What we know about your health, and what you can do about it.

Consumer health data is information that identifies your past, present, or future physical or mental health status. On Mobieus that means the data inside mobieusHealth and the apps built on it, such as Loopa. It does not include your billing records, your forum posts, or the operational logs that keep the service running -- those are covered by the Privacy Policy.

Two kinds of consumer health data exist on Mobieus, and the second one is newer, so it gets named explicitly rather than folded into a general category.

All of it comes from you, one of two ways.

• You enter it. Logging a meal or a weight, answering the setup interview, editing an answer later, or confirming a change the coach suggested during a conversation.
• A device or service you connect. If you authorize a connection, we receive measurements from it: Withings, Oura, iHealth, and Apple Health or Health Connect on your phone. You choose whether to connect these, and disconnecting stops the flow.

We do not buy health data, receive it from data brokers, or infer it from your activity elsewhere. Nothing in your coaching profile is written by the AI. The coach cannot add to or change your profile on its own. If you mention something during a conversation that belongs in it, the coach may offer to save it, and it is saved only if you confirm -- recorded as having come from that confirmation, with the date.

• To run the features you are using -- calculating your targets, drawing your trends, tracking streaks and goals.
• To personalize the AI coach, so that it can speak to your actual reason for being here, follow the coaching style you asked for, and plan around obstacles you named rather than discovering them after they derail you.
• To show you, in the app, what the coach has been told about you.

We do not use consumer health data for advertising, ad measurement, attribution, or audience building. It is not sent to any advertising or analytics platform. It is not used to train any AI model, ours or anyone else's.

We do not sell consumer health data. We have never sold it and we do not seek the authorization that selling it would require.

Two kinds of third party can see it, and only to deliver something you are using. The first applies to everyone; the second applies only if you joined through a Loopa Coach and turned sharing on yourself.

• Anthropic PBC, as the AI provider behind the coach and the other AI features. When you send the coach a message, the relevant part of your profile and your recent numbers are included in that request so it can answer in your terms. This happens per request. We do not store your health data with Anthropic, and Anthropic is contractually barred from training its models on anything we send through its API. Anthropic deletes what we send within 30 days; a request flagged for breaking their usage rules is kept for up to 2 years. We do not have a zero-retention agreement with them, so we will not tell you they keep nothing. Before the coach or the eating-out helper sends anything, the app shows you what is about to go (the list is assembled from your own record, so a detail you have never entered is never named) along with why it is needed and both of the statements above. You can decline, at no cost to anything else, and either feature can be switched off for good under More › Preferences › Your Data.
• Your Loopa Coach, if you have one. A coach is an independent person, not our employee, and they are paid a commission on subscriptions that begin through their link. We therefore treat what they can see as a disclosure to a third party rather than an internal one. You get a coach by tapping a link they gave you, either when you sign up or, since 20 August 2026, at any time after. Nothing reaches them until you switch it on. The consent screen starts with every category off, you choose them one at a time from weight, activity, fasting, nutrition, cycle, supplements and streaks, and you can switch any of them off at any moment. Switching one off cuts their access to that category including the history, not just what you log afterwards. Every time your coach opens one of your categories it is recorded, and you can read that record yourself in the app under “Who looked, and when”; it distinguishes your coach glancing at their list of clients from your coach opening you and reading. Blocking or leaving your coach cuts all of it immediately, and affects neither your subscription, nor your price, nor your access to their forum. A coach cannot change anything in your account: a meal plan they build is an offer you accept or turn down, and what they can send you is rate-limited. A coach gives general wellness guidance, not medical advice.

Beyond that: no data brokers, no advertisers, no sale, no sharing for anyone else's marketing. We may disclose information if the law requires it, as described in the Privacy Policy.

If you use Mobieus through an organization that runs its own tenant, that organization administers your account. Your coaching profile is not readable by other members of your tenant, and no other member can read your health data unless you have deliberately shared it with them, through a buddy, an accountability partner, or a Loopa Coach whose link you used.

Your health entries and your coaching profile are encrypted per member: each member's health record is encrypted with a key derived for that member alone, so one member's data cannot be read with another member's key. Deleting your account destroys the key, which renders the data unrecoverable rather than merely hidden.

What that encryption does and does not do. Your key is wrapped by a platform key held on our servers, not by any passphrase of yours. It defeats a stolen database, a stolen backup or a stolen disk. It does not put your record beyond our own reach: a small number of our staff, working on the server itself, can decrypt it, and we would rather say so than let the word “encrypted” do work it has not earned.

Access by our staff is limited to what support and operation require. Nobody here can open a member's record without first choosing a reason from a fixed list, and the read is written to a record that cannot be edited or removed by anyone, including us. That record is now yours to read, under More › Preferences › Your Data, with the role, the date, what was opened and the reason given. If nobody has opened your record, it says so.

You do not have to file a request to exercise most of these. They are buttons in the app.

You can also make a formal request -- to access, delete, or withdraw consent -- through our data subject request form, or by emailing [email protected]. We do not discriminate against you for exercising any of these rights. If we deny a request you may appeal by replying to our decision; if the appeal is denied you may contact your state Attorney General.

Health entries and coaching answers are kept while your account is open, because the point of the product is a record that goes back. When you delete a single answer it is removed at that moment. When you delete your account, the account enters a 30-day grace period during which you can change your mind, and is then destroyed along with the encryption key that makes the data readable.

The coach gives general guidance about nutrition, activity, sleep, stress, and habit change. It does not diagnose, does not treat, and does not advise on medication. Anything medical is pointed back to your own clinician, and personalization does not change that -- knowing more about you is not a reason to answer a question that belongs to your doctor.

It also does not soften the truth to suit you. If you ask it to only tell you good news, it will follow your tone preference and still tell you when something is not working.

Questions about this policy, or about consumer health data specifically, go to [email protected]. Our general practices are described in the Privacy Policy, and requests can be filed at /dsar.

If we make a material change to this policy we will post the updated version here and change the date at the top before the change takes effect.