Health Data Privacy Policy

Hestia is a meal planning and grocery shopping app. Some of the data we handle relates to your health and wellness, including what you eat, your dietary needs, and body or activity information you choose to enter directly. Hestia's current iOS release does not connect to, read from, or write to Apple Health (HealthKit).

1. What Health Data We Collect

We organize health data into three categories based on where it comes from.

A. Health Information You Provide

You may choose to enter:

• Body measurements, such as height and weight
• Activity level and nutrition goals, to personalize energy and protein targets
• Dietary needs and restrictions, including allergies or medically relevant diets you disclose
• Custom calorie targets for household members

This information is optional unless a specific planning choice requires it. When omitted, Hestia uses general planning defaults.

B. Data Derived from App Usage

As you use Hestia, we derive health-related information from your activity:

• Dietary patterns, what meals you plan and consume
• Meal plan compliance rates, how closely you follow your plan
• Grocery purchase patterns, what foods you buy
• Healthy Eating Index (HEI-2020) scores, a nutrition quality score computed from your consumption data
• Pantry inventory, foods you have on hand

We also derive health-related insights using algorithms, including your Healthy Eating Index (HEI-2020) score, dietary pattern analysis, and meal plan compliance rates. Under Washington law, these algorithmically derived insights are considered consumer health data and are subject to all protections in this policy.

C. Health Data Sent to Hestia Servers

Profile, meal, and nutrition data syncs to Hestia's servers. This includes health-related profile information you enter, meals and recipes you plan, consumption records you create, meal plans, and nutrition history needed for account sync, cross-device access, and personalized planning.

The current iOS release sends no Apple Health data because HealthKit integration is disabled. Optional health-research snapshots are also disabled in this release.

2. Why We Collect Health Data

We do not collect health data for any purpose not listed above. We do not use health data for advertising, behavioral targeting, or profiling.

3. Who We Share Health Data With

No third-party sharing without consent

Your health data is not shared with any third party unless you explicitly opt in. There is no default sharing.

Service providers

Our backend servers process meal plan generation and nutrition scoring. These servers are operated by Hestia and are not third-party services with independent access to your data. Crash reporting (Sentry) may capture anonymized error context but never health data values.

Wellness program analytics (future, consent-required)

If a future release offers "Health & Wellness Insights" and you opt in, anonymized aggregate statistics, computed at the population level with a minimum cohort size of 50 people and statistical privacy protections, may be used for wellness program analytics. This future program is not active in the current release.

Hestia Labs LLC has no corporate parent, subsidiaries, or affiliates. If any are established in the future, they will be listed here by name before any health data sharing occurs.

Categories of third parties

4. Your Consent and How It Works

Separate, granular consent

Hestia uses 6 independent consent toggles. You can enable or disable each one separately:

• Analytics, usage data to improve the app
• Personalization, tailored meal plans and recommendations
• Data sharing, aggregated grocery data in commercial products
• Health research, pseudonymized health data for wellness analytics
• Swap targeting, product substitution suggestions
• Price contributions, your price observations in market intelligence

Core profile and meal-planning data is processed to provide the account features you request. Optional health-research processing is separate, requires explicit consent, and is not active in the current release.

Consent expires

Optional health-research consent expires after 1 year. We will ask you to renew before the expiration date. If you do not renew, optional research processing stops automatically.

The app works without health data

You do not need to provide body measurements, activity information, or enable any optional health-research consent to use Hestia. Meal planning, grocery shopping, and pantry tracking remain available with general defaults.

5. Your Rights

You have the following rights over your health data. These rights apply to all Hestia users, not just Washington State residents.

Right to know

You can request a list of all health data we have collected about you, the purposes it was used for, and any third parties it was shared with, including active contact information for each third party. We will respond within 30 days.

Right to access

You can request a copy of your health data in a machine-readable format. Go to Settings > Account > My Data in the app, or email us. You may request access to your health data up to twice per year free of charge.

Right to delete

You can request deletion of some or all of your health data at any time:

• Edit or remove profile information in Hestia where the relevant field is available.
• Delete your account in Settings > Account > Delete Account. This removes all data, including pseudonymized records, from our systems.
• Request targeted deletion by emailing us. For example, you can ask us to delete only your weight history while keeping other data.

We will delete your health data within 30 days of your request. Data stored on archived backup systems may take up to 6 months to be fully purged, after which it will be permanently removed. We will confirm deletion in writing.

Right to withdraw consent

You can turn off any consent toggle at any time in Settings > Privacy. We will honor your withdrawal promptly, withdrawing consent stops future collection immediately. It does not affect data already collected under your prior consent, but you can separately request deletion of that data.

Right to appeal

If we deny a request related to your health data rights, we will explain why in writing. You may appeal by emailing us within 45 days of the denial. If you disagree with our response to a health data rights request, you may appeal by emailing us with the subject line "Health Data Appeal." We will respond to appeals within 45 days.

No retaliation

We will never degrade your service, increase your price, or penalize you in any way for exercising your health data rights.

6. How We Protect Health Data

• On your device: The Hestia app database is encrypted at rest and protected by iOS data protection.
• In transit: Web and browser traffic uses HTTPS/TLS 1.2+. Native iOS API calls use certificate pinning for Hestia API hosts.
• On our servers: Access to health-related account data is restricted to authorized systems and personnel with an operational need.
• Retention: Health-related account data is retained only as described in our general Privacy Policy and is deleted when required by an eligible request or applicable law.

7. What We Will Never Do

To be absolutely clear:

• We will never sell your health data to insurers, employers, advertisers, or data brokers
• We will never use health data for advertising or behavioral targeting
• We will never include individual health data in any commercial data product
• We will never share health data with third parties without your explicit opt-in consent
• We will never deny you service for refusing to share health data
• We will never collect health data from children under 13

8. Geofencing Disclosure

Hestia does not use geofencing technology around healthcare facilities, mental health providers, pharmacies, or any other health-related locations. We do not track your proximity to healthcare providers or use location data to infer health conditions.

9. Changes to This Policy

If we make material changes to how we handle health data, we will notify you at least 30 days before the changes take effect. Notification will be sent via email and in-app notification. Your continued use after the effective date of changes constitutes acceptance, but we will re-request consent for any new categories of health data collection.

10. Contact Us

This policy also applies to requests made under the Washington State My Health My Data Act (RCW 19.373), the California Consumer Privacy Act (CCPA/CPRA), and the EU General Data Protection Regulation (GDPR). For rights under those laws, see our general Privacy Policy.

Last revised: July 12, 2026. This Health Data Privacy Policy supplements Hestia's general Privacy Policy.