Consumer Health Data Privacy Policy
Effective date: October 24, 2026
Politica asta e pentru locuitorii statelor Washington, Nevada și Connecticut (SUA) și e scrisă în engleză. Pentru restul, citește Politica de confidențialitate.
Esta política es para residentes de Washington, Nevada y Connecticut (EE. UU.) y está en inglés. Para lo demás, lee la Política de privacidad.
This policy is for people who live in Washington, Nevada or Connecticut (USA), or whose health data we collect in one of those states. It explains how Felix handles “consumer health data” under Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (NRS 603A, from Senate Bill 370) and Connecticut's rules on consumer health data (Connecticut Data Privacy Act). Everything else about your data is in our main Privacy Policy.
Who we are
Felix is operated by LUTRA VENTURES S.R.L., a company registered in Romania, reg. no. J2026051330006, tax ID (CUI) 55477253, share capital 500 RON, registered office at Str. Izvor 78, floor 1, building A, room 5, Sector 5, Bucharest, Romania. To reach us about your health data, or to use any right below, email hey.felix.app@gmail.com.
The health data we collect and why
We collect only what you put into Felix, and we use it to give you the features you ask for:
- Food and drink you log: food names, amounts, calories, macros and nutrients, meal times, water. Used to show your daily budget, totals and trends.
- Your body: sex, age, height, weight and weigh-ins, activity level, and body measurements if you add them. Used to work out your calorie, macro and water targets and to show your progress.
- Training: workouts (exercises, sets, weights, durations), the distance and duration of runs you track, and a workout note you paste in to import. Used for your training log and calorie budget.
- Goals and preferences: your goal, your targets, any fast you track, foods you avoid or cannot eat (including allergies), how you usually eat, your gym level, goal and days, and the sports you do. Used to personalise suggestions and keep them away from what you can't eat.
- What you send to the AI: meal descriptions, meal photos, voice recordings (turned into text) and messages to Felix in the chat, which carry the profile and recent logs listed in our main Privacy Policy. Used to estimate nutrition and to answer you. We don't store the photos or recordings on our servers.
- What Felix works out from the above: your targets, the foods and portions you usually log, habits it notices (for example that you often skip breakfast), and your level in the app. Used only to make the app fit you.
- Problem reports you choose to send: your message, the food you report and, if you spoke, what Felix heard, plus a picture of that meal card if you switch that on (kept for 90 days at most). Used to fix mistakes.
- Only if you switch on “Your fixes”: the corrections you make to a food, not linked to your account. Used to make logging better.
Your step count and your progress photos stay on your phone and never reach us. Your location is read only during a run you start, and only the distance and duration are kept. We never use your health data for advertising.
Where it comes from
- From you: what you type, say, photograph or choose in the app.
- From your phone: steps from the motion sensor and location during a run you start. Both are used on the phone; only the run's distance and duration are saved.
- From Felix itself: the targets, estimates and habits worked out from what you logged, including the nutrition estimates the AI returns.
Who receives it
We do not sell your health data, and we do not share it with third parties or affiliates (we have none that receive it). The only exception would be a disclosure the law forces on us, limited to what is required.
To run Felix, these service providers process it on our behalf, under contract, and only for us:
- Supabase (database and hosting, London, UK): everything stored in your account. supabase.com/privacy
- OpenAI (AI processing): only what you send to the AI, as described above, and only after you accept the AI disclosure in the app. OpenAI does not train its models on it. openai.com/policies
- Microsoft OneDrive (backup storage): a weekly backup copy of our database, encrypted by us before upload. Microsoft cannot read it. privacy.microsoft.com
Our other providers (Apple, Google sign-in, RevenueCat, Resend, Sentry, Expo, Open Food Facts, USDA FoodData Central) do not receive your health data. No third party collects health data about you over time and across websites or apps through Felix or heyfelixapp.com: there are no ads, ad trackers or analytics cookies.
Your consent
We collect health data only after you tick a separate box that asks for it, when you create an account or start guest mode. Sending anything to the AI needs a second, separate consent: the AI disclosure in the app, which stays off until you accept it. “Your fixes” has its own switch, off unless you turn it on. If we ever want to collect a new kind of health data or use it for a new purpose, we will tell you in the app and ask first.
You can withdraw any of these at any time in Settings → Privacy and data: “Health data”, “AI food analysis” and “Your fixes”. Withdrawing health data consent stops Felix from recording anything new; you choose whether what you already logged stays or is deleted.
Your rights and how to use them
- See your data and confirm what we hold: every screen in the app shows it, and Settings → Privacy and data → Export your data gives you a copy. The providers that process it are listed above.
- Correct it: edit it in the app, or write to us.
- Delete it: Settings → Account and legal → Delete account (the red row), or email us. Your account and its data are removed from our live systems straight away and from our backups within 60 days. Copies held by our providers expire on their own: OpenAI's abuse-monitoring logs within 30 days, Supabase's technical logs within 7 days.
- Withdraw consent: see “Your consent” above.
For anything you can't do in the app, email hey.felix.app@gmail.com. We may ask you to write from the email address of your Felix account so we know the request is yours. We answer without undue delay and within 45 days. If we really need more time, we can extend that once, by up to 45 more days, and we will tell you why. Requests are free. The “Your fixes” rows are not linked to anyone, so we cannot find yours to show or delete them.
If we say no: appeals
If we refuse your request, in whole or in part, you can appeal: reply to our answer or email hey.felix.app@gmail.com with “Appeal” in the subject. We will reply in writing within 45 days, saying what we did and why. If we still refuse, you can contact your state's Attorney General: Washington, www.atg.wa.gov/file-complaint; Nevada, ag.nv.gov; Connecticut, portal.ct.gov/ag.
No geofencing
We do not set up geofences around places that provide health care, or anywhere else. We never use location to identify or track people who visit such places, to collect health data from them or to send them messages or ads. Felix reads your location only during a run you start, and the route stays on your phone.
Changes to this policy
When we change this policy, we update the effective date at the top. Before we collect a new kind of health data or use it for a new purpose, we tell you in the app and ask for your consent; until you give it, the change does not apply to you.