Consumer Health Data Privacy Policy

Last updated 26 October 2026

Measur keeps your food diary on your phone unless you choose otherwise. Some of what you log in it is consumer health data under Washington State's My Health My Data Act: meals logged to manage your weight, weigh-ins and body fat, the days you take a medication, and readings from the health app on your phone. This page sets out, the way that law asks, what of it we collect and why, where it comes from, who receives it and how to use your rights. Our privacy policy says the rest.

The health data we collect, and why

Each of these leaves your phone only when you use the feature, unless the item says otherwise.

Your meals - a meal photo or the words you describe it in, to the AI provider to analyse it; a correction, a photo of its nutrition label or of the plate, with that meal's foods and amounts, to put it right. Once you have said yes to the AI, some go by themselves too: foods from your last 30 days for alternatives to them, your month or year recap's figures for its one-line summary, and a combined meal's foods for its name.
What a question to the coach carries - to the AI provider, for that answer only: summaries of your journal, your age, sex, height and activity level, your weigh-ins, body fat, goal weight and body measurements, your workouts and any movement energy you accepted, the water and coffee you log, your supplement list and the days you ticked it, and your fasting hours. With the medication card on, also the days you logged an injection and where on your body it went; for a question about a vitamin or mineral, also your Nutrients page's figures, never the foods behind them.
Readings from the health app on your phone - with your permission, Measur reads body weight, body fat percentage, steps, active energy burned and workouts, to fill in your weigh-ins, body-fat figure and activity list, chart your progress and work out your calorie goal. They leave your phone only with a question to the coach, as above, or with sync on, as below.
Your synced diary, if you turn sync on - meals and their photos, water, weigh-ins, body-fat figures and body measurements, workouts and any budget you raised from your movement, medication and supplement logs, recipes, your profile (your name, date of birth or age, sex and height), targets and settings, kept in your account on the Measur server until you delete it. The server reads it for one purpose of its own: to know whether a meal reminder is still due.
Your progress photos, only if you switch on their backup - encrypted on your phone, then copied into your account so a new phone gets them back. We cannot open them. Never read by the AI, shown to an assistant or shared.
A plate you weigh after rating its amount wrong - with sync on, its photo and the weight, with the food's name if you weighed one food, kept on the Measur server to test how well Measur measures meals. Deleting your account deletes them.
An export from another tracker that Measur could not read - only if you tap to send it, so we can teach Measur the format: its layout, or, if you choose, the whole file, with its record of what you ate and weighed. Not linked to your account; deleted after 30 days.

The privacy policy lists everything else that leaves your phone, and why.

Where it comes from

You - the meals, weigh-ins and other entries you make in the app, and the profile and settings you give it.
Photos you take or choose - of a meal, its label or its plate, and your progress photos.
The health app on your phone - Health Connect on Android or Apple Health on iOS, only with your permission. Measur never writes anything back to it.
Fridg, if you use your Measur account there - the meals you plan in Fridg are added to your diary as planned meals, counted only once you say you ate them.
An AI assistant you connect - it can add meals to your diary; a meal it describes is analysed by Measur's own AI.

Who receives it, and what

The AI provider - a company in the United States that works only for us. It receives what the items above send it, for that request only.
The companies that work for us - our hosting provider (requests pass through its server in Finland on their way to the Measur server), our email service and our inbox's provider handle only what their job needs, and only for us.
Apple and Google - dictating a meal uses your phone's own speech service, theirs, and Measur gets only the words. Their push services deliver your meal reminders.
The people at your table - once you join a table and choose which of your meal times it may see, each meal you log at those times: its photo, name, nutrition and time of day, with your name at the table. Deleted after 7 days, or at once when you leave the table.
Anyone with a link you share - a month or year recap's figures, the AI's closing line and the photos you kept, or a meal's photo, name and nutrition, open to anyone with the link and deleted after 90 days, or when you remove the link.
An AI assistant you connect - if you have a sync account and approve one with a code from the app, it can read what your account has synced, except progress photos, and add meals. What you ask it is processed by its own provider under their terms.
Fridg - innonova's shopping list app, if you choose to use your Measur account there: your calorie target, each meal's share of it, your protein target and what you have eaten today, as numbers, to plan your meals, and the names of the foods you put on your shopping list.
Nobody else - no affiliate of ours receives it, and your health data is never sold, never used for advertising, and never shared with anyone for their own purposes. The one exception is the law: if a court or authority lawfully orders us to hand something over, we hand over only what the order requires.

Your permission

Before we keep it - your diary is kept on the Measur server only once you say yes as you turn sync on, and Measur reads the health app only with your permission.
Before we share it - nothing from your diary goes to the AI provider until you say yes in the app, which asks the first time a feature needs it. The people at your table, a link, an assistant and Fridg receive anything only once you join the table, share the link, connect the assistant or use your Measur account in Fridg.
Taking it back - saying no only leaves that feature off. You can take any yes back at any time, in the app or by asking us: it stops what comes next, and does not undo what was done before.

Your rights, and how to use them

Who is responsible - innonova GmbH, Sagenrainstrasse 35, 8320 Fehraltorf, Switzerland, makes Measur and is responsible for your data.
What you can ask - whether we collect or share your health data, to see what we hold about you and which companies received it, to have it deleted, and to take back your permission. Write to measur@measur.me: a person answers within 15 days.
Deleting it - with sync, Settings > Account & data > "Delete account" removes your whole account for good, or you can ask us to; the account leaves the daily backups two weeks later. Deleting the app removes everything on your phone.
If we say no - you can ask us to look at your request again, at the same address, and a person answers within 15 days. If you still disagree, you can complain to the Washington State Attorney General (atg.wa.gov).

Changes to this page

When this page or the privacy policy changes, the date at the top moves. When a change means something new leaves your phone or someone new sees it, the app tells you before it happens.

← Back to Measur