Last updated: July 2026
This Privacy Policy explains what information Hygeia — an AI wellness companion created by Sue Van Raes of Boulder Nutrition — collects, how we use it, who we share it with, and the choices you have. Hygeia is intended only for adults 18 years of age or older.
If you are a Washington, Nevada, or Connecticut resident, please also read our dedicated Consumer Health Data Privacy Policy, which covers consumer health data specifically.
We use your information to provide and personalize Hygeia's wellness guidance, operate your subscription and usage limits, keep the service safe (including detecting messages that indicate a crisis so we can surface professional resources to you), send you account and security notifications, and meet our legal obligations.
When you send a message, we use your IP address to determine your general location — your country and time zone — so Hygeia can personalize seasonal, regional, and time-of-day guidance (for example, referencing the season where you live). This happens in real time on our infrastructure provider's network edge. Your IP address itself is not stored, is not linked to your account, and is not shared; the only IP-related record we keep is the one-way hash captured at the moment you consent (see section 1). We never collect precise geolocation.
We do not sell your data. We do not use your conversations to train any AI models.
So that Hygeia can remember helpful context across sessions (for example, a goal you mentioned or a food you're working with), it extracts brief facts from your conversations and stores them tied to your account. These memories are encrypted at rest, are used only to personalize your own experience, and are permanently deleted when you delete your account.
Your conversations are stored while your account is active so that your chat history is available to you across sessions. Message content, chat titles, AI memories, and summaries are encrypted at rest using an application-managed key. Meal photos and uploaded files are also encrypted at rest. When you delete your account, this data is permanently and fully deleted (see section 6).
Hygeia is operated by Boulder Nutrition. We share the minimum data necessary with the following service providers so the app can function. We do not sell data to any of them, and none of them use your conversations to train their models.
We retain your information for as long as your account is active. When you request account deletion, your data enters a short grace period (30 days, during which you can cancel) and is then permanently purged, including your conversations, memories, quiz results, journal entries, meal analyses, uploaded images, and usage records. We retain only the minimum legally required records, such as consent timestamps.
Free trial abuse prevention. Our free trial is limited to one per person and requires no credit card. To enforce that, when you start a free trial we store a one-way cryptographic hash (SHA-256) of your email address, along with the date. This single record is kept even if you later delete your account — it is the only thing that survives deletion, and it exists solely to prevent the same address from claiming repeated free trials. A hash is not an email address: it cannot be reversed, read, used to contact you, or shared with anyone, and it cannot be used to identify you. It can only answer the question "has this address already had a free trial?". Your actual email address and all other personal information are still deleted in full. If you believe a trial was recorded against your address in error, email sue@bouldernutrition.com and we can reset it.
You can exercise the following rights at any time:
To make any of these requests directly, email sue@bouldernutrition.com.
All data is encrypted in transit (HTTPS/TLS). Sensitive data — including conversations, chat titles, AI memories, summaries, phone numbers, and uploaded images — is encrypted at rest using AES-256 (AES-GCM) with application-managed keys, on top of our infrastructure provider's own storage encryption. AI providers are configured for Zero Data Retention. No system is perfectly secure, but we work to protect your information with appropriate technical and organizational measures.
Hygeia is intended for adults 18 years of age and older. We do not permit anyone under 18 to use the service, and we do not knowingly collect personal information from anyone under 18.
If we become aware that a user under 18 has provided us with personal information, we will suspend the account and delete the associated data. If you are a parent or guardian and believe a minor has provided us with personal information, please contact us at sue@bouldernutrition.com and we will remove it.
Because Hygeia discusses food, body, and wellbeing, some of the information you share may be considered "consumer health data" under laws such as Washington's My Health My Data Act. We describe how we handle that category in a separate Consumer Health Data Privacy Policy.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date, and where appropriate we will notify you in the app or by email.
Questions about your privacy? Email sue@bouldernutrition.com.