Consumer Health Data Privacy Policy - Ava Habit Tracker

Last updated: 4 June 2026

This Consumer Health Data Privacy Policy applies specifically to “consumer health data” that the Ava Habit Tracker app (package com.mk.ava) collects, and is provided to meet the requirements of the Washington My Health My Data Act (MHMDA), the Nevada consumer health data law (SB370), and similar U.S. consumer-health-data laws. It supplements, and should be read together with, the general Privacy Policy. The party responsible for this data is Maximilian Keppeler (an individual developer based in Germany); you can contact me at me@maxkeppeler.com.

What consumer health data I collect

Ava Habit Tracker is not a medical app and does not provide medical advice. It does not automatically collect health data and does not infer your health status. The only health-related information collected is what you choose to enter when you set up and log habits that you decide to track. Depending on the habits you create, this may include:

physical activity and exercise (for example workouts, steps, distance, duration);
body weight and measurements;
food, calories, water and other intake you log;
habits related to quitting or reducing smoking, alcohol, or similar behaviours;
free-text notes or journal entries you write about these habits.

Sources, purpose, and how collection happens

The source of this data is you — you enter it manually and voluntarily. I collect and use consumer health data for a single purpose: to provide the habit-tracking service you requested (storing your entries, syncing them across your devices, and showing you your own progress, streaks, and statistics). Because you choose what to enter and when, your decision to log this information is your affirmative, opt-in consent to its collection for that purpose. I do not use it for advertising or any unrelated purpose.

Who it is shared with

I do not sell your consumer health data, and I do not share it with any third party for that party’s own purposes. The only entity that processes it is my service provider Google Firebase (Google Cloud), which stores and syncs the data strictly on my instructions as a processor and not for its own purposes (Firebase privacy). I have no affiliates with whom consumer health data is shared. I would never sell this data, and I would not share it with anyone for their own use without first obtaining your separate, valid written authorization.

Your rights

If your consumer health data is covered by these laws, you have the right to:

confirm and access the consumer health data I have collected about you, including a list of any third parties or affiliates it was shared with (currently: none);
delete your consumer health data — you can do this yourself in the app (Settings → Delete data or Delete account; see the data & account deletion page), or by emailing me;
withdraw your consent to the collection and use of your consumer health data at any time — simply stop logging it and delete the entries you have made.

To exercise any of these rights, use the in-app controls or email me@maxkeppeler.com. I will respond without undue delay and within the time required by law (and in any event within 45 days, with one extension where reasonably necessary). I will not discriminate against you for exercising these rights.

Appeals

If I decline to act on your request, I will tell you why and how to appeal. If your appeal is denied, you may contact the Attorney General of your state — for example, the Washington State Attorney General or the Nevada Attorney General.

Changes and contact

I may update this policy; material changes will be shown by the “Last updated” date above. For any question about your consumer health data, contact me at me@maxkeppeler.com.

This policy is effective as of 4 June 2026.