1. Purpose and scope
This Consumer Health Data Privacy Policy explains how Metabody Services, LLC (“Bliv,” “we,” “us”) collects, uses, and shares consumer health data as that term is defined by the Washington My Health My Data Act, Nevada Senate Bill 370 (NRS 603A.400 et seq.), and similar state laws, and how you can exercise your rights over that data. It applies to consumer health data we collect through joinbliv.com and its subdomains, our mobile applications, our AI Assistant, and our related products and services (the “Services”), and it supplements our Privacy Policy, which describes our practices for personal information generally.
What this Policy does not cover. Protected health information that Metabody Medical P.A. and its affiliated professional entities listed below (together, the “Medical Groups”) create or receive in providing you clinical care — and that we handle on their behalf as a business associate — is governed by the Health Insurance Portability and Accountability Act (HIPAA) and the Medical Groups’ Notice of Privacy Practices, and is exempt from the state laws this Policy addresses. Information that has been de-identified in accordance with applicable law is also outside this Policy.
The Medical Groups are:
| Entity name | States served |
|---|---|
| Metabody Medical P.A. | All states except as stated below |
| Metabody Medical Associates of California PC | California |
| Metabody Medical Northeast P.C. | New Jersey and New York |
| Metabody Medical of Kansas P.A. | Kansas |
| Metabody Medical of Colorado P.C. | Colorado |
| Metabody Medical of Texas PLLC | Texas |
2. What consumer health data means
Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. It includes information about health conditions, symptoms, diagnoses, treatments, medications, and interventions; measurements of bodily functions and vital signs; biometric data; data about your use of or purchase of health-related products or services; information that could reasonably indicate that you are seeking health care services; and information derived or inferred from other data — for example from your browsing, purchases, or wearable readings — that identifies your health status.
3. Consumer health data we collect and why
Depending on how you use the Services, we collect the following categories of consumer health data, for the purposes stated:
- Health information you provide — conditions, symptoms, medications, allergies, height, weight, body measurements, health goals, lifestyle and dietary information, and your answers to health questionnaires, assessments, and eligibility quizzes. Purpose: to create your health profile, determine which programs and services are available to you, and provide the Services you request.
- Biometric and physiological data from connected sources — heart rate and heart-rate variability, sleep, activity and steps, workouts, blood glucose, body temperature, respiratory rate, oxygen saturation, weight, and menstrual-cycle data from wearables, health apps, and devices you choose to connect. Purpose: to display, track, and analyze your data and generate insights, summaries, and coaching content for you.
- Laboratory and test results that you upload or that are delivered to your account. Purpose: to display them to you and incorporate them into your health profile.
- Health-related interactions — your questions to and conversations with the AI Assistant, and your use of health features, programs, and content within the Services. Purpose: to respond to you, personalize the Services, and improve them.
- Purchase and service information that reveals health status — the health programs, subscriptions, and clinical services you request or purchase. Purpose: to fulfil your orders and administer your account.
- Inferences we derive from the above — for example a metabolic-health score, trend, or program recommendation. Purpose: to provide insights and recommendations to you.
We also use consumer health data to secure the Services, prevent fraud, comply with law, and, after de-identifying it so that it no longer identifies you, to improve and develop the Services. We do not use consumer health data for advertising, and we do not use it to make decisions about you that have legal or similarly significant effects without human review.
4. Where consumer health data comes from
We collect consumer health data from: you, when you enter information, answer questionnaires, upload documents, message the AI Assistant, or make purchases; devices, apps, and accounts you connect, such as wearables, health apps (for example Apple Health), continuous glucose monitors, and laboratory portals; the Medical Groups, pharmacies, and laboratories, to the extent needed to operate the Services for you (for example, order and shipment status); and our own systems, when we derive insights or inferences from the data above.
5. How we share consumer health data
We do not sell consumer health data, and we do not share it for advertising or marketing. We disclose consumer health data only as follows: to processors that handle it on our behalf under written contracts that limit their use to our instructions — cloud hosting and storage, artificial-intelligence and machine-learning service providers, communications and customer-support tools, identity verification, and analytics that operate solely for us; to the Medical Groups, when you request clinical services, so that they can evaluate and treat you (once received by them, that information becomes protected health information governed by their Notice of Privacy Practices); to pharmacies and laboratories your clinician selects, to fill prescriptions, perform tests, and ship orders you have requested; to our affiliates listed in §6, for the purposes described in this Policy; and as required by law, to comply with legal obligations, respond to lawful requests, or protect rights, safety, and property. If we ever wish to share your consumer health data with any other third party, we will first ask for your separate consent.
