This policy applies to Washington residents and to anyone whose consumer health data is collected in Washington when using the Yazio GLP-1 app, provided by YAZIO GmbH, Kartäuserstraße 13a, 99084 Erfurt, Germany (“Yazio”, “we”). Our general Privacy Policy for the Yazio GLP-1 app explains all other processing.
1. Consumer health data we collect, why, and how we use it
- Information that may indicate you use a GLP-1 medication, inferred from your subscription to the app (subscription and trial status, purchase dates, store country, anonymous app user ID). Purpose: to provide and manage the subscription you purchased.
- Meal photos and the nutrition estimates derived from them (estimated foods, portions, protein and calories), with a device identifier. Purpose: to provide the AI meal estimate you request and to prevent misuse of this feature.
- Health information you choose to include in a support message. Purpose: to answer your request.
The medication, dose, side-effect, weight, and meal logs you enter in the app, and any Apple Health data the app shows, stay on your device and, if you use iCloud sync, in your own iCloud account. We do not collect them.
2. Sources
Directly from you (meal photos, support messages), and from Apple and our subscription provider RevenueCat (subscription status).
3. Consumer health data we share
We share subscription information and meal photos, only as described below. We do not share consumer health data with affiliates, and we do not sell it.
4. Third parties we share it with
- Cloud hosting provider (Cloudflare, Inc.): Meal photos, to run the meal-estimate function
- AI model provider (OpenAI, L.L.C.): Meal photos, to produce the estimate
- Subscription management provider (RevenueCat, Inc.): Subscription information
- App store and payment provider (Apple Inc.): Purchase and subscription information
5. How to exercise your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access it, including a list of the third parties we shared it with and how to contact them
- withdraw your consent to our collection and sharing
- have your consumer health data deleted; we will also tell the third parties we shared it with
How to make a request. Email help@yazio.com with the subject “Washington consumer health data request”. To delete the logs on your device and in your iCloud, use Your Stuff → Delete all my data in the app. To withdraw consent for meal photos, use Your Stuff → Photo analysis. You do not need an account. We may ask for information needed to verify your request, such as the order ID from your App Store receipt. We respond within 45 days; if we need more time, we will tell you within that period and may extend once by 45 days. Requests are free up to twice a year.
How to appeal. If we decline your request, reply to our decision with the word “Appeal”. We will answer in writing within 45 days and explain our reasons. If we deny your appeal, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.