Privacy Policy: Healthfoodness App

Plain-language summary

This summary is a reading guide. The details and commitments are in the full text.

• Healthfoodness is only for people 18 or older.
• You do not need your legal name: you can use a nickname or initials.
• What you record (food, sleep, symptoms, labs, body measurements, journal) may be health information. We use it to give you the features you request.
• We do not sell your data and we do not use it for targeted advertising based on your health.
• AI features send technology providers only what is needed to respond to you, under conditions that prohibit them from using your data to train their models.
• Taking part in research is optional and is requested separately.
• You can view, correct, export and delete your data, and delete your account.
• Healthfoodness is an educational tool: it does not diagnose and does not replace your health professional.
• For any privacy question, write to [email protected] .

1. Data controller

The controller of your personal data is Functional Answers LLC, 340 Minorca Ave. #10, Coral Gables, Florida, United States. For privacy questions or to exercise your rights: [email protected] .

2. Scope, minimum age and other documents

This Policy applies to the Healthfoodness app, the functional-answers.com website and the digital services that link to it. It is supplemented by our Terms of Use.

It does not govern independent professional services. Private consultations and individual professional services provided by Mariana Meza are delivered exclusively through Healthfoodness LLC. Those services are independent from ordinary use of the app and are governed by the privacy notices, consents, professional documentation and, where applicable, the Notice of Privacy Practices of Healthfoodness LLC.

Link to Healthfoodness LLC. The app may show a link to the Healthfoodness LLC site for those who want to request a private consultation. Healthfoodness LLC is independent from Functional Answers LLC and has its own privacy notice. Using the link is your decision, and we do not send your app data to that company without your express and specific authorization. Mariana Meza is the creator of the Functional Answers™ method and the author of educational content; she does not access users’ individual data for that reason.

Minimum age. You must be at least 18 to use the app, regardless of your country of residence. When you create your account we ask for your date of birth before collecting other health data, and you will not be able to continue if it shows you are under 18. If we determine or have reasonable grounds to believe that an account belongs to a person under 18, we may suspend or close it and delete the associated information, except what we must keep temporarily because of a legal or security obligation. We do not knowingly collect information from minors. If you believe a minor has given us data, write to us at [email protected] .

Other people’s data. Healthfoodness is designed for you to record your own data. Do not upload personal or health information of another person (and in particular of anyone under 18) without legal authorization to do so.

3. Personal data we collect

Depending on the features you use, we may collect:

• Account data: email address, date of birth, sex, country of residence and a profile name or identifier of your choice. You do not need your legal name; you can use a nickname, initials or another name.
• Sign-in with third parties: if you sign in with Google or Apple, we receive the account identifier, your email (or the relay email Apple lets you use) and, if you authorize it, your name.
• Profile data: health goals, preferences, demographic information and other information you decide to include.
• Health and wellness information: current symptoms, relevant history, conditions or diagnoses you say you received from a health professional, and medications, supplements and treatments you say you use. Healthfoodness does not generate or confirm medical diagnoses.
• Hormonal and reproductive health (only if you choose to record it): menstrual cycle, pregnancy, breastfeeding, contraception, menopause, hormone therapy and related data.
• Health questionnaires: answers about health, symptoms, digestion, sleep, stress, mood, habits and resilience.
• Nutrition information: foods and drinks, portions, preferences, goals, restrictions, allergies, intolerances and eating habits.
• Lab results: values, units, dates, laboratory name, the reference ranges shown on your report, the original file (PDF or image) you upload, and the text or values extracted from it.
• Body measurements and body composition: weight, height, circumferences, fat mass, muscle mass, visceral fat, body water and other metrics from scales, bioimpedance, DEXA or other equipment or methods, together with the date and method of measurement.
• Lifestyle: sleep, hydration, physical activity, exercise, stress and other daily habits.
• Digestive information: bowel habits, stool characteristics and digestive symptoms.
• Photos and files: photos of food, personal photos, images, documents and other files you upload or capture.
• Journal and written content: reflections, goals, personal experiences, answers to writing exercises and notes.
• Artificial intelligence interactions: questions, messages, photos, voice, transcripts and other context you provide when using AI features.
• Data from connected devices and services: health, activity, sleep or other categories you authorize from compatible platforms.
• Derived data: scores, trends, summaries, alerts and recommendations the app generates from what you record. We treat it with the same protections as the data it comes from.
• Location: your country and, if you choose to provide it for environmental features, your city or postal code. We do not collect precise GPS location unless you expressly authorize it.
• Technical and usage data: IP address, device type, operating system, app version, technical identifiers, error logs, screens visited and features used.
• Purchases and subscriptions: subscription status, product, transaction identifiers and other limited information that Apple App Store or Google Play gives us.
• Communications: messages you send to support and your communication preferences.

