Consumer Health Data Privacy Policy

Last updated and effective: October 1, 2026

This policy explains how Woojer Ltd. and Woojer USA, Inc. (“Woojer”, “we”) handle consumer health data collected through the Woojer Wellness app (the “App”), as that term is defined in Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's Data Privacy Act. Our Privacy Policy (www.woojer.com/policies/privacy-policy) explains how we handle all other personal information.

Consumer health data we collect, and why

  • Data from the wearable or health app You connect (Apple Health, Health Connect, or Your Garmin, Oura, Polar, Fitbit, WHOOP, Ultrahuman or Zepp account): sleep (duration, stages, efficiency and sleep score), heart rate, heart rate variability, resting heart rate, blood oxygen, respiratory rate, steps, calories, active and exercise time, and readiness or recovery scores. We use it to calculate and show Your daily wellbeing score and trends, and to suggest sessions.
  • Your daily wellbeing score, its parts and the insights we derive from that data, for the same purposes.
  • Health information You tell Wooju, our AI wellness guide, and confirm that it may remember, such as a medication, a pregnancy or an implant. We use it to tailor Wooju's suggestions to You.
  • Records of the consents You give, so that we can honor them.

Sources

You; Apple Health or Health Connect on Your phone; the Garmin, Oura, Polar, Fitbit, WHOOP, Ultrahuman or Zepp account You authorize; and our own calculations from that data.

Consumer health data we share

We do not sell consumer health data. We share it only with these categories of processors, which handle it for us under contract:

  • a health-data integration service (Terra), which connects Your sources and receives Your data from them;
  • a cloud hosting provider (Supabase), which stores Your daily wellbeing results and Your Wooju data;
  • an AI model provider (Anthropic), which processes Your Wooju messages, including health information You tell Wooju, to generate replies;
  • an application hosting provider (Fly.io), which runs the Wooju service.

We share consumer health data with anyone else only with Your separate consent, or where the law requires it. No third party collects consumer health data about Your activity across other companies' apps or websites through the App.

Your rights

You have the right to confirm whether we collect, share or sell Your consumer health data; to access it, including a list of all third parties and affiliates with whom we have shared it and how to contact them; to delete it; and to withdraw Your consent. You can do most of this in the App: disconnect a source, use “Delete my health data”, tell Wooju to forget what it remembers, or delete Your account. You can also email privacy@woojer.com.

We respond within 45 days. When reasonably necessary we may extend that once, by 45 more days, and tell You why. If we decline Your request, You can appeal by replying to our decision, and we will answer Your appeal within 45 days. If we deny Your appeal, You can contact Your state's Attorney General: Washington (https://www.atg.wa.gov/file-complaint), Nevada (https://ag.nv.gov/Complaints/File_Complaint/) or Connecticut (https://portal.ct.gov/ag/common/complaint-form-landing-page).

Changes to this policy

We will tell You in the App before a material change to this policy takes effect, and ask for Your consent again where the law requires it.