The categories of consumer health data that may be disclosed for these purposes are the categories listed in §3.
6. Third parties and affiliates
Categories of third parties with whom consumer health data is shared as described in §5: cloud infrastructure and data-storage providers; artificial-intelligence and machine-learning service providers (currently Anthropic and OpenAI); communications, messaging, and customer-support providers; identity-verification providers; analytics providers acting on our behalf; the Medical Groups and their clinicians; pharmacies; and clinical laboratories.
Specific affiliates with whom consumer health data is shared: Metabody Services, LLC (which operates the Bliv and Metabody brands) and the Medical Groups: Metabody Medical P.A.; Metabody Medical Associates of California PC; Metabody Medical Northeast P.C.; Metabody Medical of Kansas P.A.; Metabody Medical of Colorado P.C.; Metabody Medical of Texas PLLC.
7. Your consent
Consent to collect. Except where consumer health data is necessary to provide a product or service you have specifically requested, we collect it only with your consent. We ask for that consent when you create your account and before you connect a device or begin a program, and the request tells you the categories of data involved, why we collect them, and with whom they may be shared. Consent to share. We do not share consumer health data with third parties beyond the disclosures described in §5. If we ever propose to share it more broadly, we will ask for your separate and distinct consent first. Withdrawing consent. You may withdraw your consent at any time in your account settings or by using the methods in §9. Withdrawing consent will end the features that depend on the data but does not affect processing that occurred while your consent was in effect.
8. Sale of consumer health data and geofencing
We do not sell consumer health data and will not do so without first obtaining a valid, signed authorization from you that meets the requirements of applicable law and is separate from any other consent. We do not use geofencing around any physical facility that provides health care services to identify or track you, to collect consumer health data, or to send you notifications, messages, or advertisements.
9. Your rights and how to exercise them
You have the right to: confirm whether we are collecting, sharing, or selling your consumer health data and to access that data, including a list of all third parties and affiliates with whom we have shared it and an email address or other online mechanism to contact each of them; withdraw consent to our collection and sharing of your consumer health data; and delete your consumer health data, in which case we will also delete it from our archives and backups within the time the law allows and notify any processors, affiliates, or third parties that received it to delete it as well. Exercising these rights will not result in different prices or service levels or any other discrimination.
To exercise these rights, use the “Your Privacy Choices” link in the footer of joinbliv.com, the privacy settings in the app, or email [email protected]. We will verify your identity using information associated with your account and respond within 45 days, extending once by up to 45 days where reasonably necessary with notice to you. If we cannot honor a request — for example, because the data is required for an ongoing clinical relationship or must be retained by law — we will tell you why. Appeals. If we deny your request, you may appeal by replying to our decision or emailing [email protected] with “Appeal” in the subject line. We will respond within 45 days and, if we deny the appeal, will explain our reasons and tell you how to contact your state attorney general.
Requests concerning protected health information held by the Medical Groups are handled under their Notice of Privacy Practices; we will route those requests to them.
10. Nevada residents
This Policy serves as our consumer health data privacy policy under Nevada law. Nevada residents have the rights described in §9 with respect to consumer health data as defined by Nevada law, and may exercise them using the methods above. If we deny a request, you may appeal as described in §9; if the appeal is denied, you may contact the Nevada Attorney General.
11. Connecticut residents
Connecticut treats consumer health data as sensitive data under the Connecticut Data Privacy Act. We obtain your consent before processing it as described in §7, and Connecticut residents may exercise the rights described in our Privacy Policy, including the right to appeal, using the methods above.
12. Changes to this Policy
We will post any revised version of this Policy at joinbliv.com/chd with a new effective date, and we will notify you of material changes by email and in the Services before they take effect. We will not collect or share additional categories of consumer health data, or use it for new purposes, without first updating this Policy and, where required, obtaining your consent.
13. Contact
Metabody Services, LLC
Attn: Privacy
2943 Parkway Blvd, Unit 374, West Valley City, UT 84119
Privacy: [email protected]
Legal notices: [email protected]
Phone: 888-859-2882