Minimization. We try to collect only what is needed for the features you use. Some of this information may be considered health information, sensitive personal information or consumer health data under applicable laws. When you record a diagnosis, it is information that you say you received from a health professional.

4. How we collect your data

• Directly from you: when you create your account, complete your profile, answer questionnaires or record foods, habits, symptoms, medications, measurements, labs or other information.
• From content you choose to provide: photos, camera, voice, journal, documents and files.
• From services or devices you connect: when you authorize receiving data from health, activity, sleep or wellness platforms.
• From your Google or Apple sign-in.
• From your use of the Services: technical and usage information needed to operate, protect and improve the service.
• From Apple App Store and Google Play: limited information about purchases and subscriptions.
• From service providers: technical information needed for authentication, security, support, fraud prevention, error diagnosis and platform operation.
• Generated by the app: derived data described in section 3.

5. What we use your data for and legal bases

Primary purposes (necessary for the service you request):

• Create, maintain and protect your account.
• Let you record habits, foods, labs, body measurements and symptoms, and track your progress.
• Show trends, reports, plans and educational guides based on the information you provide.
• Run questionnaires, calculations and personalized tools.
• Offer artificial intelligence features and food logging by text, voice or image.
• Process subscriptions and purchases.
• Provide support, security, fraud prevention and problem resolution.
• Comply with legal obligations and respond to valid requests from authorities.

Secondary or optional purposes:

• Send you communications about news, education or promotions.
• Analyze product usage in aggregate or de-identified form to improve it (section 16).
• Take part in research, only if you agree separately (section 11).

You can object to secondary purposes at any time by turning off communications in the app, using the unsubscribe link, or writing to [email protected] . Objecting does not affect the primary purposes.

Legal bases (European Economic Area, United Kingdom and other jurisdictions that require them):

• Performance of the service you request: account, features, subscriptions and support.
• Explicit consent: to process health data and other special categories, for AI features that process that data, photos and voice, connecting devices, marketing communications that require it, and research. You can withdraw it at any time without affecting earlier processing; some features may then stop being available.
• Legal obligations: for example, tax records and responding to authorities.
• Legitimate interests: security, fraud prevention and technical analytics that do not use health content, provided your rights do not override them.

Automated decisions. We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects on you. The app’s AI responses, scores and alerts are educational.

6. Artificial intelligence and technology providers

Functional Answers LLC uses language models and other machine learning technologies for features such as educational chat, food logging by voice or image, reading lab documents, organizing the information you provide, and guidance on nutrition, habits and well-being. Features that use AI are identified as such in the app.

• What is processed: depending on the feature, foods, hydration, sleep, exercise, symptoms you reported, questionnaire answers, lab values, photos, voice or transcripts, and the context you choose to provide or authorize for that feature. We send providers only what is necessary for that feature and try not to send unnecessary direct identifiers, such as your email.
• External providers: they process the information on our behalf to return a response or result. We require them to process the data only to provide the service to us and not to use it to train or improve their general models.
• Retention by providers: this may vary by service. We select settings and agreements that limit retention to what is strictly necessary to operate, maintain security and detect abuse.
• History: we may keep your AI interactions in your account for continuity of the experience, support and operation of the feature. You can delete them under section 18.
• Our use: we do not use your identifiable health data, journals, photos, lab results or private conversations to train general AI models, whether our own or third parties’.
• Limitations: AI responses may contain errors, are for educational and informational purposes, and are not a diagnosis or prescription, nor do they replace the judgment of a health professional.
• What to avoid: do not include ID numbers, financial information, passwords, or personal or health information of another person without authorization.

7. Labs, body composition and measurements

• How you enter data: you can type values manually or upload or photograph a report. If you upload a file, the app may use automatic extraction (text recognition or AI) to read the values. Extraction can make mistakes: review the values and compare them with your original report.
• What we keep: the values, dates, the report’s reference ranges and the original file, while your account is active or until you delete them.
• Reference ranges: we use your age and sex, together with the ranges on the report where they exist, to show appropriate reference ranges.
• History: we keep your results and measurements over time to show trends.
• Measurement devices and methods: if you connect scales, bioimpedance equipment or other devices, we receive only the data you authorize.
• Limited use: this data is used for the features you request. It is not sold, is not used for targeted advertising, and is shared only in the cases in section 14.

