Consumer Health Data Privacy Policy

• Body measurements and composition — weight, circumference measurements, and other body metrics you or your coach record.
• Progress photos — images you upload to track physical change, including posing submissions where you use that feature.
• Nutrition and dietary intake — food and meal logs, macro and calorie figures, nutrition targets, and dietary preferences, restrictions or reactions you record.
• Exercise and activity — workouts logged, sessions completed, personal records, and gym arrivals where you enable location-based check-in.
• Measurements from connected devices and apps — steps, heart rate, sleep, recovery, workouts and related metrics synced from Apple Health, Android Health Connect, WHOOP or Garmin when you connect them.
• Symptoms and health status — symptom trackers and severity ratings, and answers you give in intake forms and check-ins, which may include conditions, diagnoses, medications and health history.
• Supplements and medications — products you record taking, their doses and timing, and your adherence to a protocol your coach has assigned.
• Laboratory results — lab panels, marker values and reference ranges that you or your coach enter or upload.
• Communications about your health — messages between you and your coach, and coach notes about you, to the extent they discuss any of the above.

We collect consumer health data to deliver the service you asked for, and for no other purpose. Specifically:

• To make your data visible to the coach you have chosen to work with, so they can program, advise and track your progress.
• To display your own history back to you — charts, streaks, adherence and progress over time.
• To operate features you actively use, such as nutrition targets, protocol checklists, check-ins and reminders.
• To generate automated estimates and summaries when you use an AI feature, such as estimating the nutrition content of a meal photo. These are processed by our AI provider and are not used to train their models.
• To keep the service secure, prevent abuse, and meet legal and tax obligations.

We do not sell consumer health data, and we do not use it for advertising or targeted advertising. We do not use it to build advertising profiles, we do not share it with data brokers, and we do not operate geofences around any health facility. Data obtained from Apple Health is additionally never used for advertising or shared with data brokers, as Apple requires.

If we ever want to use your consumer health data for a purpose beyond delivering the service you requested, we will ask for your consent first, separately from these policies, and you may decline without losing access to the service.

• Directly from you — what you type, log, upload or answer in the app.
• From your coach — measurements, notes, lab results, protocols and assessments they record about you as part of coaching you.
• From your device — health and activity data from Apple Health or Android Health Connect, only after you grant permission on the device.
• From third-party services you connect — WHOOP or Garmin, only after you authorise the connection, and only until you disconnect it.
• From a coach importing their existing records — where a coach moves their practice to CoachVana, they may import records they already held about you, such as your supplement list or starting measurements.

We share consumer health data only with the following categories of recipient, and only as needed to run the service:

• Your coach, and where your coach works within a gym or company organisation, the administrators of that organisation. This is the point of the product. Progress photos are subject to a privacy switch you control — when it is off, your coach cannot see them.
• Infrastructure and processing providers acting on our instructions: Supabase (database, storage and authentication), Expo (mobile app delivery and push notifications), and Anthropic (AI processing for features you invoke; not used to train models).
• Payment processors — Stripe and PayPal. These receive payment and account information, not your health data.
• Legal recipients— where we are required by law, or to protect someone's safety or our legal rights.

We have no affiliates with which consumer health data is shared. We do not share it with advertisers, data brokers, or any third party for their own purposes.

You have the right to:

• Access the consumer health data we hold about you, and a list of the third parties it has been shared with.
• Delete your consumer health data. You can delete your account at any time from Settings in the app or on the web, which deletes this data immediately and permanently. You can also ask us to do it.
• Withdraw consent to our collection and sharing of it. Disconnecting a health integration stops further collection from that source; deleting your account stops all of it.

To make a request, email privacy@coachvana.com. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, in which case we will tell you why within the first 45. We will not discriminate against you for exercising any of these rights.

If we deny a request you may appeal by replying to our decision. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

If we change this policy we will post the updated version here with a new “last updated” date. Where a change materially affects how we collect, use or share consumer health data, we will notify you in the app or by email before it takes effect, and where the change requires your consent, we will ask for it rather than assume it. We will not apply a material change retroactively to data already collected without your consent.

Questions about this policy: privacy@coachvana.com.