Consumer Health Data Privacy Policy

Effective date: 29 September 2026

This policy is for consumers in Washington State and Nevada, USA. It explains how Rhubarb Group Pty Ltd (ABN 58 653 651 855), the company behind Dee Zibara (we, us, our), handles consumer health data under Washington’s My Health My Data Act and Nevada’s consumer health data law. It adds to our Privacy Policy, which covers all the personal information we handle.

1. Consumer health data we collect

Consumer health data is personal information that is linked, or reasonably linkable, to you and that identifies your past, present or future physical or mental health. We collect:

• health conditions, symptoms, injuries and medications;
• age, height, weight and body measurements;
• reproductive health information, such as your menstrual cycle, pregnancy, breastfeeding or trying to conceive;
• history of disordered eating, activity levels and health goals;
• heart rate or blood pressure readings you choose to share;
• notes and recordings from coaching sessions;
• the cycle phase and calorie range you enter into our AI meal planner;
• information we work out from the above, such as your calorie range; and
• the fact that you bought or enrolled in a health programme.

2. Why we collect and use it

We use consumer health data only to:

• deliver the programme or service you asked for;
• check that it’s suitable and safe for you;
• set your calorie range and generate meal suggestions;
• support you during your programme;
• keep the records the law requires; and
• respond to your requests.

We don’t use consumer health data for advertising or marketing, and we don’t sell it.

3. Where we get it

• From you, through onboarding forms, coaching sessions, messages and the AI meal planner.
• From our own work, such as calculating your calorie range and taking notes during your sessions.

4. Who we share it with

We share consumer health data only with service providers that process it for us, under contract, to provide your programme.

We may also share it where the law requires, or with anyone you ask us to share it with. We have no affiliates that receive your consumer health data.

5. Website tracking

Our website, deezibara.com, and our members area and checkout at members.deezibara.com use analytics and advertising tools that record which pages are visited (see section 7 of our Privacy Policy). Visiting pages about our programmes could suggest an interest in health. We never send these tools your consumer health data, and we don’t send them your email address. For visitors in Washington and Nevada, these tools load only if you consent.

6. Your consent

We ask for your consent before we collect consumer health data, and separately before we share it, unless collecting or sharing it is necessary to provide a product or service you’ve asked for. You can withdraw your consent at any time (see section 8).

7. Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and get a copy of it, including a list of every third party and affiliate we’ve shared it with and how to contact them;
• withdraw your consent to our collecting and sharing it;
• have it deleted. We’ll also tell the service providers we’ve shared it with to delete it; and
• not be treated differently for using these rights.

If another law requires us to keep some records, we’ll tell you what we must keep and why. For example, NSW health records law requires us to keep health records for 7 years.

8. How to make a request

Email hello@deezibara.com with the subject line “Consumer health data request”, and tell us which right you want to use.

• We’ll verify your identity, using your existing member account if you have one. You won’t need to create a new account.
• Requests are free, up to twice in any 12-month period.
• We’ll respond within 45 days. If we need more time, we may extend this once by up to another 45 days, and we’ll tell you why.

9. Appeals

If we decline your request, you can appeal by replying to our decision with the word “Appeal”. We’ll respond in writing within 45 days and explain what we did and why.

If we deny your appeal, you can complain to the Washington State Attorney General or the Nevada Attorney General.

10. How we protect it

Only the people who need consumer health data to deliver your programme can access it. We protect it with the security measures described in section 11 of our Privacy Policy. We don’t sell consumer health data, and we don’t use geofencing around health care facilities.

11. Changes and contact

We’ll update this policy if our practices or the law change, and show the new effective date at the top. If a change affects how we collect or share your consumer health data, we’ll ask for your consent before it applies to you.

Rhubarb Group Pty Ltd, the company behind Dee Zibara
ABN 58 653 651 855
Email: hello@deezibara.com
Post: 1/39 Leighton Place, Hornsby NSW 2077, Australia