8. Photos, voice, journal and personal content

Some features let you upload photos, use the camera or microphone, write reflections or add documents. This content may reveal sensitive information about your health, habits, relationships or emotional state.

• We use it to provide the requested feature, keep it in your account where appropriate, let you review it and give you support.
• We process voice to transcribe it and keep it only as long as needed for that, unless the feature requires saving it. We do not use your voice, face or other biometric characteristics to identify you.
• Do not upload photos, documents, audio or text containing personal or health information of another person without authorization.

9. Connected services and devices

If you choose to connect Apple Health/HealthKit, Health Connect, Garmin, Oura, Fitbit or other compatible services, we will receive only the types of data you authorize.

• We use this data for the features you request.
• We do not sell it, do not use it for advertising, and do not share it with data brokers.
• If you turn on an AI feature that uses this data, it will be processed by our providers only to provide you that feature, under the conditions in section 6.
• You can withdraw permissions at any time from the service or device. We comply with the Apple and Google policies that apply to this data.
• The availability of integrations may vary by device, operating system, country and app version.

10. Payments and subscriptions

Subscriptions are purchased through the Apple App Store and Google Play, which process payment under their own policies. We receive the information needed to verify and manage the subscription (status, product, date and transaction identifiers). We do not receive your full card details. Renewal, cancellation and certain refunds are handled in the store where you purchased. See also our Terms of Use.

11. Research and publications

Healthfoodness is also used in clinical and academic research projects. However:

• Using the app does not make you a participant. Your data is not treated as research data merely because you use the app.
• Participation is optional and separate. If we invite you to a study, you will receive a specific informed consent form that will say what data will be used, how it will be protected, who will have access, and the corresponding ethics review (IRB). That consent prevails over this Policy with respect to the research.
• You can withdraw. If you withdraw your consent, we will stop using your data in new analyses. Results already analyzed or published in aggregate form cannot be withdrawn.
• Publications. Research results are published in aggregate or de-identified form and under the approved protocol. We will not publish information that identifies you.
• Without research consent, we do not use individual-level data (not even de-identified) for scientific publications. We may only use aggregate product statistics, with measures to prevent small groups from being identified.

12. Marketing, advertising and analytics

• We may send you communications about Healthfoodness, new features, education or promotions where the law allows and, if required, with your consent. You can unsubscribe at any time. Communications needed for security, support, billing or the operation of your account may continue.
• We do not sell consumer health data or personal data.
• We do not use diagnoses, medications, symptoms, labs, journal, reproductive health data, HealthKit or Health Connect data or other health information for targeted advertising, advertising profiling or segmentation.
• In the app we do not use advertising or ad-attribution SDKs that receive health data or content you record.
• To operate and improve the service we may use analytics and error-reporting tools that receive limited technical and usage data, not the content of your health records.

13. Cookies and similar technologies

Our website and our providers may use cookies, device identifiers, local storage and similar technologies:

• Essential: operation, security, authentication, sessions and fraud prevention.
• Functionality: remembering language and display preferences.
• Performance and analytics: understanding how the site works, identifying errors and measuring performance.
• Marketing: only where applicable and with the required consent, to measure the effectiveness of promotional communications on the website. No health data is used.

Where the law requires consent for non-essential technologies, we will give you options to accept, reject or manage your preferences. On the website we treat the Global Privacy Control signal as a request to opt out of non-essential marketing and analytics technologies. Our site does not respond to other “Do Not Track” signals because there is not yet a common standard for interpreting them.

14. How we share your data

We do not sell your personal data or consumer health data, and we do not share it for cross-context behavioral advertising. We share information only when necessary to provide the Services, fulfill a request from you, protect the app or comply with legal obligations. Recipients may be:

• Hosting, storage and database providers.
• Artificial intelligence providers, for the features you request.
• Authentication, security, monitoring, fraud prevention and technical diagnostics services.
• Notification, messaging and support providers.
• Analytics and performance providers, with appropriate restrictions.
• Apple and Google, in connection with purchases, subscriptions and distribution of the app.
• Authorities, courts or other entities when a valid legal obligation requires it.
• Professional advisers subject to confidentiality.
• A successor entity in a merger, acquisition, reorganization, financing, sale of assets or other corporate transaction, with the applicable legal protections.

