Additional privacy notice
Consumer Health Data Policy
This notice describes Holifit’s collection, use, disclosure, and protection of consumer health data and explains how to exercise related rights.
1. Scope
This Consumer Health Data Policy supplements the Holifit Privacy Policy. It applies to “consumer health data” as defined by applicable U.S. state laws, including Washington’s My Health My Data Act.
Consumer health data generally means personal information linked or reasonably linkable to a consumer that identifies past, present, or future physical or mental health status. This can include information imported from the Apple Health app, information you enter, and health or wellness inferences Holifit creates.
2. Categories of consumer health data collected
Depending on the features and permissions you enable, Holifit may collect:
- Activity and exercise: workouts, exercise type, duration, route, distance, steps, active energy, training load, sets, repetitions, resistance, ratings, performance, and related timestamps.
- Cardiovascular and respiratory: heart rate, resting heart rate, heart-rate variability, recovery, respiratory rate, cardio fitness, and derived zones or trends.
- Sleep and recovery: sleep stages and duration, sleep regularity and quality indicators, recovery, strain, stress, readiness, and related inferences.
- Body and profile: birthday or age, sex, height, weight, body mass index, body fat, lean mass, fitness experience, and training goals.
- Journal and wellness context: journal responses, habits, symptoms, injuries, restrictions, nutrition-related content, subjective feedback, and factors that may affect training or recovery.
- AI-derived health and fitness information: summaries, predictions, scores, patterns, recommendations, memories, and other inferences derived from the information above.
3. Sources
We collect consumer health data from:
- you, when you enter information, journal, exercise, converse with AI, or submit images;
- your device and the Apple Health app, after you grant individual permissions;
- Holifit’s local and cloud calculations, which create health and fitness inferences; and
- service interactions needed to synchronize and provide the features you request.
4. Purposes for collection and use
We collect and use consumer health data to:
- provide workout tracking, planning, history, analytics, sleep, recovery, strain, stress, and readiness features;
- synchronize your information across supported devices and restore account-linked data;
- personalize Holifit and generate AI coaching, plans, summaries, suggestions, and image analysis you request;
- support, secure, debug, and improve Holifit’s health and fitness functionality;
- respond to your support requests and exercise your privacy choices; and
- comply with law and protect the service, users, and others.
We will not collect or use additional categories of consumer health data, or use collected data for materially different purposes, without updating this notice and obtaining consent where required.
6. No sale or advertising use
Holifit does not sell consumer health data. We do not use consumer health data for targeted advertising, marketing, data brokerage, or building advertising profiles. If this practice changes, we will obtain any separate, signed authorization required by law before a sale.
7. Your consumer health data rights
Subject to applicable law, you may have the right to:
- confirm whether Holifit collects, shares, or sells your consumer health data;
- access the consumer health data Holifit maintains about you;
- receive a list of third parties and affiliates with whom your data was shared;
- withdraw consent for collection or sharing;
- delete consumer health data, including information in archived or backup systems as required by law; and
- appeal Holifit’s refusal to act on a request.
To exercise a right, email support@holifit.ai from your Holifit account email with “Consumer Health Data Request” in the subject. Describe the right you want to exercise. We may verify your identity and authority before completing the request. Authorized agents may submit requests where permitted by law.
To appeal a decision, reply to our decision with “Consumer Health Data Appeal” in the subject and explain why you believe the decision was incorrect. We will respond within the period required by applicable law and explain any further complaint options.
Revoking Apple Health permission stops future access but does not automatically delete previously synchronized data. Submit a deletion request if you also want stored cloud information deleted.
8. Security and retention
We restrict access to consumer health data to personnel and processors that need it to provide requested services or fulfill permitted purposes. We use safeguards designed for the volume and sensitivity of the information, including encrypted transport, authenticated access, and database access controls.
We retain consumer health data while your account is active and as needed for the purposes described above. After a verified deletion request, we delete or de-identify covered data unless retention is permitted or required by law. Backup deletion follows normal technical cycles and applicable statutory deadlines.
9. Changes and contact
We will update this notice before collecting or sharing new categories of consumer health data or using it for materially different purposes. We will obtain affirmative consent when required.
Questions and requests:
support@holifit.ai
Holifit LLC