Consumer Health Data Privacy Policy

Effective October 1, 2026

This policy is for residents of Washington (My Health My Data Act, RCW 19.373), Nevada (SB 370) and anyone else who wants it. It describes the consumer health data Iluvatar LLC collects through the Fitnessie app and its server, and your rights over it. Our Privacy Policy covers the same data in more detail.

Consumer health data we collect

• Exercise performance: your routines and workouts: exercises, sets and set types, weights, reps, distances, durations, effort ratings (RPE or RIR), rest times, notes and workout times.
• Body measurements: the bodyweight, body fat and circumferences you log in Fitnessie, and your bodyweight at the time of each workout.
• Data about how your health data reaches your devices: push tokens and sync acknowledgments tied to routine changes.

Heart rate and active energy read from Apple Health during a workout, and measurements other apps saved to Health, stay on your devices. We never collect them.

Why we collect it

Only to provide the app: keep your phone and watch in sync, keep your history when you change devices, show your progress and PRs, suggest your next weights, import and export your history, and, if you turn it on, let the AI assistant you connect work with your training. We don't use it for advertising, marketing or profiling, and we don't sell it.

Where it comes from

From you, as you log in the app on your iPhone and Apple Watch; from files you import (Strong or Hevy exports); from Apple Health, with your permission, for the measurement types listed above; and from the AI assistant you connect, when it writes on your behalf.

Who we share it with

• Cloudflare, Inc., our processor, which stores the data and runs our server.
• The AI assistant you connect (Claude, by Anthropic, or ChatGPT, by OpenAI), only after you give separate consent by turning the connector on in the app and agreeing to what it can read and write. You can withdraw that consent at any time; turning the connector off stops access at once.

We share it with no one else, and we never sell consumer health data.

Your rights

• Access: see what we hold, and which third parties received it. Settings › Export downloads all of it.
• Delete: Settings › Delete all my data deletes everything on our server at once. Deleted rows can remain in database backups for up to 30 days.
• Withdraw consent: turn the AI connector off in Settings; turn Health access off in the Health app.

You can also email legal@fitnessie.app. We respond within 45 days, or tell you within that time if we need up to 45 more and why. We won't treat you differently for exercising these rights.

Appeals

If we decline a request, you can appeal by replying to our decision or emailing legal@fitnessie.app with "Appeal" in the subject. We answer appeals within 45 days and explain the outcome. If you're not satisfied, you can contact the Washington Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General.

Changes and contact

Changes are posted here with a new effective date. Questions go to legal@fitnessie.app.