This policy describes how Dream Forge Mobile Pte. Ltd. collects and shares consumer health data through KYZO. It explains rights under applicable consumer-health privacy laws, including Washington's My Health My Data Act. KYZO is for adults aged 18 or older.
Health data we collect and why
- Health and fitness records: activity, workouts, heart rate, sleep, body measurements, nutrition, supplements and wellbeing entries, used for tracking, history and requested guidance.
- Reproductive and medical information: cycle dates, symptoms, contraception details, pregnancy records, prenatal visit notes and medical reports, used for the tracking and document features you choose. Medication and supplement names, user-provided doses/schedules, reminders and taken/skipped logs support your own record keeping, including prescribed entries in pregnancy tracking; KYZO does not prescribe medication or identify it with a scanner.
- Photos and inferences: meal, body-progress and posture images, and nutrition, posture or wellness estimates generated from your information, used for requested analysis. Medical-report AI also extracts and explains results and generates result-informed diet/exercise suggestions for discussion with a qualified healthcare professional. It does not establish a diagnosis or treatment plan. Verify AI output before making health decisions.
- Activity location: GPS routes and related distance, pace and elevation information, used to record and display an activity you track.
- Account associations: account identifiers connect these records to you so that requested storage, sync, sharing and support features can work.
Sources of health data
Sources include information you enter or upload; your camera, microphone and location features; Apple Health and Health Connect when connected; optional connected Bluetooth heart-rate sensors; information other users choose to share with you; and estimates or insights derived from these inputs.
Android Health Connect and iOS HealthKit access have different permission scopes, described in Section 1.2 of our Privacy Policy. The reduced Android connection does not import every type available on iOS or in earlier app versions. Manual entries and scanned documents remain separate sources of health information.
Supported iOS versions request menstrual-flow and basal-temperature access separately through Cycle import. Basal temperature is distinct from general body temperature. Optional connected heart-rate sensors, on supported app versions, provide live workout readings and, where available, beat timing. Current versions keep raw sensor readings and sensor connection preferences locally for recovery and summaries; saved run/workout records and supported summary fields can sync when cloud sync is enabled. Disconnecting stops new readings but does not erase saved sessions.
If you enable usage analytics, Firebase Analytics can receive the duration of an app-recorded completed workout to understand feature use. This choice is separate from health-device permissions, cloud sync and AI processing. These events do not include medical report contents or health measurements. Health and fitness conversion events are not sent to advertising attribution services. See the Privacy Policy for analytics and advertising choices.
Health data we share and recipients
- Cloud service providers: Google Firebase processes supported account and health records and uploaded files to provide storage, sync and requested server functions.
- AI providers: Google Gemini processes submitted content and relevant health context. OpenAI can process eligible fallback requests, including meal and body images, wellness conversations and health summaries. Medical-report scans use Gemini.
- Connected platform and mapping providers: Apple Health, Health Connect and Mapbox process information needed for the health connections and activity-map features you use.
- People you choose: friends, meal recipients and circle members can receive the activity information or content you choose to share. They may save their own copies.
We do not sell your consumer health data. We may disclose information when legally required, subject to applicable health-data protections. Any additional sharing requiring consent must be separately authorized; accepting a general privacy policy is not that authorization.
Your health-data choices and rights
Where applicable law provides these rights, you may request confirmation of collection or sharing, access to your health data and a list of recipients with contact details, withdrawal of consent to collection or sharing, and deletion. Send requests to support@dreamforgemobile.com. We may request information needed to verify your identity, but please do not send medical documents as identity proof.
You can also use the app's privacy controls and device permissions. Turning off a permission does not itself erase existing records. Account deletion is available in the app and through our account-deletion request page. Requests concerning prior AI submissions or recipients should identify the relevant feature so we can address downstream deletion obligations. We handle requests within the deadlines and exceptions required by applicable law.
If we refuse a request, you may appeal by emailing the same address with the subject “Health privacy appeal”. We will explain our appeal decision. You may also contact the Washington Attorney General where applicable.
Contact
Dream Forge Mobile Pte. Ltd.
Blk 125 Yishun Street 11, Singapore 760125
+65 8088 4657
Data Protection Officer: support@dreamforgemobile.com