1. Who This Policy Applies To
This Washington Policy applies to Washington residents who use the Service. The Service is intended for users 18 years of age or older only.
2. Categories of Consumer Health Data We Collect
Depending on how you use the Service, we may collect the following categories of consumer health data:
| Category | Examples | Required? |
|---|---|---|
| Fitness and activity data | Workout logs, exercises, sets/reps/weights, steps, active energy, distance | Optional (you provide or connect Apple HealthKit) |
| Body metrics | Height, weight, body measurements, weight goals | Optional |
| Nutrition data | Food and meal entries, calories, macronutrients, dietary preferences, allergies | Optional |
| Sleep data | Sleep duration and sleep-stage summaries (if you connect HealthKit) | Optional |
| Heart rate | Heart-rate readings (if you connect HealthKit) | Optional |
| Health insights | AI-generated wellness summaries, scores, and recommendations based on your inputs | Generated when you use those features |
| Account and profile data | Age (18+), sex/gender (optional), fitness goals, fitness level | Partially required for core features |
We do not collect: reproductive or menstrual data, mental-health or mood/journal data, medical diagnoses or conditions, body/progress photos, or biometric identifiers such as face templates or voiceprints.
Food photos: If you use camera-based nutrition features, images are transmitted to our AI providers only to process your request and are not stored on our servers.
3. Sources of Consumer Health Data
We collect consumer health data from:
- You directly — when you log workouts, meals, goals, or profile information in the App.
- Apple HealthKit (iOS only) — when you grant permission, we read only the categories you approve (see Section 4).
- AI processing — when you use AI-powered features, we send limited inputs to third-party AI providers to generate outputs (see Section 6).
We do not obtain consumer health data from data brokers, and we do not buy consumer health data.
4. Apple HealthKit Data (Washington Users)
If you connect Apple HealthKit on an iOS device, we may read the following categories only with your permission:
- Step count
- Walking/running distance (and, where available, cycling and swimming distance)
- Heart rate
- Active energy burned
- Sleep analysis (including sleep duration and sleep-stage summaries where available)
- Workouts (type, duration, calories, distance)
- Body mass (weight) and height
We do not write data to Apple HealthKit.
When you first connect HealthKit, the App shows an in-app explanation of what will be synced and why; your HealthKit data is sent to our backend only after you grant the iOS HealthKit permission and enable the integration in the App. Selected HealthKit summaries and workouts may then be synced to our secure backend so you can view history across devices. HealthKit data is never used for advertising, marketing, or data brokerage, and is never sold.
If you revoke HealthKit access — in your iOS Settings or by disabling the integration in the App — we stop reading new HealthKit data and delete HealthKit-sourced data from our backend promptly (and in any event within 30 days), even if you do not delete your account.
You may revoke HealthKit access at any time in your iOS Settings.
5. How We Use Consumer Health Data
We use consumer health data only to:
- Provide, operate, and maintain the Service (e.g., display logs, charts, and history).
- Personalize workouts, nutrition guidance, and wellness insights you request.
- Generate AI-powered content you initiate (e.g., meal ideas, workout plans, health summaries).
- Send transactional notifications you enable (e.g., workout or meal reminders, health-report alerts).
- Secure the Service, prevent fraud and abuse, and enforce our Terms.
- Comply with applicable law.
We do not use consumer health data for targeted advertising.
We do not sell consumer health data.
We do not share consumer health data for independent use by third parties for their own purposes.
6. How We Share Consumer Health Data
We share consumer health data only in these limited circumstances:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Cloud hosting (Supabase / AWS) | Store and serve your account data securely | Account, workout, nutrition, and synced HealthKit summaries |
| AI providers (OpenAI, Anthropic, Google Gemini) | Generate AI outputs you request (acting solely as our service providers under contract; they do not use your data for their own purposes, advertising, or model training) | Minimum necessary inputs (e.g., goals, recent logs, food descriptions or transient food images, and summarized or derived HealthKit metrics such as daily steps and sleep summaries) — not your full HealthKit history |
| Apple / Google | Sign-in and in-app purchase processing | Limited account and billing metadata per platform policies |
| Push notification services (Expo) | Deliver notifications you enable | Device push token and message content |
| Analytics (privacy-respecting) | App usage and stability | De-identified or pseudonymous usage events — not raw health logs |
| Legal and safety | Law, court order, or protection of rights | As required and permitted by law |
A current list of subprocessors is available upon request at privacy@hashburytechnologiesllc.com.
7. Your Consent
We collect and process consumer health data based on your affirmative, opt-in consent, including when you:
- Create an account and accept our Terms and Privacy Policy;
- Enter health, fitness, or nutrition information;
- Connect Apple HealthKit and approve specific data categories; or
- Use AI-powered features.
You may withdraw consent at any time by disconnecting HealthKit, stopping use of relevant features, or submitting a request under Section 8.
8. Your Washington Rights
Under the MHMDA, Washington residents have the right to:
- Confirm whether we are collecting, sharing, or selling consumer health data concerning you.
- Access consumer health data we maintain about you.
- Delete consumer health data we maintain about you.
- Withdraw consent to our collection and sharing of consumer health data.
- Appeal a denial of a rights request.
We do not sell consumer health data. If our practices change, we will update this Washington Policy and obtain any consent required by law before selling.
How to Exercise Your Rights
Email privacy@hashburytechnologiesllc.com with the subject line "Washington Consumer Health Data Request" and describe your request. We may verify your identity before processing it.
We aim to respond to verified requests within 30 days, or within the timeframe required by Washington law.
Appeals
If we deny your request, you may appeal by replying to our response email within 45 days of receiving it. We will respond to appeals within the timeframe required by law.
9. Data Retention and Deletion
- Consumer health data is retained while your account is active.
- When you delete your account in the App, we delete your personal data from our systems immediately as part of the deletion request.
- We do not currently maintain database backups of your personal data. If we begin retaining backups in the future, we will update this Washington Policy to disclose the backup retention period.
- Apple and Google retain transaction and tax records for in-app purchases under their own policies. We do not maintain payment-card information.
10. Data Security
We use commercially reasonable safeguards, including encryption in transit and at rest, access controls, and row-level security in our database. No system is perfectly secure; see our Privacy Policy for additional detail.
11. Children's Data
The Service is for users 18 and older. We do not knowingly collect consumer health data from anyone under 18.
12. Changes to This Washington Policy
We may update this Washington Policy from time to time. Material changes will be communicated through the App, by email, or by other reasonable means. The "Last Updated" date above will reflect the most recent revision.
13. Contact Us
Hashbury Technologies LLC
2323 Trinity Hills Court
San Jose, CA 95138
United States
Privacy inquiries: privacy@hashburytechnologiesllc.com
General support: hashburycorp@hashburytechnologiesllc.com