Consumer Health Data Privacy Policy

Who this policy is for

This policy applies to consumer health data that Zeeshan Waheed, the developer who makes OvaReset, collects from consumers in Washington State, as required by Washington’s My Health My Data Act. “Consumer health data” means personal information that is linked, or reasonably linkable, to your past, present or future physical or mental health.

The consumer health data we collect

Category	Examples	How we use it
Health conditions, symptoms and goals	The symptoms you pick, whether you have a PCOS diagnosis, your health goal	To build your plan, your daily habits and your lessons
Reproductive and menstrual health	The date of your last period, your period flow and your cycle length	To track your cycle and create your reports
Daily wellbeing	Your afternoon energy, cravings, mood and sleep	To show patterns and create your reports and health summary
Body measurements	Your weight and waist, if you log them. They stay on your phone and are never sent to the coach.	To show your trend and, if you choose, add it to your health summary
Sleep, steps and periods from Apple Health or Health Connect	If you connect them: your sleep, steps and period days. They stay on your phone and are never backed up or shared.	To fill in nights and days you didn’t log, show your steps and complete your cycle history
Food and activity	How you like to eat, how active you are, and meal photos you send	To match habits, recipes and your weekly meal plan to you, and to check meals
Medicines	Medicines and supplements you add, their type (for example a GLP-1 medicine or metformin), doses and reminder times, the doses you mark as taken, and side effects you note in the medicine check-in. They stay on your phone.	To remind you, show what you took and give you medicine support
Coach messages	Questions you ask the coach about your health. They are saved on your phone. Our servers don’t keep them, except inside your locked backup, unless you turn backup off.	To answer your questions
Locked backup	Unless you turn it off: a copy of your app data, locked on your phone with a key we never receive. We can’t read it, and it isn’t linked to your account.	To give your data back to you after a reinstall or on a new phone
Insights	Patterns the app finds in your logs, such as when your energy dips	To show your reports
Waitlist sign-up	Your email address, which could suggest an interest in PCOS-related health information	To tell you when OvaReset launches

We use this data only to provide the features you ask for, to keep OvaReset secure, and to meet our legal obligations.

Where we get it

From you, when you answer questions, log your day, use the coach or join the waitlist.
From the app, when it finds patterns in what you log, on your phone.
From Apple Health or Health Connect, if you connect them. OvaReset reads this data on your phone, and it isn’t sent to us.

We don’t buy consumer health data or collect it from other companies.

We don’t sell consumer health data. We share it only with processors, which are service providers that handle data on our behalf, under contracts that only let them use it to provide their service to us:

Coach messages, meal photos, the recent coach conversation and the parts of your plan needed to answer them, with Anthropic, which creates the coach’s answers. They pass through our servers, which Cloudflare runs, and aren’t stored there. Your name, email address and account details are never sent with them.
Your locked backup, unless you turn it off, stored by Cloudflare on our behalf. It’s encrypted on your phone with a key we never receive, so neither we nor Cloudflare can read it.
Your waitlist sign-up, with our hosting provider, Cloudflare.

Data from Apple Health or Health Connect never leaves your phone. Your medicines, medicine check-ins, weight and waist only leave it inside your locked backup, unless you turn backup off, and they are never sent to the coach.

When you share your health summary from the app, you share it directly with the people you choose. We don’t receive a copy.

Third parties: none.
Affiliates: none. Zeeshan Waheed doesn’t share consumer health data with any affiliated company or person.
Processors: Cloudflare, Inc. (hosting, our app servers, waitlist storage and locked backups) and Anthropic, PBC (coach answers and meal checks, made with its AI model, Claude). Anthropic doesn’t use your data to train its models.

Your rights

If you are a Washington consumer, you have the right to:

confirm whether we collect, share or sell your consumer health data, and access that data
get a list of all third parties and affiliates that we have shared your consumer health data with or sold it to, with a way to contact each of them
withdraw your consent to our collection and sharing of your consumer health data
have your consumer health data deleted

We will respond within 45 days of receiving your request. If we need more time, we will tell you why within those 45 days and may extend the deadline once, by up to 45 more days. Requests are free, up to twice a year. When we delete your data, we also tell our processors to delete it. Copies in our database backups are gone within 30 days, and Anthropic deletes coach messages and photos within 30 days on its own, unless they are flagged for breaking its usage policy.

How to use your rights

In the app: go to Me, then Privacy and data, to download a copy of your data, turn off the coach’s use of your data, turn off backup, or delete your data and account.
By email: write to us using the details in Contact us, with the subject “Washington health data request”, and tell us which right you want to use. We will confirm your identity using the email address linked to your account or waitlist sign-up. We won’t ask you to create an account.

Appeals

If we decline your request, you can appeal by replying to our decision with the subject “Appeal”. We will answer in writing within 45 days and explain our reasons. If we deny your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

Contact us

Zeeshan Waheed

The developer of OvaReset, working as Imisofts.

Email: bloom@ovareset.com
Postal address: Imisofts, 19th Floor, The Prism Tower, Business Bay, Dubai, United Arab Emirates
Phone: +971 52 432 0369