Consumer Health Data Privacy Policy
Busutto Ltd
Last updated: 29 June 2026
This Consumer Health Data Privacy Policy supplements our general Privacy Policy. It describes how Busutto Ltd ("Busutto," "we," "us," "our") collects, uses, shares, and protects consumer health data through the Busutto mobile application ("App").
This policy applies to all users of the App, regardless of location.
1. What Is Consumer Health Data?
"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For the Busutto App, this includes:
- Hydration intake data — the amount and timing of water and other beverages you log, whether manually or via the Busutto smart bottle.
- Hydration targets and recommendations — personalised daily targets generated by the App based on your profile and activity.
- Body metrics — body weight, height, and age that you provide for hydration personalisation.
- Fitness and activity data — active energy burned, workouts, and steps imported from Apple HealthKit or Strava, used to adjust hydration recommendations.
- Inferences and derived data — hydration status assessments, activity-adjusted targets, and other wellness metrics the App calculates from the data above.
2. How We Collect Consumer Health Data
We collect consumer health data through the following methods:
| Source | Data collected | Your control |
|---|---|---|
| Your direct input | Hydration logs, body weight, height, age, daily target preferences | You choose what to enter |
| Busutto smart bottle | Liquid level in the bottle, temperature, battery level (via Bluetooth) | You choose whether to connect the bottle |
| Apple HealthKit | Active energy, workouts, steps (read); dietary water intake (write) | You grant or revoke HealthKit permissions in iOS Settings |
| Strava | Activity and workout data | You choose whether to connect Strava; you can disconnect at any time |
We collect consumer health data only with your consent. We will obtain your separate, affirmative consent before collecting consumer health data, and again before sharing it with any third party (if applicable).
3. How We Use Consumer Health Data
We use your consumer health data solely for the following purposes:
- Providing the Service: Tracking the bottle's liquid height changes, estimating consumed amount, generating personalised hydration targets, and displaying your hydration history and statistics.
- Syncing with Apple Health: Writing your hydration intake data to Apple HealthKit (with your permission) so it appears in the Apple Health app.
- Improving the App: Analysing anonymised, aggregated usage patterns to improve hydration algorithms and App functionality. Individual health data is not used for this purpose.
We do not use consumer health data for:
- Advertising, marketing, or data mining.
- Training, developing, or operating artificial intelligence or machine learning models.
- Profiling or behavioural targeting.
- Any purpose unrelated to providing the hydration tracking service.
4. How We Share Consumer Health Data
We do not sell your consumer health data. We do not share consumer health data for advertising or cross-context behavioural advertising.
We share consumer health data only in the following limited circumstances, and only with your consent:
| Recipient | Data shared | Purpose |
|---|---|---|
| Apple HealthKit | Dietary water intake | To sync your hydration data to Apple Health (with your explicit HealthKit permission) |
| Firebase (Google) | Hydration logs, account data | Cloud storage and authentication to provide the Service |
We do not share consumer health data with data brokers, advertisers, or AI providers. We do not share Strava data with any third party.
5. Your Rights
You may:
- Request access to your consumer health data by emailing us at team@busutto.com. We will provide a copy of the data we hold about you.
- Request deletion of your consumer health data. You can do this at any time through the App (Settings > Delete Account), which immediately and permanently deletes your account and all associated health data. You may also email us at team@busutto.com. Anonymised financial records (transaction IDs, subscription dates) may be retained for tax and accounting obligations; these contain no consumer health data.
- Withdraw consent to the collection of consumer health data at any time by disconnecting integrations (HealthKit, Strava) through the App or your device settings.
To contact us about your data, email team@busutto.com.
6. Data Retention
We retain your consumer health data for as long as your account is active and you use the Service. Upon account deletion:
- All consumer health data associated with your account is permanently and immediately deleted.
- Anonymised financial records (transaction IDs, subscription history) may be retained for tax and accounting obligations, but these contain no consumer health data.
- Data previously synced to third-party services (e.g. Apple Health) is not affected by account deletion — you must manage that data separately through those services.
7. Data Security
We protect your consumer health data with:
- Encryption in transit (TLS) and at rest.
- Firestore security rules that prevent users from accessing other users' data.
- OAuth tokens stored in Apple Keychain on-device and in server-only storage inaccessible to the app client.
Data is stored on servers located in the United Kingdom.
8. Geofencing
We do not use geofencing technology around healthcare facilities, mental health facilities, or any other health-related locations. We do not collect precise location data.
9. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this policy indicates when it was last revised.
10. Contact Us
If you have questions about this Consumer Health Data Privacy Policy, contact us at:
Busutto Ltd
Email: team@busutto.com
United Kingdom