Health Data Privacy Notice

Last Updated: Monday July 21st 2025

This Health Data Privacy Notice supplements the MetPsy Privacy Notice here and provides additional information about how we collect, use, and disclose health data as required by laws like Washington’s My Health My Data Act and Nevada’s Consumer Health Data Privacy Law.

COLLECTION OF HEALTH DATA
We collect information about your diet, sex, weight, mental health, diagnoses, symptoms, and medication use. We also collect information through third party integrations, including fitness tracker data (such as steps taken, calories burned, and hours slept) and information about your glucose levels.

SOURCES OF HEALTH DATA
We collect health data directly from you when you create an account, request customer support, use the Service, or otherwise communicate with us. We also collect health data through third party integrations you connect to your Services account.

USE OF HEALTH DATA
We collect and use health data for the following purposes:
– Service Delivery: to provide and maintain our Services, including to assess whether you are a good candidate for the Services, connect you with our metabolic mental health coaches, and advise you on your metabolic mental health.
– Protection and Compliance: to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of MetPsy and others, and comply with our legal and financial obligations.
We may use health data for other purposes with your consent as required by law.

SHARING OF HEALTH DATA
We may share each of the categories of health data described above with the following categories of third parties:
– Vendors: vendors, service providers, contractors and consultants that need this information to provide services to us may access health data. For example, companies that assist us with web hosting and customer service may need access to health data to provide those functions.
– Legal Authorities: we may disclose health data to legal authorities and others for the purposes described in the Protection and Compliance sub-section above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of MetPsy, our users, the public, or others.
– Corporate Transactions: we reserve the right to disclose health data in connection with, or during negotiations of certain corporate transactions, including the merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
– Affiliates: we reserve the right to disclose health data between and among MetPsy and any current or future parents, affiliates, subsidiaries, and other companies under common control and ownership.
– Consent: we may disclose health data when we have your consent or you direct us to do so.

YOUR RIGHTS
You can access or delete your health data or withdraw consent to our processing of your health data, subject to certain exceptions. To exercise any of these rights, email hello@metpsy.com.
If we deny your request to exercise one of those rights, you may appeal that decision by emailing hello@metpsy.com. If your appeal is unsuccessful, you may be able to raise a concern or lodge a complaint with the Attorney General in your state. (Washington residents click here and Nevada residents click here).