Stronger TomorrowsConsumer Health Data Privacy Policy
Some state laws, including Washington's My Health My Data Act and Nevada's consumer health data law, protect "consumer health data", meaning personal information that identifies a person's past, present or future physical or mental health. Information in a fitness app (such as weight, body measurements, food intake, exercise, and descriptions of soreness or pain) can fall within that definition. This policy explains how Holmquist Tech Solutions LLC ("we") handles it. It supplements our Privacy Policy and applies to all users, wherever they live.
Consumer health data we collect
- Body data: sex, age, height, weight and weight history.
- Goals and targets: weight goal, target rate, activity level, calorie and macronutrient targets.
- Nutrition data: foods, amounts, meals, water intake, and meal photos or descriptions you choose to analyze with AI.
- Reminder data (only if you turn on notifications): which reminders you chose and when, and which were sent. To decide whether a reminder is useful, our server checks your synced logs about once an hour (for example, whether you've logged a meal today).
- Exercise and recovery data: workouts, sets, weights, durations, plans, stretching and recovery routines and sessions.
- Health-related text you choose to type, for example to the AI Coach or AI Recovery builder ("my lower back is sore"). Please share only what you need.
Sources
Directly from you, when you enter it in the App. We do not buy health data or collect it from other apps, wearables, or data brokers.
Why we collect and use it
- To provide the features you request: calorie and macro targets, food and workout logging, progress tracking, plans, routines and AI features.
- To sync your data to your account so it's backed up and available on your devices.
- To keep the App secure and prevent abuse.
We do not sell consumer health data, use it for advertising, or share it with data brokers.
Who we share it with
We disclose consumer health data only to processors that handle it on our behalf, under contract, to provide the App:
- Supabase: account database and cloud sync.
- Netlify: hosting and the server functions that relay AI requests.
- OpenAI: generates AI responses when you use an AI feature.
Your coach: Coach Kelly can see your name, email, goals and what you log (food, weight, movement and sleep) so she can coach you. She can view it but can't change it. You agree to this when you create an account.
If you turn on reminders, they're delivered through your browser's push service (Apple, Google or Mozilla). The reminder text is encrypted before it leaves our server, so the push service can't read it. Stripe receives billing information but not your health or fitness logs. We may disclose data if required by law. We will ask for your separate consent before sharing consumer health data for any other purpose.
Your consent
When you create an account, we ask for your consent to collect and use consumer health data for the purposes above, separately from our Terms and Privacy Policy. If we update this policy materially, we'll ask again. Your consent, the policy version and the time are recorded with your account.
Your rights
- Confirm and access: see your data in the App, and download a copy in Settings → Your data → Download my data.
- Know who received it: the processors listed above. Ask us for more detail with a privacy request.
- Delete: Settings → Account → Delete account deletes your consumer health data from our live database immediately. We will also instruct processors to delete it where applicable, and backup copies expire on our providers' schedules.
- Withdraw consent: you can withdraw at any time by deleting your account (the App can't operate without this data).
- Appeal: if we deny a request, you can appeal by replying to our decision. Washington residents may contact the Washington State Attorney General if an appeal is denied.
Submit requests in Settings → Your data → Privacy request, or email support@holmquisttechsolutions.com. We respond within 45 days, and may extend once by 45 days where necessary, telling you why.
Security
Access to consumer health data is limited to you and to the minimum personnel and processors needed to operate the App. We use encryption in transit, row-level database security, and server-side secret keys. See our Privacy Policy.
Contact
Holmquist Tech Solutions LLC · support@holmquisttechsolutions.com