Health Data Processing Policy (GDPR Article 9)

Last Updated: 23.11.2026

Because Dashlog is fundamentally a health and nutrition tracking platform, the core functionality of our Service relies on the processing of sensitive personal data concerning your health (as defined under Article 9 of the General Data Protection Regulation - GDPR).

This document outlines how we handle this sensitive data and requires your explicit consent.

1. Scope of Health Data Processed

To provide you with protocol planning and biometric tracking, Dashlog processes the following categories of sensitive data:

• Caloric intake, macronutrient distributions, and specific dietary logs.
• Supplementation and medication tracking.
• Physical exercise logs, duration, and perceived exertion (RPE).
• Subjective wellness metrics, including morale, mood, and health checkpoints.

2. Purpose of Processing

Your health data is processed exclusively to:

• Power the tracking, dashboard, and analytical features of your Dashlog account.
• Allow you to visually track your adherence to assigned or personal protocols.
• Enable authorized healthcare professionals or nutritionists (whom you have explicitly granted access) to monitor your progress and adjust your protocols.

3. Explicit Consent Requirement

We cannot process your health data without your explicit, freely given, and informed consent. By accepting this policy, you explicitly authorize Dashlog to store and process the health data you input into the system.

4. Revocation of Consent

You have the right to revoke your consent for Health Data Processing at any time via the "Privacy & Consent" section of your Account Settings.

Consequences of Revocation: Because Dashlog cannot function without processing this data, revoking your consent will immediately result in the restriction of your account. You will lose access to all tracking dashboards, calendars, and protocol features. Your data will be frozen and subsequently scheduled for deletion in accordance with our data retention policies unless consent is re-granted.

5. Protection of Health Data

We treat your health data with the highest level of security.

• It is siloed within our database infrastructure.
• It is never used for automated algorithmic profiling for advertising purposes.
• It is never sold to data brokers, pharmaceutical companies, or third-party marketers.

6. Contact for Privacy Inquiries

If you have questions regarding the processing of your health data, or wish to submit a data subject access request, please contact our Data Protection Officer at [Privacy Email Address].