Consumer Health Data Privacy Policy

Effective date: September 8, 2026

1. Scope

This policy supplements our Privacy Policy. It describes how FitScout handles "consumer health data" as defined by the Washington My Health My Data Act, the Nevada Consumer Health Data Privacy Law, and equivalent special category health data rules under the GDPR and UK GDPR.

2. What we collect

We collect the following only when you enter it, and only with your explicit consent:

  • Date of birth (used to derive your age)
  • Biological sex
  • Height and body weight
  • Self-reported fitness level
  • Training notes, which may describe injuries, limitations or medical conditions

We do not collect health data from any other source. We do not buy, sell, or receive it from data brokers, and we do not derive health inferences beyond what you tell us.

3. How we use it

Solely to generate and tailor your workouts and training programs. We do not use it for advertising, profiling, or any secondary purpose.

4. Who we share it with

One processor: Anthropic PBC, whose Claude models generate your workouts. Your data is sent as part of the generation prompt and is processed under Anthropic's commercial terms, which prohibit training on it. We also share it with our infrastructure providers strictly for hosting and storage.

We never sell consumer health data.

5. Your consent

Health data is collected only after you tick the health data consent box in your profile. Leaving it unticked, or unticking it later, withdraws consent: we stop including these fields in anything sent to our AI provider from that moment on. Withdrawing consent does not affect workouts already generated.

6. Your rights

  • Access: view every health field in your profile settings at any time.
  • Correction: edit or blank any field in your profile settings.
  • Deletion: clear the fields yourself, or contact us to delete your account and its health data. We honour deletion requests within 30 days.
  • Withdrawal: untick the consent box in your profile settings.
  • Appeal: if we decline a request you may appeal by replying to our response; we will explain our reasoning in writing.

7. Retention

Health data is retained until you delete it or close your account. It is not retained in backups beyond our ordinary 30-day backup window.

8. Contact

Questions or requests: privacy@fitscout.me.