Goumi Consumer Health Data Privacy Policy

Last updated: 8 July 2026

About this policy

This Consumer Health Data Privacy Policy applies specifically to “consumer health data” as defined under the Washington My Health My Data Act (MHMDA) and the equivalent Nevada law (SB 370). It is provided as a standalone policy, separate from our general Privacy Policy. If you are a consumer in Washington or Nevada, this policy describes how we collect, use, share, and protect your consumer health data, and the rights you have.

This policy is operated by Generate Your Audience Pty Ltd (“we”, “us”). Questions: hello@goumi.ai.

1. What we mean by consumer health data

Consumer health data is personal information linked to you that identifies your past, present, or future physical or mental health status. For Goumi, this means the information you choose to share so we can tailor recipes, nutrition estimates, and meal plans, including:

• dietary preferences and restrictions that relate to health (for example, allergies, intolerances, low-sodium, or diabetic-friendly eating);
• family member profiles you optionally create, which can include date of birth, height, weight, and biological sex, along with dietary preferences and notes;
• free-text you write in chats or notes to the extent it describes health-related needs; and
• inferences we draw from the above to personalise recipes and nutrition estimates.

We do not collect biometric data, precise location, Apple Health / HealthKit data, or data about reproductive or sexual health.

2. How we collect it and our sources

We collect consumer health data directly from you, and only when you choose to enter it into the app (for example, when setting dietary preferences or adding a family member profile). All of it is optional — Goumi works without it. We do not buy consumer health data, and we do not collect it from data brokers.

3. How we use it

We use your consumer health data only to:

• personalise the recipes, meal plans, and nutrition estimates we show you;
• respect your dietary preferences and restrictions when generating recipes; and
• provide the features you have asked for.

We do not use consumer health data for advertising, and we do not profile you for marketing. The Goumi app contains no analytics or advertising trackers.

4. How we share it

We do not sell your consumer health data, and we will not sell it without the separate, valid authorisation the law requires. We have no plans to sell it.

We share it only with the service providers (processors) needed to run Goumi, and only to provide features you use: it is stored with Supabase, our backend host, and dietary preferences and relevant chat context are sent to Anthropic when Goumi generates recipes and meal plans for you. The full list of providers and what each receives is in section 4 of our Privacy Policy. We may also disclose information where required by law. You can request a specific list of the third parties with whom we have shared your consumer health data (see section 7).

5. How we obtain your consent

Consumer health data enters Goumi only through fields you fill in voluntarily — dietary preferences and optional family member profiles — so collection happens only with your affirmative choice. We do not use it for any purpose beyond providing the features described above without asking for separate consent first. You can withdraw at any time by editing or deleting the information in the app, deleting your account (Profile → Delete account), or contacting us (see section 7).

6. Data security and retention

We protect consumer health data with encryption in transit, database row-level security so each user can only access their own records, and restricted internal access. We retain it only while your account exists: deleting your account removes your profile, family member profiles, dietary preferences, and related records.

7. Your rights

If you are a Washington or Nevada consumer, you have the right to:

• Confirm and access — confirm whether we are collecting, sharing, or selling your consumer health data, and access that data;
• List of recipients — obtain a list of the third parties with whom we have shared your consumer health data;
• Delete — request deletion of your consumer health data (also available directly in the app); and
• Withdraw consent — withdraw your consent to our collection and sharing of your consumer health data.

To exercise any of these rights, contact hello@goumi.ai or use the controls in the app. We will respond within 45 days (extendable by a further 45 days where reasonably necessary, with notice to you). We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request.

8. Appeals and complaints

If we decline your request, you may appeal by replying to our response or contacting hello@goumi.ai. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint (Washington consumers) or the Nevada Attorney General (Nevada consumers).

9. Changes to this policy

We may update this policy from time to time and will post the updated version with a new “Last updated” date.

10. Contact us

Generate Your Audience Pty Ltd (ABN 68 620 590 481)
Consumer health data contact: hello@goumi.ai