Last Updated: September 29, 2026
Developer: Wave Media Studios LLC
Address: 135 Riverside Pkwy, Suite 2P, Austell, GA 30168, United States
Application: AYFY
This Consumer Health Data Privacy Policy applies to "consumer health data" as defined by the Washington My Health My Data Act (MHMDA) and similar state health data privacy laws in Nevada, Connecticut, and other applicable jurisdictions. It supplements our main Privacy Policy (/ayfy/privacy).
1. Consumer Health Data We Collect
- Medication Cycle Data: The GLP-1 medication and dose you select, self-reported injection day schedules, and weekly cycle milestones.
- Body & Profile Data: Birth date, sex, height, baseline weight, and optional baseline measurements you enter during setup.
- Symptoms & Subjective Comfort: Self-reported digestive comfort ratings, fullness levels, nausea, fatigue, and physical check-in responses.
- Meal & Nutritional Information: Food photographs (before and after meal photos), meal names and corrections you add, logged liquid volumes, meal descriptions, and estimated macronutrients.
- Algorithmic & Derived Data: Gastric Readiness Gauge values, Gut Comfort Forecasts, satiety trends, and Pattern Finder insights derived from your logged inputs.
- Body Weight (optional): Weights you choose to log in the App.
2. Purpose of Collection and Use
We collect and process consumer health data solely to deliver the specific features you request:
- Generating estimated meal scores and portion comparisons via the AI Vision Engine.
- Calculating digestive comfort trends and injection cycle readiness scores.
- Triggering Satiety Sage check-in notifications.
- Generating exportable PDF Reports for your personal records or healthcare provider discussions.
- Enforcing fair-use camera allocations and managing AYFY Premium subscriptions.
We do NOT use consumer health data for advertising, profiling, or cross-context behavioral marketing.
3. Sources of Consumer Health Data
We collect consumer health data directly from you when you log meals, upload photos, add meal corrections, or submit check-in ratings in the App. We also generate derived wellness trends from your logged entries.
4. Sharing of Consumer Health Data
We share consumer health data exclusively with contracted service providers (processors) that support core App operations:
- Supabase: Secure encrypted database hosting, authentication, and private file storage.
- Google Gemini Vision API: Ephemeral analysis of meal photos, and any meal names or corrections you add, to return nutritional and portion estimates, only after you provide explicit in-app consent. Google does not use this data to train models.
We do NOT sell consumer health data. We do NOT share consumer health data with affiliates, data brokers, advertisers, or any other third parties beyond the service providers listed above.
5. Consent and Control
We require your explicit consent in the App prior to collecting wellness data and prior to transmitting meal photos for AI analysis. You may withdraw consent at any time inside the App under Profile → Settings. Withdrawing consent may limit features that depend on that data.
6. Your Rights
Under applicable state health privacy laws, you have the right to:
- Confirm whether we collect, share, or process your consumer health data.
- Access your consumer health data, including a list of all third parties and affiliates with whom we have shared it.
- Request the permanent deletion of your consumer health data.
- Withdraw previously granted consent for collection and processing.
When you delete your consumer health data or your account, we retain a minimal, de-identified record of your consent decisions (no health data) for up to 3 years to demonstrate legal compliance.
To exercise these rights, navigate to Profile → Account in the App, or email privacy@wavemediastudios.com with the subject line "Consumer Health Data Request." We will verify your identity via your registered account email and respond within 45 days. (Where permitted by law, this period may be extended once by an additional 45 days with prior notice).
7. Appeals
If we decline to take action on your request, you may appeal our decision by emailing privacy@wavemediastudios.com with the subject line "Consumer Health Data Appeal." We will respond in writing within 45 days explaining our reasoning. If your appeal is denied, you may submit a complaint to the relevant regulatory authority:
- Washington Residents: Washington State Attorney General at atg.wa.gov/file-complaint
- Nevada Residents: Nevada Office of the Attorney General
- Connecticut Residents: Connecticut Office of the Attorney General
8. Contact Information
Wave Media Studios LLC
135 Riverside Pkwy, Suite 2P, Austell, GA 30168, United States
Email: privacy@wavemediastudios.com