Data Sharing Policy

1. Who This Policy Applies To

This policy applies to two distinct relationships with MyFoodOracle:

• Coaches: paying customers who use MyFoodOracle to support their own clients, and who have access to the coach admin dashboard
• Affiliates: individuals who refer other coaches to MyFoodOracle in exchange for commission, a separate role managed through our affiliate program

These are treated as distinct roles. Coach account data and affiliate referral data are handled separately, as described in Section 6.

For individual client data rights please refer to our full Privacy Policy.

2. What Coaches Can See

Coaches with admin dashboard access can see the following data about their client cohort:

3. What Coaches Never See

This includes but is not limited to:

• Individual food logs or meal descriptions
• Journal entries or emotional eating reflections
• Weight, measurements, or progress photos
• Health context selections including perimenopause, menopause, postpartum, or breastfeeding status
• Cycle tracking data
• Individual behavioral pattern data
• AI conversation history or personalized insights
• Personal goals or goal track selection
• Individual resilience scores
• Any personally identifiable health or nutrition information

4. Individual Client Summary Sharing (Opt-In)

Separate from the aggregate cohort data described above, a client may choose to share a limited weekly summary directly with their own coach. This is never automatic and never a condition of using MyFoodOracle. A client must explicitly opt in, per coach, before any individual data is shared, and can revoke that choice at any time.

When a client opts in, their coach may see:

• How many days that week the client logged food
• Whether recent activity is consistent with the client's chosen goal
• Habit completion rate, if the client tracks habits
• The number of wins the client logged that week
• Whether the client's resilience score trended up, down, or stayed flat
• Whether overall engagement increased or decreased compared to the prior week

For clients on the Weight Loss or Eat for Gains goal tracks only, a client may additionally choose to share whether their weight is trending up, down, or holding stable. The exact number is never shared, only the direction. This option is not offered to clients on any other goal track, including End Emotional Eating, given the sensitivity of that goal track.

Revoking access takes effect immediately, the coach loses access the moment it happens, with no waiting period. Coaches can mark which of their consenting clients they want to actively follow, this only affects which already-consenting clients a coach chooses to focus on, it never grants access to a client who has not separately and explicitly consented.

5. Community Leaderboards and Challenges

MyFoodOracle includes optional challenge and community features. Clients are automatically enrolled in available challenges as part of the normal experience, and can turn this off at any time in their settings.

Clients who remain enrolled appear to other enrolled clients within the same challenge on a leaderboard showing first name and rank only, never a last name or other identifying detail. Clients who opt out do not appear on any leaderboard. Opting out does not remove a client's activity from aggregate, non-identifying coach-level metrics.

Clients on the End Emotional Eating goal track do not receive competitive leaderboard notifications by default, given the sensitivity of that goal track. This can only be turned on by the client themselves, it is never turned on automatically.

6. How We Use Aggregate Data

MyFoodOracle may use anonymized aggregate data that cannot identify any individual for the following purposes:

• Product research and feature development
• Industry benchmarking and published research
• Business insights shared with or licensed to third parties
• Marketing materials using aggregate statistics such as average retention improvement rates

Aggregate data shared externally never contains information that could identify an individual client or their coach. Clients can opt out of contributing to anonymized research in Settings, under Account, in the Data Preferences section, and this choice is verified before any of that client's data is included, not assumed.

Cycle tracking data is structurally excluded from this process. It is never read, never processed, and never included in any aggregate output, regardless of a client's research consent setting, this exclusion cannot be overridden by any consent choice.

Where broader health context information is included in aggregate research, such as the share of clients navigating perimenopause or postpartum recovery, it is only ever shown as part of a group of at least 20 consenting clients sharing that same context. Groups smaller than that are never shown, they are omitted entirely rather than displayed in a way that could make any individual identifiable.

7. Third-Party Service Providers

MyFoodOracle uses the following service providers to operate the platform. Each processes data only as necessary and is bound by data protection agreements:

• Firebase and Google Cloud for data storage and authentication
• Stripe for payment processing
• Anthropic for AI-powered behavioral insights
• Railway for server infrastructure
• Resend for transactional email delivery
• Mailchimp for account and plan-related communications to coaches
• Rewardful for affiliate referral tracking

We do not share individual client data with any of these providers beyond what is technically necessary to deliver the service. For example Anthropic processes food log descriptions to generate insights but does not receive client names or contact information. Rewardful processes affiliate referral and commission data only, including an affiliate's name, email, referral activity, and payout status. It never receives any end client's personal or health data.

8. Client Consent and Control

Clients retain full control over their data at all times. No data is shared with a coach based on the coach's subscription tier. The relationship between a coach and their clients through MyFoodOracle is one of benefit provision, not data access.

Clients can request account deletion at any time through Settings, under Account. Requesting deletion immediately cancels any active subscription and begins a 30-day grace period, during which the account is restricted from normal use. A client can reactivate at any point during this window, fully restoring normal access with nothing lost.

If the grace period passes without reactivation, the account and all associated data are permanently deleted, every food log, journal entry, habit, weight and measurement record, saved recipe, progress photo, and every other piece of personal or health data stored under that account, along with the account's login credentials. This cannot be undone once the grace period ends. We retain a minimal record that a deletion occurred and when, containing no personal information, solely as proof that the deletion took place.

Coach and admin accounts do not use this self-service flow. Contact us directly to close a coach account.

Stripe, our payment processor, independently retains transaction and subscription records under its own legal obligations as a licensed payment provider, separate from and unaffected by any deletion request made to MyFoodOracle. We do not retain a separate copy of this financial history ourselves once an account is deleted.

Aggregate anonymized cohort metrics that do not identify the individual are not affected by account deletion.

9. Questions from Coaches or Affiliates

If you are a coach or an affiliate and have questions about how data is handled before signing up or renewing, please contact us directly. We are happy to answer specific questions about data handling, provide a summary of our security practices, or discuss any compliance requirements your organization has.