AIM — Consumer Health Data Privacy Policy

Effective date: August 25, 2026

This policy explains, specifically, how AIM ("we," "us," "our") handles consumer health data — information that identifies or relates to your physical health status, such as your weight, height, activity level, and the health-related goal you tell us (lose weight, build muscle, or maintain). This is a separate, more specific policy than our general [Privacy Policy], required because a few states — including Nevada and Washington — have laws that apply specifically to health data, regardless of how small a company is.

1. What health data we collect, and where it comes from

We collect the information you type into our questionnaire yourself: your weight, height, age, sex, activity level, and your stated goal (lose weight, build muscle, or maintain). We also generate a small amount of derived health data from that — for example, your daily calorie and macronutrient targets — using a standard public formula (the Mifflin-St Jeor equation). We do not collect health data from any other source (no fitness trackers, no health records, no third-party data brokers).

2. Why we collect it

Only to do the thing you signed up for: calculate your calorie and macro targets, and build a weekly meal plan and grocery list around them. We don't use it for anything else.

3. Who we share it with

We do not sell your health data, and we do not share it with any third party for their own purposes. The only "sharing" that happens is the ordinary, behind-the-scenes kind needed to run the service itself — for example, sending your weekly plan through our email or text-message provider so it can reach your inbox or phone, or using an AI provider to help generate your plan's content. Those providers process your data only to deliver AIM's service to you, under their own confidentiality/security terms, and are not permitted to use it for their own purposes. If this ever changes — if we ever want to share health data with a third party for a different purpose — we will update this policy first and ask for your separate, explicit consent before doing it, as required by law.

4. How we process it

Your answers are used, automatically, to run the Mifflin-St Jeor calculation and to generate a meal plan (either by an AI model or, if no AI connection is configured, a small built-in sample recipe list). Your current plan and answers are stored so you can view your plan again and swap out meals you don't want. We do not run any additional profiling, advertising targeting, or health-scoring beyond what's needed to build your plan.

5. How long we keep it

We keep your answers and your current plan for as long as you have an account, so you can come back and view your plan.

If you stop using AIMeals, we delete everything you gave us automatically — you don't have to ask:

• If you started a signup but never completed payment, after 90 days of inactivity.
• If you subscribed and later cancelled, after 365 days of inactivity. You get longer because you were a customer, and because you may come back to the plans you built.

Two exceptions, both in your favour: while your subscription is active nothing is deleted on a timer, and if you have asked us to email you, we keep your contact details until you tell us to stop. You can always delete everything immediately using the button described below, without waiting for either window.

6. Your rights, and how to use them

You can, at any time:

• See what we have. Ask us to confirm what health data we've collected about you.
• Ask who it's gone to. As explained in Section 3, that list is short — just the providers needed to run the service — and we'll confirm this on request.
• Stop it. Ask us to stop collecting, using, or sharing your health data going forward (this generally means ending your subscription, since the data is what the plan is built from).
• Delete it. Ask us to delete your health data entirely. You can do this yourself, instantly, from your plan page using the "Delete my data" button — no need to email anyone. If you'd rather email us, use the contact info in Section 9 and we'll delete it within a reasonable time.
• Withdraw your consent. Since you gave consent by checking a box at sign-up, you can withdraw it the same way you can delete your data — see above.

We don't require you to create a password-protected account to do this — your plan link itself is treated as your access credential, so keep it private.

7. Tracking across sites

AIM does not use any third-party tool that tracks you across other websites or services over time in order to build a profile of you. [Confirm this stays true before launch — if AIM ever adds ad-tracking pixels, analytics tools that build cross-site profiles, or similar, this section needs to be updated and a fresh disclosure/consent may be required.]

8. Changes to this policy

If we make a material change to what we collect, why, or who we share it with, we'll update the effective date above and, [if we have your email/phone on file, notify you directly] before the change applies to your existing data.

9. Contact us

Questions, or want to exercise any right above by hand instead of using the in-app button? Contact us at support@myaimeals.com or PO Box 544, Spanish Fork, UT 84660.

---

This policy is written to meet the requirements of Nevada's consumer health data law (NRS 603A.400-550) and Washington's My Health My Data Act, since neither law has a small-business exemption — it applies from AIM's very first customer in those states. See LICENSING_AND_PERMITS.md for the full research and sourcing behind this.