Consumer Health Data Privacy Policy

Version 2.6 · Effective September 21, 2026

About This Policy

This Consumer Health Data Privacy Policy describes how dechnologies, llc collects, uses, and shares consumer health data. It covers the Daypiction app and related services (the "Service"). Consumer health data can include information that identifies your physical or mental health status. This policy explains the health-data practices and choices relevant to Washington, Nevada, and other applicable laws.

1. Categories We Collect

We collect health data that you provide or select for the Service. We associate saved workout drops with your account or guest identity.

• Workout type, date, duration, distance, energy, and related statistics, including available heart rate
• Workout GPS routes and available workout metadata, such as elevation, indoor status, and source
• Manual workout details and health-related information in notes, captions, photos, replies, or other content. A saved place or route can reveal health-related information

2. Sources

Sources include Apple HealthKit when you permit access, your manual entries, and content you provide to the Service. Other users can include information about you in their content or interactions. Apple Health access is optional. Manual entries do not require Apple Health access.

3. Purposes

We use consumer health data for the features you request. These include workout drops, their maps and statistics, synchronization, and your selected sharing surfaces. With AI permission, selected workout facts can contribute to artwork, including eligible overnight generation. We also process relevant information to respond to support or privacy requests, investigate reported content, and meet legal duties.

We do not use consumer health data for advertising, marketing, data mining, inference-building, or sale. We do not use your content or generated art to train AI models.

4. Data We Share and Recipients

The data disclosed depends on the feature and content you choose. We do not sell consumer health data.

• Hosting providers: Supabase stores workout content and associated records. Vercel can serve health-related content included in public share previews
• Other users and recipients: accepted friends can see workout drops, including their maps. Public share previews and exported images can show selected content to other people. Recipients can save or forward copies
• AI providers: Google and OpenAI can receive selected workout facts for artwork and related processing. Those facts include type, duration, distance, calories, and your caption. xAI can receive artwork inputs for available video generation. The structured workout input excludes GPS routes, heart rate, and raw HealthKit metadata. Details in your text or photo pixels can still reach an AI provider
• Safety and support providers: Google screens uploaded photos, which can include health-related content. Providers that help us handle a request can receive the information needed for that request
• Platform services: Apple and other platform services can process information needed for maps, widgets, or sharing surfaces you use
• Legal recipients: authorities or other recipients where the law requires disclosure or permits it to protect rights and safety

5. Your Choices

Apple Health reads require iOS permission. Adding a workout drop saves it with your canvas and makes it available to accepted friends. AI permission separately controls the authorized AI processing. These controls serve different purposes; an Apple Health grant does not grant AI permission.

Revoke Apple Health access in iOS settings to stop future HealthKit reads. Delete workout drops to remove them from your canvas. Turn off Make art with AI under Settings → AI Artwork to withdraw future AI processing permission. Already-started AI work can finish. Revoking a permission does not automatically delete content already saved or copies that other recipients hold.

Generation input records can contain health information from workout facts, captions, or other text. Deleting a workout drop does not erase its historical generation input. Privacy Policy Section 5 explains retention and deletion of these records. You can also submit a health-data deletion request under Section 6 below.

6. Health Data Rights and Requests

Under applicable law, you can request confirmation of collection, access to your consumer health data, and deletion. You can also withdraw consent to collection or sharing. You can request a list of third parties and affiliates that received your health data, with their available online contact information.

Send requests to contact@daypiction.com. Describe the request and provide information that helps us find your data. We may ask for information needed to verify your identity or authority. You do not need to create an account to submit a request. An authorized representative can act for you under applicable law.

We respond within the applicable legal deadline, generally 45 days. If the law permits an extension, we give the required notice. You can appeal a denial by replying with 'Appeal' in the subject line. If we deny the appeal, you can complain to your state Attorney General. We do not discriminate against you for exercising these rights.

A health-data deletion request can require work beyond the in-app account deletion workflow, including provider notification and backup deletion. We process such requests under applicable law. Legal retention duties can require us to retain limited records. These limits do not remove your applicable deletion rights.

7. Contact

dechnologies, llc: contact@daypiction.com

4030 Wake Forest Road STE 349, Raleigh, NC 27609 USA