attached image. • Accepted memory facts that you explicitly approve and that may concern sleep, energy, mood, or well-being. • A shared commitment title and derived status when you choose to share it with an Alarm Pal or Circle buddy. NUO does not collect raw HealthKit samples, raw pedometer or motion readings, biometric or genetic data, precise location, or reproductive and sexual health data as product categories.
2. Sources
Consumer health data comes directly from information you choose to enter, attach, accept, sync, or share, or from a derived result computed on your iPhone for a commitment you chose. We do not buy consumer health data or obtain it from data brokers, advertisers, social networks, or unrelated third parties.
3. Why we collect and use it
We use consumer health data to sync the commitments, outcomes, conversations, and memories you request; generate a Future You response to a message you send; operate shared-accountability features you opt into; send notifications you enable; secure the Service; prevent abuse and duplicate requests; and comply with law. We do not sell consumer health data or use it for advertising. We will not add another collection or use purpose without describing it and obtaining affirmative consent where required.
4. Processors and sharing
Stytch provides account authentication. Vercel hosts the API and routes Future You requests. Supabase stores synced data and attached media. Anthropic generates a response to the Future You content you deliberately send. Apple delivers push notifications. These processors act to provide their service role; they are not given consumer health data for their own advertising. NUO currently has no affiliates and does not sell consumer health data. When you explicitly share a commitment, the specific person you selected can see its title and derived status. That user-directed sharing stops when you unshare or remove the relationship.
5. Your rights
Every user may ask NUO to: • confirm whether we collect, share, or sell consumer health data; • access the consumer health data associated with the account; • provide the list of third parties or affiliates with whom it was shared or sold; • withdraw consent to future collection or sharing; and • delete consumer health data from NUO and the processors that store it, subject to the normal encrypted-backup expiry cycle. Today, NUO's list of third parties or affiliates receiving consumer health data for their own purposes is none.
6. How to exercise a right or appeal
Use Settings → Privacy in the app, or email team@nu-o.com from the address associated with your account. We verify requests through the authenticated account or control of the account address. We will respond within 45 days, with one 45-day extension when reasonably necessary and permitted. If we decline a request, reply to the decision or email team@nu-o.com with the subject “Appeal.” We will explain the result. Washington residents may also contact the Washington State Attorney General at atg.wa.gov/file-complaint.
7. Contact and changes
Privacy and rights contact: team@nu-o.com. We will post changes with a new effective date. A new collection, use, sale, or sharing purpose will not begin without the notice and consent required by law.