Consumer Health Data Privacy Policy
Effective date: October 21, 2026 · Last updated: October 21, 2026 · Version: privacy-2026-11
This is Section 5 of our Privacy Policy, published on its own page. The rest of the Privacy Policy, including how long we keep information (Section 10) and how to make a request (Section 11), also applies.
This section is our Consumer Health Data Privacy Policy for the purposes of laws such as Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's consumer health data provisions, and explains how we handle special-category (health) data under the GDPR.
5.1 What we collect. Allergies that you enter for anyone in your household, optional dinner calorie targets for adults, and an optional weight goal for an adult (a target in pounds, such as "lose 5 lbs"). Ulivo only records a weight goal and shows it back to you, on getulivo.com and in your connected assistant. We don't use it to set or suggest calorie targets, portion sizes or dinners. Some diets you enter (such as "gluten-free" or "low sodium") may also indicate a health condition, and we treat them with the same care. We don't ask for diagnoses, medications, your current weight, or medical records; please don't enter them.
5.2 Sources. The account holder or another adult in the household, on getulivo.com or through a connected AI assistant. Children never give us information themselves.
5.3 Why we use it. Only to leave allergens out of planned dinners and shopping lists, warn you about conflicts, size adult portions, and show an adult's weight goal back to them. Calorie targets and weight goals are for adults only; we never set them for children or teens.
5.4 Consent. We store health information only after the account holder gives explicit consent by agreeing to our consent text on getulivo.com or through the assistant. We record when, which version and through which channel. Because your connected assistant receives this information when it plans with you, the consent text tells you so and asks you to agree to that sharing separately. For a child, the parent or guardian gives consent on the child's behalf. For another adult, the account holder confirms that adult has agreed, and the adult can withdraw consent or ask us to delete their information at any time.
5.5 Who receives it.
- Other adults in your household.
- The AI assistant you connect, when it asks Ulivo to plan, so it can help you. That company (for example Meta for Muse) handles it under its own privacy policy, not ours.
- Our service providers (processors), only to store and transmit it for us: hosting and database (Section 6).
- We do not send health information to Instacart. A shopping list you send to Instacart contains ingredient names and quantities only, though which items are on it (for example only gluten-free products) may itself suggest a dietary need.
- We never sell health information or use it for advertising.
5.6 Your rights over health information. You can see and edit it in Settings → Family; withdraw consent in Settings → Privacy (this deletes every allergy, calorie target and weight goal in the household; we warn you first that future plans will stop avoiding those allergens); or email us to confirm whether we hold your consumer health data, get a copy, get a list of every third party and affiliate we've shared it with (with contact details), withdraw consent, or have it deleted. We don't discriminate against you for using these rights. Withdrawing consent doesn't affect processing before you withdrew.
5.7 Retention. Until consent is withdrawn, the person is removed (then 30 days so you can undo, then deleted), or the household or account is deleted, or the household has been paused for the period in Section 10. Deleted data leaves our encrypted backups within 30 days.
Contact
HumanIntelligence, Lda · Rua do Convento, antigo Convento Subserra, s/n, 2600-635 Castanheira do Ribatejo, Portugal · NIPC/NIF 514246952 Privacy and support: support@getulivo.com · Security: security@getulivo.com Supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt