Consumer Health Data Privacy Policy

Health data we collect, and why

Health data	Why and how we use it
What's bothering you, such as bloating, tiredness, sleep, digestion, feeling cold, skin or hair	To pick food for you, and to understand how Shan is used
Tongue photos, and the signs Shan reads from them	To give you your reading and food picks
Your body type and scores, worked out by Shan and Google's AI from your answers and photos	To pick food for you, and to understand how Shan is used
Your diet, the foods you avoid and your allergies	To leave those foods out, read menus for you, and understand how Shan is used
Check-ins about how you feel, the dishes you cook, and notes you type	To adjust your food, and to improve Shan
Screen recordings that may show any of the above	To see where people get stuck and fix it
A note that something you typed sounded like a crisis (never your words)	So Shan can show you helplines, and so we know it happened

Where it comes from

You: your answers, photos and notes.
Your iPhone: how you use the app.
Inferences: what Shan and Google's AI work out from your answers and photos.

Who receives it

We don't sell consumer health data, and we don't share it with anyone for their own use. These service providers handle it for us, under contract:

Google (Gemini AI): tongue photos; menu photos with your body type, what you're working on and the foods you avoid.
PostHog (analytics): your answers, body type, tongue-reading results, diet, check-ins, notes and screen recordings.
Our email providers (Cloudflare and Jack's mailbox): anything you write to us.

RevenueCat and Apple get your purchase records, which show you use Shan, but none of your answers or photos. No other company collects health data through Shan.

Your rights, and how to use them

Ask whether we collect or share your health data, see it, and get the list of every provider that received it, with their contact details.
Ask us to correct it.
Withdraw your consent. There's no switch in the app yet: email us, and delete the app to stop collection right away.
Ask us to delete it. We'll delete it and tell our providers to delete it too. Google's copy of a photo can't be deleted early; it expires within 55 days.

Email Jack@getshan.com with "Health data" in the subject. Include your Shan ID if you have it: it's in any refund or call email Shan prepared for you. Without it, we can delete data that looks like yours, but can't send you a copy. It's free. We answer within 45 days, and may extend once by 45 days if we tell you why.

If we say no, reply "Appeal". We'll answer within 45 days. If we still say no, you can contact your attorney general: Washington, atg.wa.gov/file-complaint; Nevada, ag.nv.gov; Connecticut, portal.ct.gov/ag.

When this page changes, the date at the top changes.

Contact

Jack Shi Dan Sun, developer of Shan
Jack@getshan.com