Consumer Health Data Privacy Policy.

What We Collect

• Body stats you enter: weight, body fat percentage, and chest, waist, hips, arm and thigh measurements, by date.
• Workout figures from your watch or phone: average and peak heart rate, a heart rate curve of at most 120 points, heart rate recovery, effort rating, blood oxygen, heart rate variability, resting heart rate, VO₂ max, last night’s wrist or skin temperature change, elevation gained, energy, distance and steps, and the product names of the devices that measured them.
• Daily figures from a wearable you connect (Oura, Whoop, Fitbit, Polar or Withings): readiness, sleep score, minutes asleep, resting heart rate, HRV, steps and strain.
• Workouts you log can say something about your body too. They are kept private to you on the same terms.

We do not collect precise location, and we never ask about your orientation, gender identity, reproductive or sexual health, or medical conditions. Pronouns and a bio are optional free text you write yourself.

Where It Comes From

• You, when you type body stats in.
• Apple Health or Health Connect on your phone, and our Apple Watch and Wear OS apps, after a workout, with your permission.
• A wearable company’s service, when you connect your account with it.

Why, and How We Use It

• Only to show it back to you: in a workout’s summary, your trends, and the morning view on Home, including a suggestion of a lighter day when readiness is low.
• Never for advertising, never sold, never used to build a profile of you, never used to train AI, and never used to decide credit, insurance or employment.
• Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data from Apple Health is used only as described here and never stored in iCloud.

Who Receives It

• Nobody else. We do not share or sell consumer health data. Friends never see it, and neither does our team.
• Service providers that store it for us, under contract and only on our instructions: our hosting provider and our backup host. They hold it encrypted under a key they don’t have.
• When you choose: a workout summary you share includes the time, average heart rate and energy; a download of Your Data holds all of it.

Your Consent

• We collect health data only after you say yes, on a screen of its own, the first time something would be collected. That yes is separate from accepting the Terms, and we record when you agreed and to which version of this policy.
• Saying no changes nothing else: workouts, sets, streaks, challenges and friends all work without it.
• If this policy changes what is collected, why or who receives it, we ask again first.

Your Rights

• See it: Settings, Your Data downloads everything, including each time you gave or withdrew consent.
• Withdraw consent: Settings, Your Data, Health Data. Collection stops at once and the health figures we hold are deleted.
• Delete it: remove entries, a workout or a wearable connection, or delete your account from Sign-In & Security.
• Ask us: for a list of the service providers that hold it, or anything you can’t do in the app, use the contact form. We answer within 45 days. You can appeal a refusal the same way; if you still disagree you may contact your state’s Attorney General.
• We will never treat you differently for using these rights.

How Long We Keep It

• Until you delete it, withdraw consent, disconnect the wearable that sent it, or delete your account. Then it is deleted at once.
• Encrypted nightly backups are kept up to 90 days and then deleted; they are never used to bring back data you deleted.

How We Protect It

• Encrypted in transit, and encrypted at rest under its own key. Separated at the database, so one account can never read another’s; no administrator access.
• If health data were ever exposed without your permission, we would tell you without unreasonable delay and within 60 days, and report it as the law requires.