Consumer Health Data Policy

This Consumer Health Data Policy explains how Kyle Mathew (doing business as FitFlexer) ("we," "us," or "our") collects, uses, shares and deletes consumer health data through the FitFlexer mobile application. It is published under Washington's My Health My Data Act and similar laws in Nevada and Connecticut, and it supplements our Privacy Policy. Where the two differ on consumer health data, this policy applies.

1. The Consumer Health Data We Collect

We collect only the health data you give us or that the app reads with your permission:

• Workouts you log: exercise types, the weights you lift, sets and repetitions, and workout durations.
• Body measurements you enter: your body weight and your body fat percentage.
• Gym location: during a workout, the app checks your location at several points to see whether you are near a gym. It keeps a signed log of these location checks on your device and sends them to us to check, including after you reconnect if you were offline (for up to 48 hours). We check each location against our list of gyms and do not store it; we keep only the gym it matched, its name and how far you were from it.
• Walks and runs: during a walk or run, the app records its GPS route and, with your Motion & Fitness permission, the step counts and type of movement (walking, running, cycling, in a vehicle, or stationary) that Apple’s Core Motion detects on your device. These stay on your device during the workout. About every 30 seconds, the app sends us a fingerprint of them: a cryptographic hash that contains no location or step data. When a walk or run needs checking, and when you save the workout, the app sends us the route and readings so we can check that you walked or ran rather than drove. We check them and store only the result: whether the workout was verified, how, and its distance, time and pace. The step and movement readings are never stored on our servers. When you save the workout, its GPS route is stored with it, visible only to you. Once the workout is saved, the app deletes the step and movement readings from your device; if you discard the workout, the app deletes everything it recorded. Without the Motion & Fitness permission, walks and runs cannot be verified; gym check-ins still can. The matched gym and the GPS route can indicate where you train.
• Step count from Apple Health: read from Apple Health on your device, with your permission, and shown only on your device. Your Apple Health step count is not sent to our servers.

We do not collect medical records, diagnoses, medications, reproductive or sexual health data, biometric identifiers, or genetic data.

2. Why We Collect It and How We Use It

We use consumer health data only to provide the features you ask for: recording and showing your workouts and progress, verifying gym check-ins, walks and runs for momentum and for games in your leagues, and showing your activity to the people you choose to share it with. We do not use it for advertising, and we do not sell it.

3. Where It Comes From

Directly from you when you use the app; from your device’s location services and, when you grant Motion & Fitness permission, from Apple’s Core Motion during a workout; and from Apple Health on your device when you grant the app permission to read your step count.

4. Who We Share It With

• Our service providers, who process it only on our instructions: Amazon Web Services, which hosts our servers and database.
• Other FitFlexer users, when you share your activity with them in the app: for example, members of your leagues see your results in its games and the workouts you have not marked private. Your weight and other health measurements are never shown to other users.
• Authorities, only when the law requires it.

We do not sell consumer health data, and we do not share it with data brokers or advertisers.

5. Your Consent

We ask for your separate, explicit consent before we collect any consumer health data. You give it by ticking the Consumer Health Data box when you start using the app, and you can read this policy before you do. Collecting this data is necessary for the app to work, so if you do not consent you cannot use FitFlexer.

We keep a record of each consent: your account identifier, your email address, which version of this policy you accepted, and when. You can withdraw your consent at any time by deleting your account in the app (Settings → Delete Account), which stops all further collection and deletes your health data as described below.

6. Your Rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and access it — the app's data export (Settings → Your data → Download My Data) includes it;
• see a list of the third parties we have shared it with, and how to contact them;
• withdraw your consent; and
• have your consumer health data deleted.

To use any of these rights, use the in-app tools above or email thefitflexer@gmail.com. We respond within 45 days. If we decline your request, you can appeal by replying to our decision; if your appeal is denied, you can contact the Washington State Attorney General.

7. How Long We Keep It

We keep your workouts (including the matched gym, and for a walk or run its GPS route and verification result) and body measurements for as long as your account exists. When you delete your account, we delete them. The only record we keep is the record of your consent (who consented, to which version, and when), which we retain for three years after your account is deleted as evidence that consent was given, and then delete.

8. How We Protect It

Your data is encrypted in transit and at rest, access is limited to what each part of the service needs, and every access to your account data requires your signed-in session.

9. Changes to This Policy

If we change this policy, we will update the date above and ask for your consent again in the app before collecting health data under the new version.

10. Contact Us

Email thefitflexer@gmail.com, or write to:

Kyle Mathew

277 Middle Country Rd, Unit #2018

Selden, NY 11784

United States