Consumer Health Data Privacy

It applies to everyone who uses the app. Washington and Nevada residents have specific statutory rights, set out in sections 13 and 14. It sits alongside our Privacy Policy and, for California residents, our CCPA Policy.

We class all of the following as consumer health data and protect it the same way, whether or not a particular law would reach that far:

• the training goal, conditions and body areas you select for yourself;
• your answers to the red-flag safety screen;
• workout logs and per-exercise feedback, including any pain or discomfort you report;
• your nutrition profile and targets, food and water logs, and the meal photos you choose to submit;
• wellness check-ins, sleep entries, habits and step counts;
• XP, streaks and achievements, where they are tied to any of the above;
• coach chat messages, because you may type health details in.

One thing this data is not: a finding about your body. You select what applies to you, the app records only that you selected it, and the content it unlocks is general education. The app does not diagnose, confirm or rule anything out.

Every item above comes from something you typed, tapped or submitted in the app. That is the only source.

• We do not buy health data, and we do not obtain it from data brokers, advertisers or public sources.
• We do not read it from other apps, wearables, health platforms or your device unless you enter it yourself.
• We do not infer it from tracking you around the internet. There are no advertising or conversion pixels anywhere in the app.
• We do not collect geolocation of any kind — not precise, not approximate. We never know whether you are near a clinic, pharmacy or any other facility.

We ask for your explicit consent at signup, before you enter any of this data, and we tell you what it will be used for. Consent is separate from paying for a subscription — you are never charged for agreeing, and never charged more for declining.

Large parts of the app are optional. You can skip the AI coach, skip meal photos, skip check-ins, sleep and habits, and still train. If we ever wanted to use this data for a purpose not described here, we would ask you first, separately, and a refusal would not affect the rest of your access.

Only to run the app's features for you:

• building and adapting your training plan;
• running the safety screen that gates recovery content, so content that does not suit your answers is not shown to you;
• calculating and displaying your nutrition targets and logs;
• showing your history, progress, streaks and achievements back to you;
• answering the questions you put to the coach and producing the meal estimates you request;
• responding to a support request you send us, and keeping the service secure and working.

It is never used for advertising, marketing profiles, scoring, segmentation, insurance or employment purposes, or anything you did not enter it for.

We do not sell, rent, license, trade or otherwise exchange your consumer health data for money or for anything else of value — to anyone, ever. There is no authorization form to sign here, because there is no sale for you to authorize.

We do not share it with data brokers, advertising networks, insurers, employers or marketers, and we do not use it to build audiences or target ads on any platform.

Every processor below is bound by a written contract limiting it to processing on our instructions. Two of them hold the stored data:

• Supabase — the database, authentication and file storage the data lives in.
• Vercel — the hosting that runs the application code handling the data in transit.

A third, Anthropic, receives coach chat content in transit, because the coach cannot answer a message it is not given. Section 2 counts your chat messages as consumer health data precisely because you may type health details into them, so we state this plainly rather than bury it:

• Anthropic receives the message you send and the recent turns of that same conversation (up to the last 20), together with the minimum context the coach needs: your goal, your program titles, your recent workout feedback and your plan tier. Your selected conditions, safety-screen answers, check-ins and nutrition history are never sent. Our agreement with Anthropic forbids using this content to train models.
• Some messages never reach it at all — if what you type contains pain, injury or crisis wording, the app detects that before any request is made and answers with a fixed, pre-written safety response. No API call happens, so that message is not transmitted.

Consumer health data is not sent to PostHog, not to Airwallex, and not to push services:

• PostHog receives neutral product events only — which screen was opened, that a step was completed. Health-adjacent URL segments are masked before an event is recorded, and no condition, symptom, food, weight or check-in value is ever attached to an event.
• Airwallex receives only what a payment needs: your email address and your subscription and transaction details. It gets nothing about your training, your body or your food.
• Apple, Google and Mozilla push services receive a push token and the reminder text, which we keep generic — a nudge to train or to log, with no condition, symptom or health value in it.

When you submit a photo of a meal for an estimate, that photo is sent to Anthropic to produce the estimate. Here is what we can actually promise, and we will not overstate it: the photo is sent for that one request and is never written to our storage, our database or our logs, and our agreement with Anthropic forbids using it to train models. What retention applies inside Anthropic's own systems is governed by that provider's terms, not by our code, so we do not claim it keeps nothing. What stays behind on our side is the food entry you choose to save in your log.

The feature is optional. If you never submit a photo, no photo of yours ever leaves the app.

Access is limited to what is needed to operate and support the service. Our people do not browse user health data. Someone looks at your data only when it is necessary to answer a support request you sent, to fix a fault affecting your account, to keep the service secure, or where the law requires it.

Anyone with that access is under a confidentiality obligation, and access is removed when it is no longer needed for their work.

We keep this data while your account is active, because the features are built on your own history. When you delete your account it is deleted with it, and we instruct our processors to delete their copies. We keep no separate health archive.

• Confirm and access — ask whether we collect, share or sell your consumer health data (we do not sell it) and get a copy, along with the list of third parties and affiliates it has been shared with.
• Withdraw consent — stop our collection and sharing of it.
• Delete — have it erased, including by our processors.
• Correct — fix anything inaccurate.
• Appeal — challenge a decision if we refuse a request.
• No retaliation — we will not deny you the service, raise your price or degrade your experience because you used these rights.

• Access and export — Account, then "Download my data". The export includes the health-adjacent data listed in section 2. No request to us is needed.
• Correct — your goal, conditions, equipment, diet preference, nutrition profile and logs are editable in the app. Email us for anything you cannot edit.
• Delete — Account, then Danger Zone. Deletion cascades through your data, and any live subscription is cancelled with our payment provider so no further charge is taken. Billing records the provider holds are kept for as long as tax and accounting law requires.
• Withdraw consent — withdrawing consent means deleting your account. We are not hiding behind that: the plan, the safety gate, the targets and the history are built from this data, so the features cannot run without it, and we will not keep it after you say stop. Export your data first if you want a copy.
• Or email us — send any of these requests to support@physioathletx.com from the address on your account, and we will handle it for you.

We verify a request by matching the email address against the account. We confirm receipt within 10 business days and respond within 45 days; if we need longer we will tell you inside those 45 days and take up to 45 days more. Requests are free. If an authorized agent acts for you, send written permission signed by you naming the agent and the request, and we may contact you to confirm it.

This notice is our disclosure under the My Health My Data Act. The data we collect, the sources, the purposes and the recipients are listed above; we collect health data only with your consent, we do not sell it, and we do not use it for advertising.

If we refuse a request, we will tell you why in writing and how to appeal. Reply to that email and a different person will review it; we respond within 45 days of receiving the appeal. If the appeal is denied, you can submit a complaint to the Washington State Attorney General's Office through its consumer complaint service.

Nevada SB 370 gives you the right to opt out of the sale of covered health information. We do not sell it, so there is nothing to switch off. Send a request to support@physioathletx.com with the subject "Nevada health data request" and we will verify you against your account email and reply in writing confirming that we neither sell nor share it. We respond within 60 days, and may take up to 30 days more where the law allows, telling you first.

If we change what we collect, who it goes to, or what it is used for, we will update this page before the change takes effect and notify you in the app or by email. Any new purpose that goes beyond running the features described here would require your consent first. See also Do Not Sell or Share My Personal Information.

TECHFORWARD SOLUTIONS LIMITED, a Hong Kong company, company number 76317223.

Unit 2A, 17/F Glenealy TowerNo.1 Glenealy, CentralHong Kong

Health data requests, privacy questions and every other matter: support@physioathletx.com.