Consumer Health Data Privacy Policy

Purpose

This policy provides additional information about information that can reveal or relate to your physical or mental health.

It is intended to supplement the Privacy and Health Data Notice and to provide the additional transparency required where consumer-health-data laws apply, including applicable US state consumer-health laws.

What consumer health data Bodywise may collect

Depending on what you choose to use or provide, Bodywise may hold:

• bodyweight and body measurements;
• body-composition and DEXA information;
• training history and exercise performance;
• pain, discomfort, soreness and injury information you disclose;
• conditions or health matters you choose to mention;
• allergies, intolerances and dietary requirements;
• food and nutrition information;
• sleep, recovery, stress, mood, appetite and energy information;
• PAR-Q and other safety-screening answers;
• safety flags, warnings and acknowledgements;
• Coach messages containing health information;
• notes and check-in information;
• progress photographs;
• information calculated or derived by Bodywise from the information you provide.

Sources

Bodywise currently obtains consumer health information:

• directly from you;
• from files or reports you choose to upload;
• from calculations Bodywise performs using information you supplied.

Connected health services

Bodywise does not currently connect to Apple HealthKit, wearables, healthcare-provider systems or other connected health-data services.

Why Bodywise uses consumer health information

We use it to:

• create and adapt training;
• calculate and adapt nutrition;
• provide meal-planning and progress functionality;
• respond safely to information such as pain or other safety concerns;
• provide the virtual Coach with relevant context;
• explain changes and recommendations;
• maintain the narrowly necessary safety/legal evidence described below.

Consent

Where consent is required for collecting or using consumer health data, Bodywise asks for an affirmative health-data consent separately from general Terms acceptance.

You can withdraw consent through Bodywise's privacy controls.

Withdrawal stops future processing that depends on consent.

Sharing and disclosure

Consumer health information may be processed by technology providers needed to operate Bodywise, for example hosting/storage or AI/model infrastructure where the relevant feature requires it.

It may also be accessed by authorised Bodywise personnel only where appropriate for support, safety, privacy, security or another legitimate operational purpose.

Bodywise does not sell consumer health data.

Bodywise does not share consumer health data with data brokers.

Bodywise does not provide consumer health data to advertisers for targeted advertising.

Advertising is currently OFF.

Sale

Bodywise does not sell consumer health data.

If this ever changes, any consent or written authorisation required by applicable consumer-health law would need to be obtained before that activity occurred.

Geolocation

Bodywise does not use precise geolocation to infer visits to healthcare facilities or to target users based on health-related locations.

Your consumer-health-data rights

Where applicable law provides them, you may have the right to:

• confirm whether Bodywise collects or uses consumer health data about you;
• access it;
• obtain a copy;
• withdraw consent;
• request deletion;
• obtain information about categories of third parties with which it has been shared;
• appeal a refusal of a request.

Making a request

Use Bodywise's privacy controls or contact privacy@bodywise.io.

Deletion

Ordinary consumer health data is deleted or anonymised when the Bodywise account is deleted, subject to narrow lawful exceptions.

Bodywise does not retain your entire health history for ten years.

A small restricted legal/safety archive may contain selected material evidence for up to 10 years where reasonably necessary for safety, accountability or legal claims.

Examples include PAR-Q/safety answers, relevant safety flags, important warnings or advice and evidence that important safety advice was declined or not followed.

Ordinary workouts, nutrition history, routine Coach conversation history, progress photographs and ordinary DEXA records are not retained merely because this archive exists.

Security

Bodywise applies access restrictions and security controls appropriate to the sensitive nature of consumer health information.

Report a security concern to security@bodywise.io.

Complaints and appeals

Contact privacy@bodywise.io if you disagree with how a consumer-health-data request has been handled.

Where local law gives you a right to appeal or complain to a regulator, that right remains available.