Privacy Policy

Definitions

• Company ("we," "us," "our") means Emmy Harts Nutrition, 8021 Haylee Blair Lane.
• Service means our website, application, and related offerings.
• Website means emmyhartsnutrition.com.
• Personal Data means any information relating to an identified or identifiable individual.
• Usage Data means data collected automatically through use of the Service.

Information We Collect

Personal Data You Provide

• Email address
• First and last name
• Phone number
• Billing and payment information (processed by our payment providers)

Usage Data

We collect Usage Data automatically, which may include your device's IP address, browser type and version, the pages you visit, the date and time of your visit, time spent on pages, device identifiers, and diagnostic data.

Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons) to operate the Service, remember your preferences, and understand how the Service is used. You can set your browser to refuse cookies, though some features may not function properly.

Consumer Health Data

Some of the information you provide is consumer health data, which several states protect under special rules (for example, Washington's My Health My Data Act and Nevada's SB 370). Where these laws apply, we treat your health information — including assessment responses, symptom information, and any lab results you upload — with heightened protection.

What we collect

• Assessment and intake responses you submit.
• Lab results and health documents you choose to upload.
• Progress and tracking data generated as you use the Service.

How we use it

We use this information only to provide the Service you requested, to generate your reports and materials, and to communicate with you about your account. We process it based on your consent, which you give when you create an account and submit your information.

We do not sell consumer health data

We do not sell, rent, or share your consumer health data with advertisers, data brokers, insurers, or any third party for marketing or promotional purposes. We share it only with the service providers needed to operate the Service, and only as needed to deliver what you asked for.

Information you share in the community

If you post information — including health or wellness information — in a community group or subscriber channel, other members can see it. Information you choose to share in a group space is not private or confidential, and this Privacy Policy does not restrict what other members may do with information you post publicly to the group. Share only what you are comfortable making visible to others.

How We Use Your Information

• To provide, maintain, and improve the Service.
• To manage your account.
• To contact you with updates, confirmations, and service communications.
• To send you news and information about similar offerings (you may opt out).
• To meet legal and regulatory obligations.

Use of Artificial Intelligence (AI) Disclosure

We want you to know clearly and up front that we use artificial intelligence (AI) and automated tools as part of our Service. This disclosure is provided to you at or before the time you interact with these tools.

What the AI does

We use AI-assisted software to help organize and interpret the health information you provide — such as your assessment answers, intake forms, and any lab results you choose to upload — and to help generate written reports, summaries, and educational materials. The AI helps surface patterns in your information so that your provider can review them more efficiently.

A licensed human is always responsible

AI does not make clinical decisions and does not replace your provider. All AI-generated information is reviewed by a licensed healthcare professional, who retains full responsibility for any clinical judgment, recommendation, or decision relating to your care. You may ask to speak with a human at any time, and you may request that a human review any AI-generated content about you.

AI is not a diagnosis

Reports and scores generated with the help of AI are informational and are intended to support — not substitute for — the professional judgment of your licensed provider. They are not a diagnosis on their own.

We Do Not Sell Your Data

We do not sell, trade, or transfer your personally identifiable information to outside parties for marketing or promotional purposes. Your information will not be sold, exchanged, or given to any other company for any reason without your consent, except as needed to deliver the product or service you requested.

Limited Sharing With Service Providers

We share your information only with trusted third parties who help us operate our business, and only so they can perform their function. These providers agree to keep your information confidential. They include:

• Payment processors (such as Stripe, PayPal, and Intuit) — solely to process your payments.
• Email service providers — solely to send communications you have opted into.
• Website and application hosting services — solely to host the Service and its content.
• SMS message aggregators and providers — solely to deliver text messages you have opted into receiving.
• Course and content delivery platforms — solely to deliver digital content you have purchased.
• Scheduling tools — solely to schedule the sessions you have enrolled in.
• HighLevel (GoHighLevel) CRM — for customer relationship management and the communications described in this policy.
• AI processing providers — solely to help generate the reports and materials described in the AI Disclosure section, under confidentiality obligations.

Retention, Security, and Breach Notification

We retain your Personal Data only as long as necessary for the purposes described here and to meet legal obligations. We use reasonable safeguards to protect your information, though no method of transmission over the internet is completely secure.

If a breach affecting your personal or health information occurs, we will notify you and any applicable regulators as required by law (including, where applicable, the HIPAA Breach Notification Rule and the FTC Health Breach Notification Rule).

Children's Privacy

The Service is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Your Privacy Rights

GDPR (if you are in the EU/UK)

You may request access to, correction of, or erasure of your Personal Data, and you may object to or restrict certain processing. We process data based on consent, contract, legal obligation, or legitimate interests.

California (CCPA/CPRA)

If you are a California resident, you have the right to notice, the right to know and access, the right to correct, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information.