John Teasdale Appverse

Sensitive data notice

Consumer Health Data Privacy Policy

This distinct notice describes the consumer health data handled by Appverse health features and how to exercise health-data rights.

Effective and last updated August 29, 2026

Terms of Use Privacy Policy Consumer Health Data Policy

1. Scope

This Consumer Health Data Privacy Policy applies to consumer health data processed by JohnTeasdale.com health-coaching experiences, Cohealer, Trace/Track, and any other John Teasdale Appverse Service that links directly to this policy (the “Health Services”).

Consumer health data means personal information that identifies or can reasonably be linked to a person and identifies that person’s past, present, or future physical or mental health status, health condition, treatment, medication, bodily function, health-related measurement, or attempt to obtain health services or products, including information inferred from other data.

This notice does not apply to deidentified information, information governed by an applicable medical-privacy law instead, or information processed solely in an employment context, such as Kelstar employee onboarding, where an applicable consumer health law excludes it. The general Privacy Policy still applies to other personal information.

2. Consumer health data we collect

Depending on the Health Service and feature you choose, we collect:

  • Health conditions and concerns: symptoms, symptom severity, diagnoses or suspected conditions you describe, health goals, wellness concerns, and narrative notes.
  • Nutrition and bodily-function information: foods, ingredients, meal images, estimated calories or macronutrients, water intake, digestive or other bodily-function information, and timestamps.
  • Clinical and measurement information: lab reports, biomarkers, test values, medications, supplements, treatment information, health history, and documents submitted by you or an authorized practitioner.
  • Derived health information: normalized symptom or food labels, confidence values, AI-generated estimates, document extraction, associations, summaries, decision-support output, or other inferences produced from submitted health data.
  • Associated identifiers: Appverse account identifier, name, email, file identifier, practitioner or practice association, and security metadata needed to keep the health record connected to the correct authorized user.

We do not collect every category from every user. A feature receives the information you enter, upload, or direct an authorized person to provide.

3. Sources

We collect consumer health data from:

  • you, when you type a health entry, select a severity, upload a food image or clinical document, describe a health concern, or otherwise use a Health Service;
  • a clinician, practitioner, practice administrator, or other person you authorize to submit or manage information through a Health Service;
  • documents, lab reports, images, or other records submitted to the Health Service; and
  • our processing of those inputs, including rules, calculations, document extraction, and AI-generated estimates or interpretations.

4. Why we collect and use it

We collect and use consumer health data to:

  • provide the health log, clinical decision-support, food analysis, document processing, health-coaching, export, and other feature you request;
  • display your history, measurements, structured results, and reports to you or an authorized practitioner;
  • authenticate and authorize access, keep records separated by account or organization, and prevent misuse;
  • diagnose errors, maintain reliability, respond to support requests, and secure the Health Services;
  • comply with law, professional obligations, or a valid legal request; and
  • with your separate consent where required, provide another purpose disclosed before collection or sharing.

We do not use consumer health data for advertising, data-broker profiles, determining eligibility for credit or insurance, or another unrelated purpose. We do not use geofences around health-care facilities to identify, track, collect data from, or send health-related messages to people.

5. Consumer health data we share

The categories of consumer health data we may share are health conditions and concerns; nutrition and bodily-function information; clinical and measurement information; derived health information; and associated identifiers. We disclose only the portion needed for the purpose described in Section 4. We may share those categories with:

  • Cloudflare, which provides network security, Worker execution, D1/KV/R2 storage, and AI gateway or inference services used by the Health Services;
  • database and storage providers configured for a particular Health Service, including managed database or object-storage infrastructure;
  • AI model providers available through the configured Cloudflare AI service or gateway, which process the image, document, text, and context needed to return the requested analysis;
  • operational analytics providers, including PostHog where enabled, which may receive device, page, event, and interaction metadata showing use of a health-related feature, but are not authorized to use it for advertising;
  • an authorized clinician, practitioner, practice, or account administrator when the Health Service is provided through that relationship or when you direct the disclosure;
  • another recipient you choose, such as when you export or share a health record; and
  • legal or safety recipients when disclosure is necessary to comply with law, preserve legal rights, prevent fraud or abuse, or protect a person or system.

John Teasdale does not have a separate affiliate, as that term is defined by applicable consumer health law, with which we share consumer health data.

The exact AI model or database provider can change with Service configuration. Before a Health Service shares consumer health data for a new purpose that is not necessary to provide the feature you requested, it will disclose that purpose and request the consent required by applicable law.

We do not sell consumer health data. We do not exchange it for money or another valuable benefit. If that practice changes, we will first obtain the separate, signed authorization required by applicable law.

6. Your consumer health data rights

Subject to applicable law and verification, you may:

  • confirm whether we collect, share, or sell your consumer health data and access that data;
  • receive a list of third parties and affiliates with whom your consumer health data was shared or sold, including available contact information;
  • withdraw consent for future collection or sharing;
  • request deletion of consumer health data held by us and applicable processors; and
  • appeal our refusal to act on a request.

Submit a request or appeal to jpteasdale@gmail.com and identify the Health Service involved. You do not need to create a new account to make a request, although we may ask you to use an existing account or provide information needed to verify your identity and protect the record. An authorized agent may act for you where permitted, subject to proof of authority.

When we grant a deletion request, we delete the covered data from active systems and notify applicable processors, affiliates, and third parties to do the same, subject to a legal exception. Deletion from archived or backup systems may be delayed for up to six months where applicable law permits.

We will respond without undue delay and, when Washington’s My Health My Data Act applies, within 45 days. We may extend once for up to 45 additional days when reasonably necessary and will tell you why within the first response period. Covered requests are free up to twice per year unless a request is manifestly unfounded, excessive, or repetitive.

If we refuse a request, reply to the decision or email the same address with the subject “Consumer health data appeal.” We will provide a written appeal decision within 45 days when Washington law applies. If we deny the appeal, you may submit a complaint to the Washington State Attorney General or the regulator available where you live.

We will not unlawfully discriminate against you for exercising a right. Withdrawing consent may prevent us from providing a feature that requires the affected data.

7. Contact

Questions, requests, withdrawals, and appeals may be sent to John Teasdale at jpteasdale@gmail.com.

Questions or privacy requests: jpteasdale@gmail.com