US Consumer Health Data Policy

1. Consumer health data we collect

• Menstrual cycle, period dates and reproductive health information, including pregnancy, menopause and contraception method
• Symptoms, conditions you've been diagnosed with, medications and supplements
• Height, weight, BMI, calorie and weight goals
• Mood and wellbeing check-in answers
• Food logs, meal photos, food allergies and dietary requirements
• Any health information you include in community posts or support messages
• Inferences we make from this data, such as your cycle phase, mode and nutrient targets

We do not collect precise location, and we do not use geofencing around healthcare facilities.

2. Sources

Directly from you, from the meal scanner when you use it, and from health apps you choose to connect.

3. Why we collect and use it

• To provide the Lyna features you ask for (personalised plans, cycle tracking, nutrient targets, meal scanning, check-ins)
• With your separate consent: to improve Lyna and train our models; for health research; to share pseudonymised data with research partners
• To keep the Service secure and comply with law

We collect and use consumer health data only with your consent, or where it is necessary to provide a service you have requested.

4. Who we share it with

• Service providers (processors) that help us run Lyna, under contracts that restrict their use, such as cloud hosting, meal-photo analysis and customer support
• Research partners, only with your separate consent, for listed studies
• Other Lyna members, only content you choose to post in the community
• Authorities where the law requires it

We share consumer health data with third parties only with your separate consent. We do not sell consumer health data. We would need your signed, written authorisation to do so, and we have no plans to.

5. Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and access it
• see a list of all third parties and affiliates we have shared it with, and how to contact them
• withdraw consent at any time
• have your consumer health data deleted, including by our processors and third parties we shared it with
• appeal if we refuse your request

We will not discriminate against you for using these rights.

6. How to use your rights

Use Settings › Privacy in the app or email privacy@lyna.cam. We respond within 45 days (extendable once by 45 days when reasonably necessary, and we will tell you). To appeal a decision, reply to it with "Appeal" in the subject line. We respond to appeals within 45 days. If we deny your appeal, you can contact your state Attorney General, for example the Washington Attorney General at atg.wa.gov.

7. Security and breaches

We protect consumer health data with access controls and encryption. If a breach affects your data, we will notify you and, where the FTC Health Breach Notification Rule applies, the Federal Trade Commission.