Consumer Health Data Privacy Policy

Some laws, such as Washington's My Health My Data Act, treat information about your physical activity as consumer health data. This policy explains which of that data GymPal collects, why, who sees it, and how to remove it. It applies in addition to our Privacy Policy. GymPal is made by Build Momentum Lab LLC.

What we collect

• Workouts: the days you work out, the two photos you take in the app and an optional caption.
• Gym location: the gym you chose, if you saved one, and whether a workout was logged there.
• Daily steps: if you connect Apple Health or Health Connect for the steps battle, the total number of steps for each of the last seven days. Nothing else is read: no time of day, no route, no heart rate, no other health data.
• Weekly goal and progress: the number of workout days you aim for and whether you reached it.

Why we collect it

Only to provide GymPal: showing your workouts and progress to your squad, running the weekly goal and wager, reminding you to work out, and comparing daily steps with your squad. We do not use consumer health data for advertising, and we never use data read from Apple Health or Health Connect for advertising, marketing or analytics.

Where it comes from

From you: what you capture and enter in the app, and, only if you allow it, the daily step totals your phone's Apple Health or Health Connect provides. You can turn step access off at any time in Apple Health or Health Connect settings, and turning off "Steps battle" in your GymPal profile deletes every step total we hold.

Who sees it

• Your squad: the members you chose to join see your workouts, progress and, if you connected it, today's step count.
• Service providers: Railway hosts our servers and database. They process data only on our behalf.

We do not sell consumer health data, and we do not share it with advertisers or analytics providers. We will not share it with anyone else without your separate, written authorization.

How long we keep it

• Workout photos: 90 days. A small thumbnail: 13 months. The workout day itself stays in your history.
• Daily steps: 30 days.

Your rights

You can withdraw your consent, access or export your data, and delete your account and data from the app. Deleting your account removes your photos and step totals. You can also write to us at the address below; we answer within 45 days. If we decline a request, you can appeal by replying to our answer, and you may contact your state Attorney General.

Contact

support@gympal.io