Legal

Consumer health data privacy policy

Last updated October 30, 2026

This policy covers “consumer health data”, as defined by Washington’s My Health My Data Act (RCW 19.373) and similar laws in other states such as Nevada and Connecticut, that Invictus Logic LLC collects through the Chickpea app and this website. It adds to our privacy policy.

Consumer health data we collect, and why

CategoryWhat it includesWhy we collect it and how we use it
Food and nutrition logsFoods, amounts, meals and dates; the nutrient totals and food scores we calculateTo show your daily summary and history, and to build the meal plans and reports you ask for
Meal photos and descriptionsPhotos of meals and nutrition labels; meals you describe in your own wordsTo identify foods and amounts and log them for you
Chat conversationsYour questions to Ask Chickpea, its answers and the titles of your conversationsTo answer your questions and let you come back to them; deleted with your account
Diet, allergies and preferencesYour diet, foods you leave out, food allergies, and your weight goal (lose, maintain or gain weight)To filter meal plans and recipes and to size portions for your goal
Body details (optional)Birth year, height, weight and activity level, a goal weight and weekly pace, and the dated weight and height entries you save under Measurements, only if you add themTo estimate your daily calorie target and show how far you are from your goal weight. Never shared, never used for ads, never sent to an AI provider
Pregnancy or breastfeeding (optional)Whether you are pregnant or breastfeeding, and when you last answered, only if you choose to tell usOnly to switch off the calorie target and the weight-loss goal and to adjust the fiber reference while it applies. Never shared, never used for ads, never sent to an AI provider, never put in the reports you create
Cycle entriesPeriod days, flow and notesTo show your cycle log and include it in reports you create
Symptom entriesSymptoms you choose, mood and energy ratings, and notesTo show your symptom log and include it in reports you create
RemindersThe names you give reminders (for example a supplement or a medicine) and their timesTo schedule them on your phone
Use of the appThe fact that you have an account with an app for PCOS (PMOS)To provide your account and subscription

We don’t infer health conditions about you. The nutrient totals and food scores we calculate describe food, not you.

Where it comes from

We collect consumer health data directly from you when you enter it in the app, and from your device when you choose to share a photo or dictate a meal. We don’t buy health data and don’t collect it from data brokers or other companies.

Consumer health data we share, and with whom

We share consumer health data only with processors that act on our instructions under a contract, and only to provide the app you asked for:

  • Supabase (hosting and database): all the categories above.
  • Anthropic, through the Claude API (the app’s AI features): the meal, label and barcode photos and the meal descriptions you submit for analysis; for a recipe you ask for, your request with the meal, time limit, servings and calorie aim it should fit, and your diet, foods you leave out and allergies; for the chat, your messages with your diet, foods you leave out, allergies, weight goal, daily target numbers (neither while you have marked pregnancy or breastfeeding), your food log of the past 30 days as the chat needs it and today’s planned meals; for your weekly report’s summary, that week’s food numbers. Never your body details, your pregnancy or breastfeeding status, or your cycle and symptom entries.
  • Google, through the Gemini API (matching foods and the AI features' backup): the names and amounts of the foods the AI found, with the food-data entries to choose from; when Claude can't answer, what is listed for Anthropic above, for that request only. Never your cycle and symptom entries.
  • Apple (speech recognition): the audio of meals you dictate, if you use voice input.
  • RevenueCat (subscriptions): your purchase history, which shows that you subscribe to Chickpea.

We don’t share consumer health data with affiliates, advertisers or data brokers. We don’t sell it, and we don’t use geofencing.

Your rights and how to use them

  • Confirm and access. Ask whether we collect, share or sell your consumer health data, and get a copy of it together with a list of every third party and affiliate we have shared it with and how to contact them.
  • Withdraw consent to our collection or sharing of your consumer health data.
  • Delete your consumer health data. In the app, use Delete all my data & account under More, then Settings; it takes effect straight away. We also tell our processors to delete it, and copies in backups are overwritten within 30 days.

To make a request, use the app or email support@joinchickpea.com with “Health data request” in the subject line, from the email address on your account. We confirm requests by email to that address. Requests are free. We respond within 45 days and, if we need more time, we will tell you why within that period and take no more than 45 extra days.

Appeals

If we decline your request, reply with “Appeal” in the subject line. We will answer in writing within 45 days and explain our decision. If we deny your appeal, you can contact the Washington State Attorney General or the attorney general of your state.

Contact

Invictus Logic LLC
1444 Rhode Island Ave NW, Apt 212, Washington, DC 20005-5421, United States
support@joinchickpea.com