We contractually require providers to process the information only for the services contracted and under security and confidentiality obligations. We do not share app data with Healthfoodness LLC unless you expressly and specifically authorize it.

15. Information you choose to share

If a feature lets you export, download, send or share information (for example, a PDF report for your health professional), you decide what to share and with whom. Once information leaves the app through your action, its use by the recipient is outside our control. Review the content and the recipient before sharing.

16. Aggregated or de-identified data

We may use aggregated or de-identified information to analyze trends, improve the service, measure how it performs, strengthen security and develop new features. When we treat information as de-identified, we apply reasonable measures to prevent re-identification, we do not attempt to link it again to a person (except where the law allows it to verify de-identification processes, security or compliance), and we require those who receive it not to attempt to re-identify it.

Individual-level de-identified data is not used for scientific publications without your research consent (section 11).

17. International transfers

Functional Answers LLC operates from the United States and its providers may process data in the United States or other countries, so your information may be transferred outside your country of residence. Where the law requires it, we use recognized mechanisms, such as contractual agreements, supplementary measures or Standard Contractual Clauses (for transfers subject to the GDPR or UK rules).

For users in Mexico, we process data under applicable Mexican law, including ARCO rights.

18. Your choices and controls

Depending on the feature and your device, you can:

• View and update your profile information, and use a nickname instead of your legal name.
• View, correct and delete records (foods, labs and original files, body measurements, symptoms, journal, AI history).
• Export your information or request it by writing to us.
• Connect or disconnect health, activity, sleep or wellness services.
• Change camera, microphone, photo and notification permissions from your device.
• Manage or withdraw your consents (for example, AI, device connection or research) and your communication preferences.
• Manage non-essential cookies on the website.
• Request access to, correction of or deletion of your information, and deletion of your account.

When you update information, earlier copies may temporarily remain in backups, technical logs or security archives until they are deleted under our retention cycles.

19. Retention and deletion

How to delete your account and data:

• From your account settings in the app (delete account option).
• With the account deletion page available at functional-answers.com.
• By writing from your account email to [email protected] .

If you have an active subscription, cancel it first in the Apple App Store or Google Play: deleting your account does not cancel the subscription. The laws of Washington and Nevada set specific rules for deleting consumer health data, described in Annex A.

20. HIPAA and independent professional services

Healthfoodness is primarily a consumer health and wellness app. Direct use of it does not create a professional relationship with Mariana Meza or Healthfoodness LLC and does not, by itself, mean that Functional Answers LLC is a HIPAA covered entity.

Private consultations and individual professional services by Mariana Meza are provided exclusively through Healthfoodness LLC. When those services are subject to HIPAA, the information created, received, maintained or used in the consultation will be governed by HIPAA and by the Notice of Privacy Practices, consents, authorizations and policies of Healthfoodness LLC.

Using the app does not bring the records of a private consultation into the app, and app data does not automatically pass into the professional record. Any transfer between the two contexts requires your authorization or another basis permitted by law.

Functional Answers LLC does not receive or process information from the clinical records of Healthfoodness LLC, and Healthfoodness LLC does not receive app data, unless you expressly and specifically authorize it. If protected health information is transferred between the two companies in the future, it will be done only in accordance with HIPAA and the applicable agreements.

21. Your privacy rights and how to exercise them

Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to the processing of your data, to withdraw your consent, and to obtain information about the processing.

European Union / EEA and United Kingdom: access, rectification, erasure, restriction, objection, portability, withdrawal of consent without affecting earlier processing, rights relating to automated decisions, and the right to lodge a complaint with the competent data protection authority.

Mexico: Access, Rectification, Cancellation and Opposition (ARCO) rights, revocation of consent and limitation of the use or disclosure of your data, including sensitive personal data, which we process only with your express consent. You may submit your request under the procedure in this section and go to the competent authority in Mexico if you believe your rights were not addressed.

Brazil, Canada, Colombia, Argentina, Chile and other countries with a data protection law: you have the rights that law gives you, including access, correction, deletion, objection and portability where applicable, and you may exercise them by writing to [email protected] . You may also file a complaint with the data protection authority in your country.

Other jurisdictions: we will honor the rights required by local law.

