1. The consumer health data we collect, and how we use it
| What we collect | How we use it |
|---|---|
| The supplements you track: names, amounts, schedules, reminders, and your history of doses taken or skipped, with any notes you add | To track your routine, remind you, and show you your history, streaks and nutrient totals |
| Why you take each supplement, chosen from a list (for example, general health, pregnancy and fertility, or healthy aging) | To keep your record and to choose your journal prompts and the order of your weekly check-in |
| Your onboarding answers: age range, life stage, goals and supplement habits | To tailor the app to you |
| Your weekly check-in answers: mood, sleep quality, hours of sleep and stress | To show you your trends and your monthly summary |
| Your journal entries, typed or dictated (dictation is turned into text on your phone; no audio reaches us) | To keep your private journal and show it back to you. No one else reads it, and no artificial-intelligence service processes it |
| Photos of supplement labels you scan, and the product identified from them | To identify the product so you can add it. Photos are deleted within about 24 hours |
| Health details you choose to include in a message to us | To answer you |
We also use this data to keep the service secure and to handle your requests about your data.
2. Where it comes from
- From you, when you enter it in the app or write to us.
- From label photos you take or choose in the app.
3. The consumer health data we share, and who receives it
We do not sell consumer health data, and we don't share it with any affiliate or other company. Our service providers process it for us, on our instructions and under contract, and may not use it for anything else.
| Service provider | Health data it processes for us |
|---|---|
| Cloud hosting and database | Everything in §1, encrypted |
| Label analysis | Label photos and the text read from them |
| Email inbox and email delivery | Health details you choose to put in a message to us |
| Website hosting | Health details you choose to put in a message through our website's contact form |
People you pair with. If you choose to pair with someone in the app, and agree to share with that person, we share a summary of your progress with them so they can keep you going: for each day so far of the plan you share with them, whether each of you finished your part that day, and how many of the supplements you put in that plan you've taken, shown as unnamed dots; and your current streak. They never see which supplements you take, your journal, or any other health information. You can pause, unpair or block at any time.
4. Tracking by other companies
No other company can collect your consumer health data over time and across websites or online services when you use our app or websites.
5. Your rights, and how to use them
You can:
- Confirm and access. Ask whether we collect, share or sell your consumer health data, and get a copy of it.
- See who received it. Get a list of every third party and affiliate we have shared it with, with a way to contact each.
- Withdraw consent, or ask us to stop. You can withdraw consent in the app (Menu → Health data processing) or by email. Because GRLY can't track your supplements without this data, withdrawing deletes your account and its data. The app tells you this and asks you to confirm first. We stop using your consumer health data as soon as you withdraw in the app, or as soon as we've confirmed an email request is yours.
- Delete it. Delete your account in the app (Menu → Delete Account), or ask us by email.
- In-app deletion removes the data from our live systems straight away.
- Email requests are completed within 30 days of confirming it's you.
- Our backups overwrite deleted data within about a week, and we tell our service providers to delete it.
- Review and correct it. You can see, edit or delete most of your data in the app at any time, or ask us to correct it.
How to make a request. Use the app, or email connect@grlyapp.co with the subject "Health data request".
- We confirm it's you by writing to the email address on your account. You don't need to create an account to make a request.
- Requests are free, at least twice a year.
- We respond within 45 days of receiving your request. If we need up to 45 more days, we tell you why within the first 45.
Appeals. If we turn down your request, you can appeal by replying to our decision with the word "Appeal".
- We answer in writing within 45 days and explain what we did or didn't do, and why.
- If we deny your appeal, you can complain to the Nevada Attorney General (ag.nv.gov).
6. Changes to this policy
If we change this policy, we update the effective date and tell you in the app. Before we collect a new kind of consumer health data, or use it for a new purpose, we ask for your consent.
7. Contact
Ourskin, Inc. · connect@grlyapp.co · 1111B South Governors Ave, Dover, DE 19904, USA