Consumer Health Data Privacy Policy
This notice supplements the Maple Media Privacy Policy and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA), the Nevada Health Data Privacy Act (NHDPA), or other applicable state consumer health privacy law.
Consumer Health Data We Collect
As described in the Personal Information Collected and Used section of the Privacy Policy, the data we collect depends on the context of your interactions with Maple Media and the choices you make (including your privacy settings), the products and features you use, your location,and applicable law. Because consumer health data can be defined very broadly, it’s possible that some of the categories of data we collect could also be considered consumer health data.
Examples of consumer health data may include:
- Fitness and Wellness data, including dietary habits, dietary restrictions, sleep data, and other fitness activity data that you choose to provide when you use a specific app.
- Measurements and tracking of bodily functions, vital signs, or characteristics, including photographs, which may also be considered biometric information under the MHMDA, the NHDPA, or other applicable state consumer health privacy law.
- Information that could be synced to or synced from other devices and services, for example, from Apple Health to Fooducate, or from Fooducate to Apple Health
- Other information that may be used to infer or derive data related to the above or other health information.
Sources of Consumer Health Data
As described further in the Personal Information Collected and Used section of the Privacy Policy, we collect personal data (which may include consumer health data) directly from you, from your interactions with our products and services, from third parties that you link and authorize, and from publicly available sources.
Why We Collect and Use Consumer Health Data
We collect and use consumer health data for the purposes described in the Personal Information Collected and Used section of the Privacy Policy. Primarily, we collect and use consumer health data as reasonably necessary to provide you with the products and services you have chosen to use. This may include delivering and operating the products and their features, personalization of certain product features, ensuring the secure and reliable operation of the products and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the products to you (such as analyzing our performance, meeting our legal obligations, and conducting research and development).
We may use consumer health data for other purposes for which we give you choices and/or obtain your consent, as required by law – for example, for advertising or marketing purposes. See the Your Rights section of the Privacy Policy and the How to Exercise Your Rights section below for more details on the controls and choices you may have.
Our Sharing of Consumer Health Data
We may share each of the categories of consumer health data described above for the purposes described in the Personal Information Collected and Used section of the Privacy Policy. In particular, we may share personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described above.
For example, we share your content with third parties when you tell us to do so, such as when you link the services to Apple Health or if you choose to share your health journey with other community members. If you make a purchase, we will share information about the transaction as necessary to process the payment, including protection against fraud. And we may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.
Third Parties With Which We Share Consumer Health Data
As necessary for the purposes described above, we share consumer health data with the following categories of third parties:
- Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to data to provide those functions.
- Business partners. We may share consumer health data with other companies, for example, where you use a service that is co-branded and jointly operated with another company, or where you use our services to interact with another company.
- Financial institutions & payment processors. When you make a purchase or enter into a financial transaction, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
- Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
- Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business. A full list of specific affiliates is provided in our Privacy Center.
- Government agencies and other third parties. As described in our Privacy Policy, we disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.
- Other users and individuals. If you use our services to interact with other users of the service or other recipients of communications, we will share data, including consumer health data, as directed by you and your interactions.
- The public. In some cases, you may select options available through our services to publicly display and disclose certain information, such as your profile, demographic data, content and files, or geolocation data, which may include consumer health data.
How to Exercise Your Rights
If you are covered by the MHMDA, the NHDPA, or other applicable consumer health privacy law then you may have certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions.
You can request to exercise such rights using the various tools and mechanisms described in the Privacy Policy or the Privacy Center of the application you are using. For example, depending on the product you use, you can access and make choices about your data through product controls, or by using the in-app Privacy Center, the contact us form, or the Data Request form. If you have further questions, you may contact us at privacy@maplemedia.io.
If your request to exercise a right is denied, you may appeal that decision by contacting us at privacy@maplemedia.io. If you choose to appeal, please indicate in the subject line that you are writing to “Appeal of Health Data Privacy Request” to ensure that your appeal is forwarded to and reviewed by the appropriate members of staff.
Last Updated: July 2024