Consumer Health Data Privacy Policy

Last updated: June 9, 2026

This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies specifically to “consumer health data” as defined by Washington's My Health My Data Act, Nevada's SB 370, and Connecticut's consumer-health-data law. If you live in one of those states (or another state with a comparable law), it describes how we handle your consumer health data and the rights you have. Terms not defined here have the meaning given in our Privacy Policy.

1. What Consumer Health Data We Collect

“Consumer health data” is information linked to you that identifies your past, present, or future physical or mental health status. In the App this includes:

• Injury profile and pain reports (body regions, severity, status)
• Bodyweight and height
• Menstrual-cycle information you choose to log (period-start dates and the derived cycle phase), if you opt in
• Mobility-check results
• The still photos of your body that you choose to record for AI form or mobility analysis, and the form-analysis results (scores and corrections) derived from them

2. Where It Comes From

We collect consumer health data only from you — what you enter in the App and the sets or movements you choose to record. We do not buy it or obtain it from data brokers.

3. Why We Use It

Only to provide the service you requested: to analyze your exercise form and mobility, personalize your training and coaching, surface relevant warmups and load adjustments, and show your progress. We do not use it for advertising or for profiling unrelated to the service.

4. Who We Share It With

• A third-party AI provider in the United States processes the still photos and your training context to return coaching feedback. It does not receive your name, email, or account identifier; it keeps the photos for up to 30 days for safety and then deletes them; and it does not use them to train AI models.
• Our hosting / database provider stores your data so it is available across your devices, encrypted in transit and at rest.

We do NOT sell consumer health data, and we do NOT share it for cross-context behavioral advertising or with data brokers. We will not share it for any purpose that requires your authorization under these laws without first obtaining that separate, valid authorization.

5. Consent

Before we collect the camera-based consumer health data (the photos and the analysis derived from them), we ask for your explicit, separate consent — apart from our Terms and from any subscription — on a consent screen shown before your first recording. The injury, bodyweight, and cycle information is provided by you voluntarily and used only as described above. You can withdraw your consent at any time in Settings → Privacy.

6. Retention and Deletion

We keep your consumer health data while your account is active and permanently delete it within 30 days of an account-deletion request. The camera photos are never stored on our servers. The full per-category retention and destruction schedule is in §6(b) of our Privacy Policy.

7. Your Rights

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access it
• Withdraw your consent to our collection and sharing of it
• Have it deleted (Settings → Delete Account, or by request)

We honor verified requests within the timelines applicable law requires, and we will not discriminate against you for exercising these rights. To make a request, use Settings or email support@repformai.com with “Consumer Health Data Request” in the subject.

8. No Geofencing

We do not use geofencing around any health-care facility to identify or track consumers, collect consumer health data, or send health-related notifications.

9. Contact

For consumer-health-data questions or requests: support@repformai.com (subject: “Consumer Health Data Request”).