Consumer health data privacy policy

Last updated October 23, 2026. This policy is written for the Washington My Health My Data Act (RCW 19.373), Nevada SB 370 and Connecticut’s consumer health data law, and applies to everyone.

Consumer health data we collect

Steps, exercise minutes and sessions, sleep duration, stages and timing, resting heart rate, heart rate variability, VO2 max, weight, height, BMI, body fat percentage, blood oxygen, respiratory rate, Oura readiness score, and self-care and hydration check-ins. Personality and character answers are not health data, but we protect them the same way.

Sources

You, directly (check-ins and typed answers), and the sources you connect: Oura (cloud API, read-only), Android Health Connect (read-only, on your phone), and Apple Health export files you upload.

Purposes

To calculate and show your Fitness and Glow scores, your timeline and your tips. Nothing else.

Consent

We ask for your consent separately for each kind of data (health, money, character, learning, glow) before we store any of it. You can withdraw consent at any time on the Your data page; withdrawing deletes that kind of data.

Sharing

We do not sell consumer health data and do not share it with third parties, except the processors that run the service for us (server hosting, email delivery for messages you ask for). We do not use geofencing around health care facilities.

Your rights

Confirm whether we hold your consumer health data, see it, get a list of every third party and affiliate it has gone to (the processors above), delete it, and withdraw consent. Use the Your data page or email [email protected]. If we refuse a request, you can appeal by replying to our answer; if the appeal is denied you may contact the Washington State Attorney General.