Consumer Health Data Privacy Policy

Life stage

Including pregnancy and the postpartum period. Some ingredients are withheld during pregnancy; without this we cannot withhold them.

Whether you are breastfeeding

A separate question from life stage, because they are separate facts and both can be true.

Medications

From a short list. Some combinations are a matter for your prescriber rather than for us; where one applies, we leave the category out and say why.

Free-text notes

Anything you type in the "is something worrying you?" box. You may tell us something that means a budget plan is the wrong thing to give you. If you do, we stop and tell you to seek care.

Your cabinet

The products you own and use, and why you stopped using one. This is what the product is for. Some of it is health-adjacent, so we treat all of it as if it were.

Every one of these is optional. The product works if you skip them; it just cannot protect you from something it does not know about.

• No photographs of your face. There is nowhere in the product to provide one. This is a design decision, not an oversight, and it is the most sensitive thing we could have asked for.
• No biometric identifiers. No face templates, no embeddings, no identification.
• No medical records, and no data from any health service.
• No IP addresses. Our servers are configured not to retain them.
• Nothing clinical. It does not diagnose, screen or grade any condition, because that is not what it does.

Only from you, and in two ways: what you type into the questions, and what you paste in when you list the products you own. Where you paste a list of product names, an AI service reads it to work out which category each product belongs to. Nothing is collected from data brokers, from other apps, from your device, or from anywhere you did not put it.

To decide what not to recommend, and to explain that decision to you. That is the whole purpose.

It is also stored as part of the record of each plan, so that a decision we gave you last month can still be explained this month. We do not use it to target advertising, we do not profile you for anyone else, and we do not use it to decide what to charge you.

Service providers who process it on our instructions: our hosting provider, our error-monitoring provider, the AI provider that reads pasted product text, and — where you buy something from us — a payment processor. Each is bound by a written agreement and none may use it for their own purposes.

Nobody else. Not brands, not retailers, not clinics, not advertisers, not analytics companies.

We do not sell consumer health data, and we have never sold it. We do not share it for cross-context behavioural advertising. Under the My Health My Data Act, selling it would require your separate written authorisation, and we do not ask for one because we do not do it.

The company that decides what to recommend to you cannot see who has paid us. That is enforced by an automated test that blocks any change that would break it, not by this paragraph.

We keep it while your account is active. When you delete your account we delete it, including from the stored record of past plans and decisions — not only from your profile. We keep a record that a deletion happened, which contains no information identifying you.

Wherever you live, you may:

• Confirm whether we hold consumer health data about you, and access it;
• Get a list of the third parties it has been shared with;
• Withdraw your consent to our collecting or sharing it;
• Delete it — and where we have shared it with a service provider, we will tell them to delete it too.

We will not charge you differently or give you a worse service for exercising any of these.

To exercise a right, write to legal@bellanos.me. We respond within 30 days, and will tell you if we need longer.

If you are in Washington and you believe we have not complied, you may complain to the Washington State Attorney General. The My Health My Data Act also gives you a right to bring a claim yourself.

Our general privacy policy covers everything else we hold and applies alongside this one. Where they overlap, both are accurate; this document exists because the law requires the health-data part to stand on its own.

Bellanos is operated by Regenrtiv. If the Bellanos service is one day transferred to a different company — including to a company set up for Bellanos itself — your information would move with it, so that your account, your shelf and your history keep working. If that happens we will tell you, the new operator will be bound by this policy until it publishes its own, and it must honour any consent you have withdrawn. We would not sell your information as a standalone asset, and nothing here permits that.

Bellanos is a service operated by REGENRTIV DESIGN TECH LTD., a British Columbia company, 1480 Howe Street, Vancouver, BC V6Z 0G5. Questions go to legal@bellanos.me.

If we change this policy in a way that affects you, we will say so prominently rather than quietly reposting it with a new date.