Legal
Consumer Health Data Privacy
This notice is separate from our general Privacy policy because Washington’s My Health My Data Act requires it to be. It covers the data the Protein Floor Card uses to compute a number, and nothing else.
The short version
Logged out, nothing leaves your device — the card is computed in your browser and stored only there. Signed in, we store the minimum needed to print next week’s card and bill you. We have never sold consumer health data, we do not share it for advertising, and you can have all of it deleted by sending one email.
Who we are
ABTIDE WELLNESS INC., operating PivotOrder at pivotorder.com. Full entity and address details are on the Contact page. We are the entity that determines why and how this data is processed.
What consumer health data we collect
Only when you are signed in and generate or save a card:
- Body weight and the unit you entered it in.
- Drug class — semaglutide, tirzepatide, or other incretin. Not a brand, not a dose in milligrams, not an injection date.
- Week on drug, as a number you type.
- Appetite or volume state — full meal, small plate, sip only, nothing solid.
- The plan the engine generated from those inputs: protein target, leucine threshold, plate suggestions, and which hits you logged.
- Weekly weight check-ins, if you record them.
- Your email address, and Stripe customer and subscription ids.
What we deliberately do not collect
No password. No injection or shot log. No dose in milligrams. No lab results or lab PDFs. No clinical chart, diagnosis, or prescriber details. No progress photos. No food photographs. No precise location, and no biometric identifiers. If a feature would require any of those, we have not built it.
How we collect it
Directly from you, typed into the card. We do not buy health data, infer it from third-party sources, or receive it from data brokers.
Why we use it
To compute this week’s protein target and leucine threshold, to show you your own history and the Holding / Watching / Slipping heuristic, to email the weekly review if you turned that on, and to run billing. That is the complete list. We do not use it to train models, to target advertising, or to build a profile of you.
Who we share it with
We share consumer health data with no one. Billing goes to Stripe, which receives your email address and billing identifiers so it can charge a card — it does not receive your weight, drug, dose week, or card payload. Our hosting and email providers process data on our instruction under contract, for no purpose of their own.
We do not sell consumer health data as “sell” is defined in the My Health My Data Act or in Nevada SB370, and we have never done so. No valid authorization to sell has ever been collected, because none has ever been sought.
Our analytics, when enabled, receives page views and four counted events — a card was generated, checkout started, a subscription completed, a recast was used. It never receives weight, drug, dose week, appetite, or your email.
Consent
Signing in and saving a card is the point at which consent is asked for and given, and the form says so at that moment. You can withdraw it at any time by deleting your data, which also stops any weekly email. Withdrawal does not undo processing that already happened.
Your rights
- Access. Ask for a copy of the consumer health data we hold about you, and the list of anyone it was shared with.
- Deletion. Ask us to delete it. We delete from our live systems and instruct our processors to do the same. We aim to confirm within 30 days.
- Withdraw consent to collection and to any sharing.
- Appeal. If we refuse a request, you can appeal by replying to the refusal. If the appeal is denied you may contact the Washington State Attorney General.
To exercise any of these, email info@pivotorder.com from the address on your account. We do not require an account to make a request, and we do not charge for one.
How long we keep it
Card payloads and weekly check-ins are kept while your account is active so that next week’s recast has something to compare against. If you delete your account, or after a prolonged period of inactivity, they are removed. Billing records are kept as long as tax and accounting law requires, and those contain no health data.
Security
Data is encrypted in transit. Access is limited to the operator. There is no password to steal because we do not use one — sign-in is by emailed link.
Outside the United States
We are a Canadian company and handle personal information in line with PIPEDA. The rights above are offered to everyone, not only to residents of states that require them.
Children
PivotOrder is for adults. It is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a minor has used it, write to info@pivotorder.com and we will delete the account.
Changes
If this notice changes in a way that affects how health data is used, we will update the effective date above and email account holders before the change takes effect.
Questions: info@pivotorder.com · Privacy · Terms