Effective date: October 21, 2026
The main points
Mindon LLC ("No Food Cravings," "we," "us," or "our") runs the No Food Cravings web app at www.nofoodcravings.com. This policy explains how we handle consumer health data. It is written to meet Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), and the consumer health data rules in Connecticut's Data Privacy Act. We apply it to every user, wherever you live.
"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health. Because No Food Cravings is a weight loss and eating plan, we treat all the plan data described here as health data.
This policy adds to our Privacy Policy. If the two differ on health data, this policy controls.
| What we collect | Why we collect it |
|---|---|
| Sex, age, height, current weight, goal weight, activity level, and weekly pace | To calculate your calorie targets and build your plan |
| Calculated daily calorie targets | To size your meals and track your plan |
| Foods you can't or won't eat | To keep those foods out of your meals and buy list. This may reveal an allergy, intolerance, or other health condition. |
| Daily weight entries | To show your weight trend |
| Daily craving ratings (0 to 10) for impulsive, physical, emotional, logistical, and social cravings, plus an optional note | To show how your cravings change over time |
| Daily plan check-offs and the time of your first meal ("first bite") | To run your 8-hour eating window and show your progress |
| Whether you have a monthly cycle and the start date of your most recent period (optional, women only) | To show how your cravings change across your cycle |
| Whether you asked to hear about a future customized plan or maintenance mode | To tell you about it if and when it's available |
| Your email address, account ID, and IP address, when linked to the data above | To run your account, sign you in, and keep the Service secure |
We also use this data to answer your requests, fix problems, prevent fraud, and meet our legal duties. We don't use it for advertising. We don't use it to make inferences about you beyond showing you your own plan and progress.
We collect only what's reasonably needed for these purposes.
You give us all of it, by typing it into the app. The only exceptions are your calorie targets, which the app calculates from your answers, and your IP address, which your browser sends when you use the app. We don't buy health data or get it from other companies.
We share health data only with these processors. They handle it for us under contracts that limit them to providing their service to us.
| Processor | What it does | Health data it handles |
|---|---|---|
| Supabase | Database | All health data listed in section 2 |
| Render | Runs our servers | All health data, as it passes through our servers |
| Vercel | Hosts the website | Request logs and IP addresses, which show that you visit a weight loss website |
| Resend | Sends our emails | Your email address and anything in our emails to you, such as a milestone you reached |
| Square | Takes payments | Your email address and the fact that you subscribe to a weight loss plan |
Third parties: none. Affiliates: none. We have no affiliates that receive health data.
We may disclose health data if the law requires it, such as a valid court order. Where allowed, we will tell you first. We will not give health data to anyone seeking to investigate or penalize a person for seeking or getting health care, unless a court orders it.
You have the right to:
Verification. We confirm the request comes from you, usually by asking you to reply from, or click a link sent to, your account's email address.
Authorized agents. Someone can make a request for you with your signed, written permission. We may ask you to confirm with us directly.
Timing and cost. We will respond within 45 days of getting your request. If we need more time, we can extend that once by up to 45 more days. We will tell you within the first 45 days and explain why. Requests are free, up to twice in any 12 months.
Deletion. When you ask us to delete your health data, we delete it from our live systems within 30 days. It drops out of backups within 12 months. We also tell our processors to delete it. If we can't delete something because the law requires us to keep it, we will tell you what and why.
If we deny your request, in whole or in part, we will explain why. You can appeal by emailing support@nofoodcravings.com with "Health data appeal" in the subject line within 60 days of our answer. We will answer within 45 days and explain our decision in writing.
If we deny your appeal, you can file a complaint with your state attorney general:
We keep health data while your account is open. If your trial or subscription ends and you don't come back, we keep it for 12 months so you can pick up where you left off, then delete it. If you delete your account, we delete your health data as described in section 8.
We encrypt all traffic between your browser and our servers. Only people who need access to run the Service can reach production data. Our processors host the data on secured systems. If someone gets unauthorized access to your health data, we will notify you, and regulators where required, without unreasonable delay. See the Privacy Policy for more.
We are not a health care provider or health plan, so HIPAA doesn't apply to us. This policy and state consumer health data laws do. We protect your health data either way.
We will change the date at the top when we update this policy. If a change affects how we collect, use, or share health data, we will tell you before it takes effect and ask for your consent where the law requires.