How to exercise your rights: write from the email associated with your account to [email protected] (or use the options in the app). We may ask you for reasonable information to verify your identity. An authorized agent may submit the request with your written authorization. We will not discriminate against you for exercising your rights.

Deadlines: we will respond within 30 days. If the law allows and we need more time, we will tell you the reasons, without exceeding the legal deadlines. Handling your request is free, except for manifestly unfounded or excessive requests.

If we deny your request, we will explain why and, where the law provides, you may appeal under section 22 and Annex A.

22. Rights in the United States

California. California residents may have rights under CalOPPA and, where applicable, under the CCPA/CPRA: to know the categories and sources of information collected and the purposes; to access, correct and delete; to know the categories of third parties to whom information is disclosed; and not to be discriminated against for exercising their rights. In the last 12 months we have collected the categories described in section 3 (identifiers, health information, internet and activity data, derived data, commercial information and content you provide) and have disclosed them, for operational purposes, to the categories of recipients in section 14. We do not sell or share personal information for cross-context behavioral advertising. We use sensitive personal information only to provide the Services requested and for purposes permitted by law. Retention periods are in section 19.

Washington and Nevada. Residents of Washington (My Health My Data Act) and Nevada have specific rights over consumer health data, described in Annex A.

Other states. If you live in a state with a comprehensive privacy law or a consumer health data law (for example, Connecticut, Colorado, Virginia and others), you may have the right to access, correct, delete and port your data and to opt out of the sale of data, targeted advertising and profiling; we do not carry out these activities with your health data. We process sensitive data only with your consent.

Appeals. If we deny your request, you can appeal by writing to [email protected] with the subject “Appeal.” We will respond in writing within 60 days, explaining the outcome. If it is not resolved, you can go to the Attorney General of your state.

23. Security and breach notification

We apply reasonable administrative, technical and organizational measures to protect the confidentiality, integrity and availability of your information, including encryption in transit and at rest, access control and logging of security events. No system offers absolute security. If a breach occurs, we will investigate it and make the notifications required by applicable laws, including state breach notification laws and, where applicable, the U.S. Federal Trade Commission’s Health Breach Notification Rule. Protect your account with a strong password and do not share your credentials.

24. Changes to this Policy

We may update this Policy to reflect changes in our services, practices or legal requirements. We will publish the updated version and change the “Last updated” date. If the changes are substantial, we will notify you in the app or by email at least 30 days in advance. Before using your sensitive data for a new purpose, we will ask for your consent where the law requires it.

Annex A. Consumer Health Data Notice (Washington, Nevada and other states)

This Annex supplements the Policy and applies to consumers protected by the Washington My Health My Data Act, Nevada laws on consumer health data and other equivalent laws. It will also be published as a separate, visible link on our home page.

1. Who collects it. Functional Answers LLC, 340 Minorca Ave. #10, Coral Gables, Florida, U.S.; [email protected] .

2. Categories of consumer health data we collect. Health and wellness information, hormonal and reproductive health (if you record it), health questionnaires, nutrition, labs, body measurements and composition, lifestyle, digestive information, photos and files, journal, AI interactions, data from connected devices and derived data, described in section 3.

3. Sources. You directly, the devices or services you connect with your authorization, and the app itself when it generates derived data.

4. Purposes. Providing the features you request, maintaining the security of the service, complying with legal obligations and, only with your separate consent, the additional purposes we tell you about (for example, research).

5. Consents. We ask for your consent to collect consumer health data and, separately, to share it where the law requires. You can withdraw it at any time by writing to us or from the app settings.

6. Who we share it with.

We do not sell consumer health data. We do not use geofencing around health care facilities.

7. Your rights. To confirm whether we process your consumer health data and access it, including a list of the third parties and affiliates with whom we have shared it; to withdraw your consent; and to request its deletion. If we delete your data, we will notify our providers and affiliates so they delete it too, and we will delete it from archive or backup systems when they are restored, accessed or their retention cycle expires.

8. How to exercise them. Write to [email protected] . We will respond within 45 days; we may extend the period by another 45 days if necessary, telling you the reason.

9. Appeal. If we deny your request, you can appeal by writing to [email protected] with the subject “Appeal.” We will respond within 45 days. If it is not resolved, you can file a complaint with the Attorney General of Washington or Nevada, as applicable.

10. Date. Last updated: October 19, 2026.