App Family Consumer Health Data Privacy Policy
This policy describes how Pippa LLC ("we") collects, uses and shares consumer health data in its app family, and the rights you have over it. It is provided for all users, including as required by Washington's My Health My Data Act and Nevada's consumer health data law. It supplements the App Family Privacy Policy; if they ever differ, the one that protects you more applies.
The app family is fourteen apps made by Pippa LLC: the companion apps Soli, Kipi, Momo, Lumi, Rumi, Miya and Nomi, and the structured apps Vela, Aven, Onda, Sero, Talo, Elio and Aster. Pippa and Nuro have their own documents, linked from the policies page.
1. The consumer health data we collect
Each app is about a health condition, so the entries you save, and the fact that you use the app at all, are consumer health data. By app:
| App | For | What you can save | Optional features that send something off your phone |
|---|---|---|---|
| Soli | POTS and dysautonomia | Drinks and amounts, salt, symptoms such as dizziness, palpitations, brain fog or fainting with how strong they were, your position and what was going on (heat, illness, poor sleep, your cycle, activity), compression wear, movement, and help requests | AI chat (adults only) |
| Vela | POTS and dysautonomia | The same kinds of entries as Soli | None |
| Kipi | Diabetes | Meals and the carbs you enter, glucose readings you type or choose to import, whether a medicine was taken as planned, movement, lows and how they were handled, symptoms, help requests, and questions for your visits | Barcode lookup, AI chat (adults only), reading glucose and workouts from Apple Health or Health Connect if you allow it, speech-to-text that runs on your phone |
| Aven | Diabetes | The same kinds of entries as Kipi, typed in | None |
| Momo | Weight-loss surgery | Your program phase, drinks, protein, supplements taken or missed and why, meals, how food sat (for example nausea, reflux or food feeling stuck), and help requests | Photo naming, barcode lookup, AI chat (adults only) |
| Onda | Weight-loss surgery | The same kinds of entries as Momo | None |
| Lumi | Digestive health (IBS) | Meals and portion size, symptoms such as bloating or pain, stool form and flags (including blood or black stool), food reintroduction results, context such as sleep or stress, and help requests | Photo naming, barcode lookup, AI chat (adults only) |
| Sero | Digestive health (IBS) | The same kinds of entries as Lumi | None |
| Rumi | Recovery after a procedure | Medicines taken or missed, meals and drinks and how much you managed, symptoms such as fever, wound changes or pain, caregiver tasks, your recovery phase, and help requests | Photo naming, barcode lookup |
| Talo | Recovery after a procedure | The same kinds of entries as Rumi | None |
| Miya | Nutrition during cancer treatment | Treatment, hospital and rest days, whether you could eat, tube or IV feeds given as planned or not, symptoms such as nausea, mouth sores or fever, and which temperatures, textures and flavors you can manage | Photo naming, barcode lookup |
| Elio | Nutrition during cancer treatment | The same kinds of entries as Miya | None |
| Nomi | Eating well as an older adult | Meals eaten, partly eaten or skipped, protein foods, drinks, supplements, what made eating hard (for example chewing, cost, eating alone or feeling low), who you ate with, and symptoms | Photo naming, barcode lookup |
| Aster | Eating well as an older adult | The same kinds of entries as Nomi | None |
Across all of the apps, consumer health data also includes:
- Help requests, messages with your care team, and visit summaries you choose to share
- Plans, routines and reminders your care team sets for you
- Records of the data-sharing agreements you signed or ended with a care team
- In Kipi, Soli, Momo and Lumi, what you type into AI chat, and automated crisis-safety signals from it
- Your account email and device details (installation identifier, time zone, push token) when linked to the above
We collect no precise location and do no biometric processing. Meal photos and AI chat history stay on your phone.
2. Where it comes from
- You: what you log, type or send in the app.
- Apple Health or Health Connect: glucose readings and workouts, in Kipi only, and only if you allow it.
- Generated from your content: a short food name from a meal photo, chat replies, and safety signals.
- A care team you connect: plans, routines, reminders and messages they set for you.
- Your device: installation identifier, time zone, and push token.
3. Why we collect and use it
Only to provide the app you asked for:
- Keeping your record and syncing it to your account
- Sharing your record with a care team after you connect and agree, and their care features
- The optional features you use: photo naming, barcode lookup, AI chat and health data import
- Crisis-safety detection and alerts, as described in AI chat safety
- Notifications, account security, and records the law requires us to keep
We do not use consumer health data for advertising, for marketing to others, or to train AI models.
4. Who receives it
We do not sell consumer health data, and we never have. We have no affiliates. Consumer health data is shared only with:
- A care team you connect, after you sign a data-sharing agreement you can end at any time in the app.
- Service providers acting on our instructions: Amazon Web Services (database, sign-in), Cloudflare (application server), OpenAI (AI chat, moderation and photo naming; API content is not used to train their models), and Apple and Google (push notifications and subscriptions). Open Food Facts receives only a barcode number, never your health data. The full list is on our subprocessors page.
- Authorities, only when validly required by law, and only what is required.
5. Your rights
At any time and for free, you may:
- Confirm and access the consumer health data we have about you, including a list of every third party and service provider it has been shared with and how to contact them.
- Withdraw consent to collection or sharing, including ending a care team's access in the app.
- Delete your consumer health data. See Delete your account.
Use the in-app controls or email pippa.app.general@gmail.com from the address on your account. We verify requests, respond within 45 days (extendable once by 45 days with notice), and never discriminate against you for using your rights. If we decline, you may appeal by replying to our answer; we answer appeals within 45 days. If your appeal is denied, you may contact your state Attorney General (Washington residents: atg.wa.gov).
6. A note on HIPAA
When you use an app through a participating clinic or health system, the records held for that provider may be protected health information governed by HIPAA and the provider's Notice of Privacy Practices, with Pippa LLC acting as their business associate. This policy covers the consumer health data we hold outside that relationship.
7. Changes and contact
Material changes are announced in the app and apply only going forward; a new use of health data already collected needs your consent. Questions or requests: pippa.app.general@gmail.com. Pippa LLC.