Consumer Health Data Privacy Policy
This policy is published under Washington's My Health My Data Act and applies to every FITTSO user, wherever you live. It supplements the Privacy Policy. Where the two differ for consumer health data, this policy controls.
WHO IS RESPONSIBLE
FITTSO Operations, Inc., an Alaska corporation (entity 10355798), is the regulated entity for the purposes of this policy. The consumer app is provided free by FITTSO Foundation, Inc., and platform data is held by FDS, Inc., both affiliates bound by this policy. Contact: zac.s@fittso.app.
CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT
- Wearable and device biometrics — heart rate, heart-rate variability, sleep duration and stages, respiratory rate, blood-oxygen, skin temperature trend, readiness, recovery, strain and stress scores, VO2 max, steps, active and basal calories
- Activity — workouts, duration, distance, pace, elevation, and route geometry where you record one
- Body composition — weight, body fat, lean mass and related readings from a paired scale or entered by you
- Nutrition — foods and portions you log, barcodes you scan, and meal photographs you take, plus the nutrient values derived from them
- Subjective health information — mood, soreness, notes, and health topics you raise with THEIA
- Derived health data — FITTSCORE and other scores, trends, and inferences we compute from the categories above
- Precise location — only when you record a route or check in at a place, and only at the level of detail you choose
Not collected today: laboratory results, genetic data, reproductive or sexual health data, and gender-affirming care data. If any is added, this list changes first and you are asked for consent for that category before it is collected.
SOURCES
You; a device or service you connect (Apple Health, Health Connect, Oura, WHOOP); a Bluetooth scale you pair; a workout file you import; and our own computation over the above.
PURPOSES
To show you your own information; to compute the scores and trends you ask for; to run the features you use; to show what you choose to share to the people you choose; to keep the service secure; and to meet legal obligations. Each purpose is described in the Privacy Policy.
Consumer health data is never used for advertising, marketing, or third-party profiling, and there is no setting by which it could be. It is used to train AI models only with your separate, specific, optional consent — and data from device partners that prohibit training is excluded even then.
SHARING
We do not sell consumer health data. We do not share it with data brokers, advertisers, ad platforms, insurers, or employers, in identifiable, aggregated, or de-identified form.
Consumer health data is shared only with: (1) our service providers, who process it on our instructions under written terms and have no independent right to use it (listed in the Privacy Policy); (2) a person or professional you specifically authorize, to the extent you authorize; (3) our affiliates FDS, Inc. and FITTSO Foundation, Inc., under this policy; and (4) where legally compelled, in which case we notify you unless the law prohibits it.
A sale or transfer of the business would not by itself allow a new owner to use consumer health data beyond this policy.
YOUR RIGHTS
You have the right to: confirm whether we are collecting, sharing, or selling your consumer health data and to access it, including a list of every third party and affiliate it has been shared with and a way to contact them; withdraw consent to collection or sharing; and delete your consumer health data.
To exercise these rights: use the controls in Settings (disconnect a source, withdraw a consent, export, deactivate, delete), or write to zac.s@fittso.app from the email address on your account. We respond within 45 days, extendable once by 45 days if reasonably necessary, and we will tell you if we extend.
Deletion: when you ask us to delete, we delete the data from our records and from our network, and we instruct every affiliate, processor, and other recipient to do the same. Data in backups is deleted when the backup is overwritten on its rolling cycle, and in the meantime is not restored to production.
Appeal: if we decline a request, we tell you why and how to appeal. Send an appeal to zac.s@fittso.app with "Appeal" in the subject. We respond in writing within 45 days. If we deny the appeal, we tell you how to contact the Washington Attorney General or your state's equivalent.
We do not discriminate against you for exercising any of these rights.
CHANGES
Material changes are announced in the app and require your acceptance before you continue. This is version 2026-09-12.1, effective September 12, 2026.
CONTACT
FITTSO Operations, Inc. · An Alaska corporation, entity 10355798 · zac.s@fittso.app