Consumer Health Data Privacy Policy

This policy applies specifically to “consumer health data” as defined by Washington’s My Health My Data Act and Nevada’s SB370. It describes the consumer health data we collect, why, where it comes from, whether we share it, and the rights you have. It is separate from our general Privacy Policy.

Categories of consumer health data we collect

• Workouts and sets, walks, and physical activity you log.
• Body metrics you enter, such as weight.
• Nutrition and supplement information, and dietary preferences or allergies.
• Daily check-ins (mood, energy, sleep) and habits.
• Optional health information you choose to add: injuries or pain sites, medication context, and progress photos.

Purposes for collecting it

We collect consumer health data solely to provide and personalize the coaching you request — generating your plans, feedback, check-ins, and answers from your own history. We do not sell it and do not share it for advertising or any cross-context behavioral advertising.

Categories of sources

• Information you enter directly into the app.
• Voice notes you choose to record (converted to text).

Categories of consumer health data we share

We share consumer health data only with the service providers (processors) below, and only to operate the app on our behalf. We do not sell consumer health data, and we do not share it with third parties for their own purposes or for advertising.

Categories of third parties and specific affiliates

• Supabase — database, file storage, and authentication (US region).
• Vercel — application hosting.
• Anthropic — the AI model that generates coaching text; relevant context from your logs is processed to produce a response, and is not used to train the model.
• Deepgram — converts your voice notes to text, if you use voice input.
• Twilio - delivers text-message reminders, only if you opt in to SMS. It receives your phone number and the reminder text, which may refer to your coaching.

We do not share consumer health data with any affiliates. We do not share it with any third parties other than the processors listed above.

How to exercise your rights

You have the right to confirm whether we collect, share, or sell your consumer health data and to access it; to withdraw consent to collect and to share; and to have your consumer health data deleted. You can:

• Export everything you’ve logged from More → Settings → Your data.
• Delete your account and all associated data from More → Settings → Your data.
• Contact us at support@frankdataconsultants.com to make any consumer-health-data rights request. We respond within 45 days.

After you delete your data, copies may remain in our encrypted database backups for up to about 15 days until those backups are automatically replaced. We do not restore or use deleted data from backups except as needed to recover from a system failure, and if that happens we delete it again.

We restrict access to consumer health data to the people and processors who need it to run the app. If you appeal a denied request, we will inform you of the outcome in writing.

Contact

Frank Data Consultants, Inc. — support@frankdataconsultants.com.