Privacy Policy

Effective date: 25 September 2026 · Last updated: 25 September 2026

AGOOD WeightCare (the “App”) is operated by Restart Financial Inc. (“AGOOD”, “we”, “us” or “our”). This policy explains how we collect, use, disclose, retain and protect personal data when you use the App, its supporting services and the clinic and healthcare-provider dashboard.

The App provides programme support and general health and nutrition information. It is not an emergency service, does not provide a diagnosis and is not a replacement for professional medical advice.

1. Who is responsible for your data

For data used to operate the App, maintain your account, provide AI-assisted features, secure the service and deliver notifications, Restart Financial Inc. is the data controller.

Where a participating clinic or healthcare professional invites you to a programme, reviews your progress or uses information to provide care, they may be a separate controller. Their own privacy notice may also apply.

2. Data we collect

Account and contact data

• Email address, name and phone number;
• patient contact details entered by a clinic or healthcare professional when creating an invitation, including the invitation code and status;
• hashed authentication credentials;
• account, login-session and password-reset information.

Health and programme data

• Age, height, current and starting weight and weight history;
• weight-management goals, calorie and protein targets;
• programme start date, duration, progress and reminder preferences;
• health information you choose to provide in chat.

Meal and AI Coach data

• Meals, dates, nutrition estimates, ingredients and meal photographs;
• AI analysis, confidence indicators and notes;
• chat questions, responses and safety classifications;
• relevant profile context and recent scans used to produce a response.

Care-network, device and technical data

• Your linked clinic and healthcare professional and enrolment status;
• push-notification identifiers and topic subscriptions;
• device platform and app version where included in operational logs;
• IP address, request time, errors and security logs.

Clinic administrators can manage their clinic's healthcare professionals and view clinic-level aggregate programme counts. They are not provided with individual patient progress through the clinic dashboard. While a programme link is active, the linked healthcare professional may view the patient's profile and up to 90 days of weight entries, meal history and nutrition summaries. The dashboard link is automatically deactivated when the programme ends.

Camera, notification and Apple Health permission choices are managed by the operating system. Opening the App's device-settings page does not itself send those choices to our servers.

Apple Health data

If you choose to connect Apple Health, the App may read weight and aggregated nutrition information and may write weight and confirmed meal nutrition (calories, protein, carbohydrates and fat) to Apple Health. A weight is added to your WeightCare profile only after you confirm the import. AI-generated nutrition estimates are written only after you save the meal. Data read from Apple Health, including imported weight, individual samples, identifiers and generated summaries, is not sent to Google Cloud Vertex AI.

We do not use advertising SDKs and do not use personal data for cross-app advertising or tracking.

3. How we collect data

We collect data directly from you, from a participating clinic or healthcare professional when they enrol you, automatically when the App communicates with our systems, from processors acting on our behalf, and from Apple Health only when you enable the integration and initiate an import.

4. Why we use data

We use data to create and secure your account; enrol you in a programme; display your profile, progress, meals and weight history; analyse meal photographs; provide AI-assisted health and nutrition information; deliver reminders and password resets; allow your linked healthcare professional to monitor progress; prevent misuse; and comply with legal obligations.

Where UK or EU data-protection law applies, our legal bases may include performance of a contract, consent, legitimate interests, legal obligations, and—where applicable—the provision or management of health care. We rely on an additional lawful condition, such as explicit consent or provision of health care, when required to process health data.

5. Artificial intelligence

We use Google Cloud Vertex AI to estimate nutrition from meal photographs and descriptions, classify requests for safety and supported scope, and generate responses to health and nutrition questions. Before any personal data is sent for these AI features, the App presents a separate notice and asks for your explicit permission.

If you allow AI processing, the data sent to Google may include the meal photograph and description you submit; your chat question and recent chat messages; and relevant WeightCare programme context such as age, height, goals, calorie and protein targets and recent meal-scan summaries. We do not send your password, email address, phone number or data read from Apple Health to Vertex AI.

