Skip to the main content

Consumer Health Data Privacy Policy

Last updated 12 October 2026

This page is only about your health information: what Build Your Pillars keeps, why, who else receives it, and how you stay in control. Our general Privacy Policy covers everything else, such as your email address and the waiting list. Build Your Pillars is for people 18 and older.

We follow the Washington My Health My Data Act for everyone, wherever you live. Where the privacy laws of the European Union, Canada or India ask for more, we follow the stricter rule for everyone. Build Your Pillars is a consumer app. It is not a doctor, a clinic or an insurer, and the US health privacy law known as HIPAA does not apply to it.

What health information we collect, and why

We keep the health information you choose to enter, so the app can show you your own days, goals and trends. We ask for your clear yes before we start, when you create your account. You can take it back at any time.

  • Your daily log: exercise, steps, standing hours, active calories, sleep, time in bed, time awake, water, calories eaten, and any notes you write. Why: to show your days, goals and trends.
  • Mood, energy, stress and feelings: scores from 1 to 5, and feelings you pick from a list. Why: to show how you felt alongside your habits, and to find patterns for you.
  • Where you were: a city name and a map position rounded to about 11 kilometres, for each day you log. We never keep an exact position. Why: to attach the weather for that day.
  • Weather for your logged days: temperature, air quality and similar details for that rounded place. It is not about your body. We keep it next to your entries so Insights can show what tended to go together.
  • Your goals: the goals you set. Why: to show your progress against your own goals.
  • Gentle check-ins: the dates a check-in was offered or taken, and, only if you answer, the scores, including the score for one question about thoughts of self-harm. We never keep your written words from a check-in. Why: so you can look back on how you have been, and so a check-in is not offered too often. You can turn check-ins off in Settings.
  • Your birth month and year (never the day), one first name you choose, and, if you want, a home city. These are not health information on their own, but they sit next to it, so we protect them the same way. Why: to set your plan (free from age 60), to greet you, and to show weather on days you do not share your location.

We use this information for these purposes only. We do not use it for advertising, for research, to train AI models, or for anything else. If we ever want to collect a new kind of health information, or use it for a new purpose, we will update this page first and ask for your yes before we do.

What is necessary to run the app is your email, password, first name, birth month and year, and whatever you decide to log. Everything else is a choice you make, and the app still works without it.

Where it comes from

  • You, when you type it in.
  • Your phone, if you use the phone app and choose to bring in your last days from Apple Health or Health Connect. Nothing is read until you start that.
  • Your device, for your location, only if your browser or phone asks and you say yes. If you say no, we use your home city or no place at all.
  • A weather service, which supplies the weather for the rounded place and date.

Who receives it

We name every company or person who can receive your health information, and say what each one gets. Sharing with a person you invite, or with an AI, always needs its own separate yes from you, apart from the yes you gave to keep your information.

Companies that work for us (processors)

  • Supabase (United States): stores your account and everything above, and handles sign-in. It gets all of it, because that is where it is kept. Supabase works under our instructions.
  • Vercel (United States): hosts this website. Your entries do not go through it. It sees the internet address and browser type of people who open a page.
  • Anthropic (United States), only if you say yes to AI help: it receives the date, what you logged that day as plain sentences, your mood, energy and stress as words (such as “mood okay”), the feelings you picked, and, for the weekly note, the same for seven days plus your goals. It does not receive your name, email, notes, location, weather or check-in answers. On a hard day, for example very low mood, we send nothing and show a fixed, caring message instead. We do not save the reflection or what was sent. Anthropic handles the request under its own terms.

Weather services your browser contacts

  • Open-Meteo: receives your rounded map position, the dates needed, any city name you type into the search, and your device’s internet address. It does not receive your name, email or anything you logged.
  • BigDataCloud: only when you log today and allow your device to share its location. It receives the rounded map position and your internet address, and tells us the city name. It does not receive your name, email or anything you logged.

A person you choose

  • The person you invite (for example a partner or a caregiver), only after you say yes for that person: they see your first name and the pillars you tick (Drink, Sleep, Move, Balance). You choose how much they see: only that you logged a day, a weekly summary in words, or day-by-day detail. Balance is mood, energy and stress, and is off unless you tick it. They never see your notes, your feelings list, your places or your check-in answers. They cannot change anything. You can pause or end the sharing at any time and it stops at once, and you can see on which days they looked. The invitation ends by itself after 14 days if they do not accept.

Payments. We have no payments yet. If we add paid plans, a payment company (Stripe) will receive your email address and payment details to take the payment. It will never receive your health information. We will update this page first.

Want this list in a message? Email hello@buildyourpillars.com and we will send it. We do not share your health information with advertisers, insurers, employers, data brokers or health care providers.

What we never do

  • We never sell your health information. Not for money, and not for anything else of value.
  • We do not use geofencing. We never draw a map boundary around a clinic or other health care place to find, follow, or send messages to people.
  • We do not show ads, and the app contains no advertising or analytics tools.
  • We do not change what you can do, or what you pay, because you used one of your privacy rights.

Your choices, and how to use them

You can do these things yourself in the app, or by emailing hello@buildyourpillars.com. We answer within 30 days. The law in Washington allows 45, and we ask more of ourselves. If we truly need more time, we will tell you why inside the first 30 days, and we will take no more than 30 extra days. We will ask you to reply from the email address on your account, to be sure it is you. You never need to make a new account to ask. Your first two requests each year are free.

  • See your data: in Settings, choose “Download all my data”. You get a file you can keep and take elsewhere.
  • Know who has it: the list is on this page, under “Who receives it”. Email us for a copy that names the people you invited.
  • Correct it: change your name and home city in Settings, and edit any day you logged.
  • Delete it: in Settings, choose “Delete my account”. It removes your sign-in, your profile, your logs, goals, weather records, check-ins and sharing records, and this cannot be undone. We tell our processors by removing what they hold for us. Copies in our database provider’s backups expire on their own schedule, and under Washington law no later than six months after we confirm your request. We will not restore a deleted account. You can also delete your check-in history by itself.
  • Take back a yes: turn off AI help or the news emails in Settings, end any sharing there, or turn off gentle check-ins. To take back the yes that lets us keep your information, delete your account or email us. Taking a yes back does not undo what happened before.
  • Ask us anything about this page: email hello@buildyourpillars.com.

If you disagree with our answer

If we say no to a request, or you think we got it wrong, you can appeal. Email hello@buildyourpillars.com with the word “Appeal” in the subject line and tell us what you want changed. We will answer in writing within 30 days and explain why. The Washington law sets 45 days, and we ask more of ourselves.

If we still say no, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint. You can also complain to your own local privacy authority; see the Complaints part of our Privacy Policy.

Changes to this page

If we change what we collect, why, or who receives it, we will update this page and its date first, and ask for your yes in the app before the change starts. Earlier versions are available if you email us.