Consumer Health Data Privacy Policy

Effective August 11, 2026

This policy applies specifically to consumer health data and is provided under Washington State's My Health My Data Act. It is separate from, and in addition to, our general Privacy Policy.

It applies to residents of Washington State, and to Nevada residents under NRS 603A.400–603A.550. Zapple is operated by Woodberry Holdings, Inc., a Delaware corporation.

Categories of consumer health data we collect

• Nutrition and diet information — meals you log, their ingredients, calories, and macronutrients; water intake; and the nutrition goals and targets you set
• Bodily measurements — body weight and height, where you provide them or allow us to read them from Apple Health
• Demographic information used for nutrition calculations — date of birth and biological sex
• Photographs of food that you capture or select for meal logging
• Health-related assessments we generate — estimated nutrition values and the meal quality grade we calculate from them

Where this data comes from

• Directly from you, when you log a meal, set a goal, or complete onboarding
• From Apple Health, only with your explicit permission and only for the fields listed in our Privacy Policy
• Generated by us, when we estimate nutrition from a photo or barcode you submit

Why we collect it

• To log and display your meals and nutrition history
• To estimate nutrition content from photos and barcodes you submit
• To calculate your goals, targets, and meal quality grades
• To write nutrition data to Apple Health, if you enable that
• To show your posts to the audience you have chosen

We do not use consumer health data for any purpose beyond operating the app for you.

Who we share it with

We share consumer health data only with processors — service providers who handle it on our instructions, under contract, and for no purpose of their own:

• Supabase — database and photo storage
• Render — application hosting
• OpenAI, L.L.C. — identifies the foods visible in meal photos you submit for AI analysis. Nutrition values are calculated by Zapple from its own database, not by OpenAI. OpenAI does not train its models on this data.

We do not share consumer health data with any third party for that party's own purposes, and we do not share it with affiliates, advertisers, analytics companies, or data brokers.

Other Zapple users can see meals you choose to post, according to your account's privacy setting. That is sharing you control and can change or undo at any time.

Your rights

If you are a Washington or Nevada resident, you have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access that data, including a list of all third parties with whom we have shared it
• Withdraw consent to our collection and sharing of your consumer health data
• Delete your consumer health data
• Appeal if we decline a request

How to exercise them

Email [email protected] with the subject line "Consumer Health Data Request." Tell us which right you are exercising and the email address on your Zapple account.

We will respond within 45 days, and may extend once by another 45 days where reasonably necessary, in which case we will tell you why within the first 45.

You can also delete all of your data yourself, at any time, using Delete Account in the app's Settings.

Appeals

If we decline your request, we will explain why and how to appeal. To appeal, reply to our decision or email [email protected] with the subject line "Appeal." We will respond within 45 days.

If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, or the Nevada Attorney General at ag.nv.gov.

Changes

If we materially change this policy, we will update the effective date and notify you in the app before the change takes effect. We will not collect, use, or share consumer health data for a materially new purpose without first obtaining your consent.

Contact

Woodberry Holdings, Inc.
Email: [email protected]