You may decline permission and continue using non-AI features. You may also withdraw permission at any time under Profile → AI data sharing. After withdrawal, new meal photographs and chat content will not be sent to Vertex AI unless you give permission again. Withdrawal does not reverse processing that occurred while permission was active.

We do not use meal photographs, chat messages or Apple Health information to train our own general-purpose AI models. Google Cloud states that customer data submitted to managed Vertex AI models is not used to train or fine-tune models without the customer's permission or instruction. Depending on the service configuration, Google may retain limited prompt data for abuse monitoring or temporarily cache data to provide the service.

AI output may be inaccurate or incomplete and must be treated as an estimate or general information. It does not make legal or similarly significant decisions, determine treatment eligibility or replace a qualified healthcare professional.

6. Camera, notifications and Apple Health

Camera access is requested only when you choose to photograph a meal. A captured photo is first shown as an on-device preview and is uploaded only after you confirm that you want it analysed. If access is denied, the App can open its operating-system settings page so you can change the permission. Manual meal entry remains available. Notification permission is used for programme, meal, medication, daily check-in or related reminders. You can change these permissions in device settings and available preferences in the App.

Connecting Apple Health is optional. You can turn off syncing in the App and manage or revoke Health permissions in iPhone Settings or the Health app. Turning off syncing does not delete information already imported into WeightCare or written to Apple Health. We do not use Apple Health data for advertising, marketing or sale to data brokers.

7. Who receives data

Where necessary, we disclose data to your linked healthcare professional and clinic; Google Cloud Platform (including Cloud Run, Cloud Storage and Vertex AI); Google Firebase for push notifications; our database and infrastructure providers; Resend, where enabled, for password-reset emails; advisers and authorities where legally required; and a successor if the service is reorganised or transferred.

Processors may use data only for contracted purposes. Our agreements require them to provide the same or an equivalent level of privacy and security protection that applies to the data while it is handled by us. Google Cloud processes Vertex AI data on our behalf under its applicable data-processing and security terms. We do not sell personal data or share it for behavioural advertising.

8. International transfers

Providers may process data outside your country. Where required, we use recognised safeguards such as adequacy regulations or approved standard contractual clauses. Contact us for information about applicable safeguards.

9. Retention

We retain data only as long as reasonably necessary to provide the service and meet security, dispute-resolution and legal requirements. Account, programme, meal, weight and chat data is generally retained while the account is active. Meal photographs remain while linked to your account or meal history unless deleted earlier; deleting a meal removes its associated private photo from active cloud storage. Password-reset links expire after 30 minutes. Login sessions remain until they expire or are revoked. Protected backups may retain residual copies temporarily until overwritten.

You can permanently delete your account from the App after confirming your password. Account deletion removes the account and associated profile, meal history, weight history, chat messages, sessions, programme links and active meal-photo objects from our production systems. Limited security logs, legally required records and residual backup copies may remain for up to 90 days before deletion or overwriting.

Clinics and healthcare professionals may be legally required to retain clinical records for longer under their own policies. When data is no longer required, we delete or irreversibly anonymise it unless continued retention is required by law.

10. Security

Measures include authenticated and role-based access, encrypted network connections, restricted private photo storage, short-lived media links and secure token storage on supported devices. No system can guarantee absolute security.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent where processing relies on consent. You can withdraw AI permission under Profile → AI data sharing and can delete your WeightCare account from the Profile screen in the App. For another request or help with deletion, contact support@restartbank.com. We may need to verify your identity. Where a clinic controls a clinical record, we may refer your request to that clinic.

UK users may complain to the Information Commissioner’s Office. EEA users may complain to their local data-protection authority.

12. Children

The service is not intended for children under 13 years of age. We do not knowingly collect their data without the involvement and authorisation required by applicable law.

13. Changes

We may update this policy when the service, our practices or applicable law changes. We will update the date above and provide additional notice where required.

14. Contact

Restart Financial Inc.
Website: restartfintech.com
Phone: +1 844 651 0707
Privacy email: support@restartbank.com
Support email: support@restartbank.com