Consumer Health Data Privacy Policy

Last Updated: September 21, 2026

This Consumer Health Data Privacy Policy explains how OriginMind Inc. ("moonbelt", "We", "Us", "Our") collects, uses, and shares consumer health data in connection with the moonbelt mobile application and related services (the "Service"). It supplements Our Privacy Policy and is provided to satisfy the requirements of the Washington My Health My Data Act and Nevada's consumer health data law (SB 370). Where those laws apply, the rights and disclosures in this policy apply to You; We extend the same handling practices described here to all users, wherever You live.

1. Consumer Health Data We Collect

"Consumer health data" means personal information that is linked to You and identifies Your past, present, or future physical or mental health status. Through the Service, We collect the following categories, each of which You provide by choosing to use the relevant feature or by granting a permission You can revoke:

Steps, workouts, and sleep are three separate permissions that You control independently. You may enable any one of them without enabling the others, and turn any of them off at any time. Section 4 of Our Privacy Policy lists the exact data types We read from each platform, and the categories We do not read.

Categories We do not ask for. The Service has no feature that asks for or reads reproductive or sexual health information, menstrual cycle data, gender-affirming care information, mental health diagnoses or treatment records, substance use information, medications, clinical or medical records, lab or blood test results, genetic data, heart rate, blood pressure, blood glucose, or blood oxygen. We do not collect biometric identifiers or precise geolocation. The AI coach accepts free text, so if You choose to mention a health condition or medication in a message, that message, and any AI coach memory created from it, is processed and protected as described in this policy.

2. Sources of Consumer Health Data

We collect consumer health data from three sources only:

We do not purchase consumer health data, and We do not collect it from data brokers, advertisers, or public sources.

3. Why We Collect It and How We Use It

We collect and use consumer health data only to provide the Service You request:

We do not use consumer health data for advertising. We do not sell it. We do not use identifiable consumer health data to train AI models without Your explicit, separate consent, and Google, Our AI provider, is contractually prohibited from using Your content to train its models. We may use de-identified data that cannot reasonably be re-linked to You to improve the Service, including its AI features.

We also do not use consumer health data to determine Your eligibility for employment, insurance, credit, or lending, and We do not share it with employers, insurers, or credit or lending providers. We do not publish or socially share Your health data, and no feature of the Service posts it anywhere automatically or without Your action. The app can compose a daily summary or a streak for You to send through Your device's own share sheet; when You use it, You choose what is shared and where it goes.

4. Consent

We collect consumer health data with Your consent, which You provide when You choose to enter it into the Service or grant a device permission (such as HealthKit or Health Connect access). We do not collect consumer health data beyond what is described in this policy, and We do not use it for purposes other than those listed above without first asking for Your consent.

Consent is granular. Steps, workouts, and sleep are requested separately, and declining one does not affect the others or Your access to the rest of the Service. Every feature that reads from Your health platform is optional; moonbelt is fully usable with no health platform connected at all.

AI features. Before any consumer health data is sent to Google, Our AI provider, the app asks for Your permission and names Google. Declining does not affect features that do not use AI. You can withdraw permission at any time at Profile → App Settings → AI Features, after which nothing further is sent to Google.

New categories. If We ever wish to collect a category of consumer health data not listed in Section 1, We will update this policy and obtain Your consent before collecting it. We will not begin reading a new health platform category on the strength of a permission You granted for a different one.

You may withdraw consent at any time by turning off an individual category at Profile → Connect Device in the app, turning off Profile → App Settings → AI Features, deleting the relevant data in the app, revoking HealthKit or Health Connect permission in Your device settings, or deleting Your account (see Section 6). You may also hide an individual workout or sleep session from moonbelt without deleting it from Your health platform.

5. How We Share Consumer Health Data

We share consumer health data only with service providers (processors) acting on Our behalf and on Our instructions, in these categories:

Each provider is bound by a data processing agreement, may process Your data only to provide its service to Us, and may not use it for its own purposes. We have no affiliates with whom We share consumer health data. We do not share consumer health data with advertisers, data brokers, or marketing partners.

We may also disclose consumer health data if required by law (for example, a valid court order), or as part of a business transfer such as a merger or acquisition, in which case the recipient remains bound by commitments at least as protective as this policy.

6. Your Rights

If You are a Washington or Nevada resident (and wherever these rights apply), You have the right to:

To exercise any right: email privacy@moonbelt.ai from the email address linked to Your account, or use Profile → App Settings → Delete Account in the app for deletion. We verify requests using the email address associated with Your account. We will respond within 45 days; where reasonably necessary, We may extend once by a further 45 days and will tell You if We do.

Account deletion removes Your consumer health data, including AI coach conversations and AI coach memory, from Our active systems immediately, and copies in Our backups are erased within 30 days. Usage analytics and crash logs held by Our service providers are not deleted immediately and expire under the retention periods in Section 7 of Our Privacy Policy. De-identified nutrition label photos and shared food database entries remain, as described in Section 5 of that policy. Exercising Your rights will never result in discrimination or a denial of the Service, though deleting data that a feature depends on may limit that feature.

7. Appeals

If We decline to act on a request, You may appeal by replying to Our response or emailing privacy@moonbelt.ai with the subject line "Consumer Health Data Appeal". We will respond to Your appeal within 45 days with a written explanation.

If Your appeal is unsuccessful, You may contact Your state attorney general:

8. No Sale, No Advertising, No Geofencing

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced through the app or by email before taking effect, and the date above will be updated.

10. Contact Us

OriginMind Inc.
3265 Carding Mill Trail, #415, Oakville, Ontario Canada
Email: privacy@moonbelt.ai