Privacy & your health data

Signed × Sealed is a shared logbook for two people. Some of what you record — your meals, workouts, mood, private notes, and weight — is consumer health data. This page explains what we collect, how we use it, and the choices you have.

• Account: your email address and a hashed password.
• Consumer health data: the food and workouts you log, your mood, your private daily notes, and your weight.

Only to run your shared logbook — to compose your daily seal, your glade, and your trends. Your logs are visible to the two keepers of your book and to no one else. We do not sell your data, and we do not share it with advertisers or other third parties.

One exception, by design: the food museum — the names and nutrition of foods — is a shared library across all books, so logging gets faster for everyone. What you personally ate, and when, stays private to your book.

• Your mood, private notes, and weight are encrypted at rest (AES-256-GCM).
• Passwords are hashed (scrypt); we never store them in the clear.
• Sessions expire and can be revoked instantly (signing out ends access on that device).

You can view and edit your data in the app at any time. You can delete your account from Settings, or email us at privacy@signedxsealed.com to request deletion.

When you delete, your personal identifiers (email, name) and private notes are removed. Because a shared book's history is composed from both keepers, your logged contributions may be kept in anonymized form so your partner keeps the shared book as a read-only keepsake. You may instead request a full erasure of everything you contributed.

Depending on where you live, you may have additional rights (for example, under Washington's My Health My Data Act or the GDPR), including access, correction, and withdrawal of consent. To exercise any of these, email privacy@signedxsealed.com.

When you create or join a book, you give explicit consent for us to collect and process the consumer health data above for the sole purpose of providing this service. You can withdraw consent by deleting your account.