Consumer Health Data Privacy Notice
Version: v2026-07-16
Effective from July 16, 2026
This Consumer Health Data Privacy Notice applies to Washington residents and describes how Your Twin, LLC (“we,” “us,” “our”) collects, uses, shares, and protects consumer health data through the Nourya application and website. This notice is published in compliance with the Washington My Health My Data Act.
1. Categories of Consumer Health Data Collected and the Purpose for Each Category
Because Nourya is a health and wellness service, much of the data we collect may be considered Consumer Health Data. We collect Consumer Health Data directly from you, including information you provide when you sign up for or use Nourya, information provided during chat conversations, and inferences we make to deliver the services you use through Nourya. For example, we may infer your body mass index (BMI) from the height and weight you provide, or recommend different meal plans based on your preferences you tell us.
We collect the following categories of consumer health data from Washington residents, for the purposes shown:
-
Food and nutrition data (what you eat, portion sizes, meal timing, dietary preferences, food photos): to deliver personalized nutrition coaching, generate meal plans, and respond to your coaching requests.
-
Body-measurement data (height, weight, body composition where you provide it): to compute energy needs and deliver personalized coaching.
-
Glucose and other biomarker data, where you choose to enter it manually: to support coaching aligned with your stated health goals.
-
Sleep, activity, and movement data, where you choose to enter it manually: to support coaching aligned with your stated health goals.
-
Health conditions, symptoms, medications, and treatments you choose to disclose in conversation with the coach: to deliver coaching that accounts for the conditions you have told us about.
-
Conversations with the coach that contain health-related content: to deliver coaching, remember context across sessions, and respond to your requests.
-
Inferences derived from any of the above (for example, body-mass index, energy balance, adherence indicators): to deliver coaching.
2. Categories of Sources from Which Consumer Health Data Is Collected
-
Directly from you, through conversations with the coach, profile-and-settings entries, photo uploads, and form submissions in the application.
-
Inferences we generate from data you provide.
3. Categories of Consumer Health Data Shared
We share the categories of consumer health data described in Section 1 only with the third parties and affiliates listed in Section 4, and only for the purposes shown there. We do not sell consumer health data.
4. Categories of Third Parties and Specific Affiliates with Whom We Share Consumer Health Data
We share consumer health data with the following third parties, and only for the purposes shown:
-
Anthropic, PBC (large-language-model provider) — receives the text of your coaching conversations to generate coaching responses; under our contractual agreement, the provider does not retain or train on inputs.
-
OpenAI, L.L.C. (large-language-model provider, when used as a fallback or for specific subtasks) — receives the text of your coaching conversations to generate coaching responses; under our contractual agreement, the provider does not retain or train on inputs.
-
Google LLC (large-language-model provider for Gemini, when used as a fallback or for specific subtasks) — receives the text of your coaching conversations to generate coaching responses; under our contractual agreement, the provider does not retain or train on inputs.
-
Amazon Web Services, Inc. (cloud hosting) — stores your data in encrypted form at rest and in transit; does not access content.
-
Sentry (Functional Software, Inc.) (error monitoring) — an essential service we use to maintain the technical integrity of the app. We do our best to ensure the logs Sentry collects do not contain consumer health data; however, we cannot guarantee this completely, and we handle it on a best-effort basis.
Specific affiliates. Your Twin, LLC has no parent company, subsidiary, or other corporate affiliate at this time. If that changes, this section will be updated and the version date advanced.
5. How a Consumer Can Exercise Your Consumer Health Data Rights
You have the following rights with respect to your consumer health data:
-
Right to confirm whether we are collecting, sharing, or selling your consumer health data, and to access the categories collected, shared, or sold.
-
Right to withdraw consent to our collection and sharing of your consumer health data.
-
Right to have your consumer health data deleted.
-
Right to appeal any refusal to act on a request submitted under this section.
How to exercise these rights. You can exercise your access, withdrawal, and deletion rights immediately through in-app self-service: you can access and update your data in Settings, and you can delete your data or your entire account at any time in Settings. You may also contact us at the address below or use the in-app Settings → Privacy controls. We will respond without undue delay, and in all cases within forty-five (45) days of receiving your request. When reasonably necessary, we may extend this period once by an additional forty-five (45) days, and we will notify you in writing of the extension and the reason for it.
Deletion and your chat history. Because of the technical design of our Services, your Consumer Health Data may be contained within your chat history and cannot be selectively deleted on a record-by-record basis. As a result, if you request deletion of your Consumer Health Data, you will be required to delete your account, in order to delete your chat history and the associated Inputs and Outputs. If you delete your account, we will delete your Consumer Health Data — including your chat history and any Inputs and Outputs — except where retention is required or permitted by applicable law, or is necessary to protect security, prevent fraud, or comply with legal obligations.
Withdrawing consent. Because the health information you share is necessary for us to deliver the coaching you have requested, withdrawing your consent to our collection and sharing of that data means we will no longer be able to provide the Services to you. You will have to cancel your subscription. Withdrawal stops our further collection and sharing of your Consumer Health Data going forward; it does not affect processing that already took place while your consent was active.
Appeals. If we decline to act on your request, you may appeal within a reasonable period after receiving our response. We will inform you in writing of any action taken on the appeal, together with a written explanation of the reasons, within forty-five (45) days of receiving the appeal. If your appeal is denied, you may submit a complaint to the Washington Attorney General at https://www.atg.wa.gov/file-complaint.
6. Contact
Your Twin, LLC
344 Grove Street #4030
Jersey City, NJ 07303
Email: legal@nourya.ai