MyPotential
Get the app
Consumer Health Data Privacy Policy
This page is for people in Washington, Nevada and other US states with a consumer health data law, and applies to everyone who wants it. We collect health data only to run the app for you, with your consent. We never sell it and never use it for advertising.
1. What this covers
Consumer health data is information linked to you that identifies your past, present or future physical or mental health. This policy supplements our Privacy Policy, which describes everything else. MyPotential is operated from Romania, in the EU. Questions go to mypotential.contact@gmail.com.
2. The health data we collect
Body measurements: height, weight, goal weight, sex and age from setup, and the weight you log.
Food and drink: meals, calories, protein, water and caffeine, including photos of meals and labels you choose to scan.
Activity and training: sessions, sets, durations, distances, your training plan and conditioning minutes, and the route of a run, ride or walk you record, without its first and last 200 metres.
Sleep and recovery: time asleep and how rested you feel, and what a source you connect adds (Apple Health: heart rate variability, resting heart rate, breathing rate, wrist temperature, blood oxygen during sleep, heart rate and heartbeat timing during sleep, steps, active energy, mindful minutes, the heart rate recorded in your workouts and your body weight; Apple Health, if you import medications: the names and forms of the ones you choose to share; WHOOP: recovery, heart rate variability, resting heart rate, blood oxygen, skin temperature and strain; Oura: readiness, sleep score, heart rate variability, resting heart rate, breathing rate, blood oxygen and temperature deviation).
Mental wellbeing: how you feel in a check-in, and what you write in it.
Medication and supplements you choose to log.
Lab results you choose to add, with the reference range from your own report, and a photo of a lab report when you choose to have one read.
What we infer from the above: your daily score, your pillar percentages, and which pillar is holding the rest back.
Messages you send to Luna, where they mention your health.
3. Why we collect it and how we use it
To keep your log, score your days, name the pillar holding the rest back, set your targets, and sync it to your account. To let Luna and the helpers answer from your own numbers, when you have agreed to AI features. Nothing else. We never use it for advertising, never sell it, and never use it to train AI models.
We collect it only with your consent, which you give in the app and can withdraw at any time in Settings. If you are under 16, a parent or guardian gives it with you.
4. Where it comes from
From you, when you type, tap or photograph something in the app, Apple Health, if you connect it, WHOOP, if you connect it and Oura, if you connect it.
5. Who we share it with
We share consumer health data only with the processors that run the app for us, each bound by contract to use it only to provide its service to us. We have no affiliates, and we do not share it with anyone for their own purposes.
Supabase. Database, sign in and storage of your account and everything you log. It runs our server functions, and it stores your password, if you set one, only as a salted hash.
OpenAI. Every AI request, for Luna, the food scan, the lab report reader, the meal plan and the Goals, Finance and Faith assistants, goes from our server to OpenAI, which runs the model that answers. Each request carries only what that feature sends, described above. OpenAI never trains a model on it. Every request we send tells OpenAI not to store it, and OpenAI keeps it at most 30 days, only to check for misuse, then deletes it.
In a group, the other members see which pillar is holding you back, which days your day score reached the group’s bar, your weekly score and how far that pillar rose, as a percentage, but never your score on a day or what you logged. That is shared only because you choose to join, and you can leave at any time.
We may disclose it if the law requires us to, and will tell you unless the law forbids it.
6. Your rights
Know and access. Ask whether we hold your consumer health data, see it, and get a list of every third party and affiliate we shared it with, with how to reach them. Export in Settings gives you everything on your phone at once.
Withdraw consent. Withdraw your health data consent in Settings, under Privacy and data, Health data. MyPotential cannot score your health without it, so withdrawing deletes your account. Turn off AI features in Settings at any time, or write to us.
Delete. Delete your account in Settings, or write to us. We delete your data from our systems and backups and tell our processors to delete it too.
To use any right, use Settings or write to mypotential.contact@gmail.com from the email of your account. We answer within 45 days, and may take 45 more if we need them, and tell you if so. We never charge for this and never treat you differently for asking.
Appeal. If we refuse a request, you can appeal by replying to our answer or writing to mypotential.contact@gmail.com with the word Appeal in the subject. We decide within 45 days and explain our decision in writing. If we turn the appeal down, you can complain to the Attorney General of your state, for Washington at atg.wa.gov.
7. Changes
If we ever want to collect or share consumer health data in a way this page does not describe, we will ask for your consent first.