Effective November 1, 2026 · United States
Consumer Health Data Privacy Policy
Morris Digital Ventures LLC operates Northeum. This notice explains how we handle health-related information in our fitness and nutrition service. It supplements our Privacy Policy. Our initial public launch is planned for U.S. adults; the service currently remains an invitation-only adult beta.
What we collect and why
Information you choose to provide can include fitness goals; age and body measurements; weight and progress photos; workouts, exercise performance, readiness, pain, injuries and mobility limits; sleep; food, meals, nutrition and hydration; allergies and dietary restrictions; and health context such as conditions or pregnancy/postpartum status. Your coach messages, custom plans, check-ins and voluntary Social posts may also contain health information. We generate related estimates, summaries, recommendations and achievement records from these inputs.
We use this information to provide the features you request: save and retrieve plans and activity, adapt coaching to your stated needs, estimate meal nutrition, show progress, and support your chosen sharing. We also process information needed to protect the service, handle reports and respond to privacy requests. The app provides general wellness guidance, not medical diagnosis or treatment.
Where information comes from
Sources include your forms, messages, uploaded plans and photos, your interactions with Northeum, and the calculations or AI responses those inputs produce. Another member may mention you in a message or safety report. We do not purchase health profiles from data brokers. Optional weather uses a rounded nearby area; it is not used to infer visits to health facilities.
Who receives information
Health-related information stays private unless you choose a sharing feature. Our service providers may process the categories described above only as needed for their role: Supabase for accounts, databases and stored files; Render for application hosting; Cloudflare for delivery and private photo backups; and OpenAI for disclosed AI requests or safety screening. Resend, Cloudflare email forwarding and Proton process correspondence if you choose to send health information to support; please avoid sending unnecessary health details by email.
OpenAI requests may include the conversation, relevant saved health and fitness context, imported plan or selected image. The relevant feature explains this before submission. Coaching requests can be declined using Not now. Social screening may include photos, captions or comments; flagged or reported material can be reviewed by an authorized moderator. If you choose to share a post, message or exported recap, the selected audience or destination receives the information you include. We do not share health data with corporate affiliates; no affiliate recipients are currently used.
We do not sell consumer health data, use it for targeted advertising, or operate health-facility geofences. We do not embed advertising trackers to collect health data across other websites. External sites you choose to open have their own practices. Ordinary network providers can receive connection metadata; the general Privacy Policy explains those connections.
Your choices and requests
You can review or edit available entries in the app. To request access, a copy, correction, deletion of health information, withdrawal of permission, or information about recipients, email admin@getnortheum.com with the subject Privacy request. Include your account email and the type of request, but not your password, verification codes or health history. No new account is required. We verify ownership using appropriate information before disclosing or changing private data.
You can decline future AI requests, stop optional submissions and change sharing choices. To stop processing already saved health information, request deletion; stopping a feature does not itself erase earlier records. You may delete the entire account from Profile or follow our account deletion instructions. A withdrawal can limit a feature that needs that information, but we do not penalize you for exercising privacy rights.
Timing and appeals
We respond to privacy requests without undue delay, generally within 45 days of receipt. We promptly verify requests and follow any shorter applicable deletion deadline. If a lawful extension is necessary, we explain the reason and timing. To appeal a denial, reply with the subject Privacy appeal or email the same address. We provide a written appeal decision and explanation within 45 days. You may also contact the Washington Attorney General, Nevada Attorney General, or your state's privacy regulator.
Retention and deletion
Saved health records support your account and history until you remove them or request deletion. We also address relevant provider copies and restored test copies when processing deletion requests. Restricted backup copies follow the recovery cycles described in the general Privacy Policy and applicable deletion deadlines; they are not used to reactivate deleted information. If an exception requires retention, we explain its basis and restrict use to that purpose. Copies you shared or others downloaded may be outside our control.
Changes and contact
We update the effective date and provide notice of material changes through the app or another appropriate channel. New health-data categories or purposes requiring permission will be disclosed before that processing begins. Contact Morris Digital Ventures LLC at admin@getnortheum.com.