Privacy

Consumer Health Data Privacy Notice

Last updated: June 16, 2026

This notice supplements our Privacy Policy. It describes how Mycro handles "consumer health data" under U.S. state laws — most notably the California Consumer Privacy Act (CCPA/CPRA) and the Washington My Health My Data Act (MHMDA). It applies to trymycro.com (the "Site") and the Mycro mobile application (the "App").

Short version: the data you log in Mycro — your weight, your food, your food photos, your conversations with the coach — is consumer health data under these laws. We analyze it internally to improve the app and the coach, keeping only de-identified, aggregate insight, but we don't sell it, we don't share it for cross-context advertising, and we will never sell your geolocation or biometric data because we don't collect those. You can access, correct, delete, or port your data; opt out of certain processing; and revoke consent at any time.

1. What we treat as consumer health data

For purposes of MHMDA and similar state laws, the following information you provide or generate in the App is consumer health data:

On the Site, the only personal information we collect is your email address (if you submit the "Notify me" form) and standard server logs. We do not collect health data on the Site.

2. Why we collect it

We use this data to operate Mycro — to show your weight trend, estimate calories from photos and descriptions, generate contextual coaching messages, send notifications you've opted into, and provide customer support. We also analyze it internally to improve the product and the AI coach and to produce de-identified, aggregate statistics that guide our decisions. The full list is in Privacy Policy, Section 4, including "Analyzing your content to improve Mycro," which explains how we de-identify within the pipeline.

Importantly, data that has been de-identified and aggregated so it can no longer be linked back to you is treated differently from identifiable data under these laws — both the CCPA/CPRA and Washington's My Health My Data Act carve properly de-identified data out of their core protections when the holder takes the steps those laws require. Toward that, we maintain and use this data only in de-identified, aggregate form, we make a public commitment not to attempt to re-identify it, we keep these insights internal and do not disclose them to third parties (and would contractually bind any recipient to the same no-re-identification obligation if that ever changed), and we do not export or publish raw transcripts or logs. We de-identify before producing any aggregate insight.

We do not use your health data for advertising, profiling for advertising, or training AI models. See Section 4 below for what we explicitly do not do.

3. Who we share it with

Sharing is limited to the service providers listed in our Privacy Policy, Section 7 — primarily our U.S. cloud hosting and AI inference providers and the small set of operational vendors listed there. Each vendor is contractually limited to processing your data for the purposes we direct.

We do not sell, rent, or share your consumer health data with third parties for their own marketing or advertising purposes.

4. What we do NOT do

5. Your rights

Depending on where you live, you have some or all of the following rights with respect to your consumer health data:

6. How to exercise your rights

Email hello@trymycro.com with the subject line "Health data request" and tell us what you'd like to do. We will:

If you'd prefer to authorize an agent to make a request on your behalf, include written, signed permission and we'll verify directly with you before acting.

7. Changes to this notice

We'll update the "Last updated" date at the top of this page when we change it materially. For significant changes, we'll also notify you in-App or by email at least 7 days before the change takes effect.

8. Contact

Mycro is operated by Momentum Loop LLC, a Texas limited liability company. Mycro is not a HIPAA-covered entity; the data you give us is governed by general consumer-privacy law as described above and in our Privacy Policy.