UQUESTConsumer Health Data Privacy Policy
Last updated: 28 October 2026
This policy is for consumers in the United States. It is written to meet Washington's My Health My Data Act (RCW chapter 19.373) and similar state consumer health data laws, such as Nevada's. It explains what consumer health data Uquest collects, why, who receives it, and your rights. Read it together with our Privacy Policy.
1. Who we are
UQUEST (Pty) Ltd ("Uquest", "we", "us"), a company registered in South Africa (registration number 2026/788036/07), 62B Justice Mahomed, Pretoria, 0181, South Africa. Contact: support@uquest.app.
2. Consumer health data we collect, and why
| Category | Examples | Why we collect it and how we use it |
|---|---|---|
| Body measurements | Weight entries, height, goal weight, and the age and sex used to calculate targets | To track your progress and calculate calorie and macro targets |
| Nutrition | Food and nutrition logs, calorie and macro targets, dietary preferences and restrictions | To run the food tracker and show your intake against your targets |
| Exercise and activity | Workouts, activities, rest days, activity level, available equipment | To run the workout tracker and calendar |
| Health conditions you tell us about | Injuries, physical limitations, anything you write in daily notes (for example "had food poisoning") | To give you context in your logs and let the AI coach take it into account |
| AI coach content | Your messages to the coach, the coach's summary of earlier chats, weekly reviews and check-ins | To provide AI coaching when you use it |
| Meal photos | Photos you take with photo scan (not stored by us) | To estimate a meal's nutrition, which you confirm before saving |
| Inferences | Estimated maintenance calories, smoothed weight trends, coach suggestions | Calculated from the data above to make the trackers and coach useful |
We also use this data to answer your support requests, keep the service secure, and meet legal obligations. We do not use it for advertising, and we do not sell it.
3. Where it comes from
All consumer health data comes from you, or is calculated by the app and the AI coach from what you entered. We do not buy health data or collect it from other companies. If you sign in with Google, Google gives us account details only, never health data. We do not collect precise location and do not use geofencing.
4. Consent
We collect consumer health data only after you give separate consent when you create your account. That consent is never taken from accepting our Terms of Service. If we ever want to collect a new category of health data or use it for a new purpose, we will ask again first.
5. Who receives it
We do not share consumer health data with third parties or affiliates, and we have no affiliates. We do not sell it. If we ever wanted to share it, we would ask for your separate consent first.
We disclose it only to processors, who handle it on our behalf, under contract, and only to provide our service:
| Processor | What it does | Health data it receives | Contact |
|---|---|---|---|
| Supabase, Inc. | Stores the app's database | All categories above, except meal photos | supabase.com |
| OpenAI | Generates AI coach replies, reviews and check-ins, and meal photo estimates | Profile, measurements, coaching preferences, recent logs, notes, chat, meal photos, when you use those features | openai.com |
| Zoho Corporation | Our support mailbox | Whatever you include in emails to support | zoho.com |
| Google LLC | Stores encrypted backups that Google cannot read | All categories above, encrypted | google.com |
| Cloudflare, Inc. | Delivers the website and app, and forwards support email | Data in transit | cloudflare.com |
6. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access it, including a list of every third party and affiliate it was shared with and how to contact them (today there are none; we will also list our processors)
- withdraw consent to our collection and sharing of your consumer health data
- delete your consumer health data. We will delete it from our systems and tell our processors to delete it too. Copies in our encrypted backups are removed within 35 days, and never later than six months, after we confirm your request
- exercise these rights without being treated differently for doing so
How to make a request: email support@uquest.app with the subject "Health data request", or delete your account in the app under Profile > Delete account. We will confirm your identity by asking you to reply from the email address on your account. You do not need to create an account to make a request.
We respond within 45 days. If we need more time, we will tell you within those 45 days and may extend once by 45 more days. Requests are free up to twice a year.
7. Appeals
If we refuse your request, reply to our decision with the word "Appeal" and tell us why. We will answer in writing within 45 days, explaining what we did or did not do and why. If we deny your appeal, you can complain to the Washington State Attorney General at atg.wa.gov, or to the Attorney General of your state.
8. How long we keep it
We keep consumer health data while your account exists. It is permanently deleted 30 days after you delete your account, or after 2 years without a sign-in and without an active subscription. Our Privacy Policy has the full retention table.
9. Changes
We will post changes here and update the date at the top. We will ask for your consent again before using your health data in a new way.
10. Contact
UQUEST (Pty) Ltd · support@uquest.app · 62B Justice Mahomed, Pretoria, 0181, South Africa