Consumer Health Data Privacy Policy
Kupaʻa, a product of Kupaa Labs LLC
Effective date: 26 July 2026 · Last updated: 26 July 2026
This notice supplements our main Privacy Policy for residents of Washington State and Nevada, under the Washington My Health My Data Act and Nevada’s consumer health data law (NRS 603A.500 to .560). Where a term is used here the way those laws define it, for example “consumer health data” or “sale,” we mean it that way. Everything in our main Privacy Policy still applies; this page adds the specific disclosures those two states require.
Consumer health data we collect
The health and fitness information you log in Kupaʻa or choose to connect: weight and body measurements, your food diary, your workouts, your steps, your sleep, your fasting windows, and your answers to our well-being screening. We also derive coaching values from that information, such as calorie targets, trends, and forecasts.
Why we collect it
Solely to provide the coaching you asked for: to sync your data across your devices, to keep the Service safe and appropriate for you, and to meet our legal obligations. We collect it because you asked us to, with your explicit and separate consent (see our Privacy Policy, Section 8), and only as much of it as we need to provide the features you use.
Where it comes from
You, directly. Apps you choose to connect, such as Health Connect. Files you choose to import, such as a MyFitnessPal export.
Who we share it with
Only the service providers that run Kupaʻa: hosting and database, sync, subscription management, account email, and, for a photo or a sentence you submit to the AI food features, transient reading by our AI provider. Each one is bound by contract to use your data only to provide their part of the Service. The full list, with what each one does, is in our Privacy Policy, Section 11.
We do not sell consumer health data, and we never have. We do not use it for advertising, and we do not share it for advertising.
Your rights
You can:
- See the consumer health data we hold about you.
- Withdraw your consent to its collection or processing, at any time.
- Have it deleted. We delete it from our own systems and instruct the service providers above to do the same.
- Exercise these rights without being discriminated against for doing so. Using them costs you nothing and does not change how the free tier works.
How to exercise them
Use the tools under You → Settings → Your data in the app, or email privacy@kupaa.fit. We aim to respond within 30 days. If we decline a request, you can ask us to reconsider by replying to say so. If you are still not satisfied, you may contact the Washington State Attorney General or the Nevada Attorney General.
How this relates to our main Privacy Policy
Everything else, including how long we keep things, how we protect them, and your rights under other laws, is covered in our full Privacy Policy. This page only adds what Washington and Nevada specifically require.