Consumer Health Data Privacy Policy

Effective 9/27/26

This policy covers "consumer health data" as defined by Washington's My Health My Data Act, Nevada's consumer health data law, and similar laws. It adds to our Privacy Policy. Endless Cap LLC is responsible for this data.

Health data we collect

  • Body measurements: age, sex, height and body weight.

  • Injuries, pain or physical limitations you tell us about.

  • Training performance, effort ratings and personal records.

  • Readiness and recovery check-ins, such as sleep, soreness and energy.

  • Habits and vices you choose to track, such as alcohol, diet or sleep habits, and when you tick them.

  • Anything health-related you write to the AI coach.

Where we get it

Only from you, through what you enter in the app. We do not buy health data or receive it from other companies, devices or apps.

Why we use it

To build and adjust your training, give coach feedback that fits your body and recovery, and show your progress. We do not use your consumer health data for advertising or targeted marketing.

When it leaves your device

  • Without an account it stays on your device, except coach messages.

  • With an account, we ask for your separate consent before it is saved to our database. You can withdraw that consent by signing out and deleting your account.

  • When you use the coach, only the information it needs to answer, such as your message and relevant parts of your profile and training history, is shared with our AI provider to write the reply.

Who we share it with

Only our processors, who handle it on our behalf and under contract: Supabase (database), Cloudflare (hosting and our server) and Anthropic (the AI model behind the coach). We do not sell your health data. We may share aggregated, de-identified trends that cannot identify anyone; those are no longer consumer health data. We will not share it with anyone else without your consent unless the law requires it.

Your rights

You can:

  • Confirm whether we hold your health data and get a list of the third parties we have shared it with.

  • Get a copy of it (Settings → About → Your data on this device, or email us).

  • Delete it (see Delete your account).

  • Withdraw your consent.

Email privacy@endlesscap.com with the subject "Health data request." We respond within 45 days. If we deny your request, you can appeal by replying to our decision with "Appeal" in the subject, and we will answer within 45 days. If you are not satisfied, you may contact your state Attorney General (in Washington: atg.wa.gov/file-complaint).

Contact

Endless Cap LLC, privacy@endlesscap.com