Consumer Health Data Privacy Policy
Effective date: November 10, 2026 · Version 2026-11-10
This Consumer Health Data Privacy Policy is provided by AllinFit, LLC ("All-In Fit", "we") under the Washington My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370), Connecticut's consumer-health-data provisions and similar laws. It supplements our Privacy Policy and applies to "consumer health data" — personal information that identifies or is reasonably linkable to you and relates to your past, present or future physical or mental health status.
1. Consumer health data we collect
- Body and health measurements: weight, height, body measurements, body-fat estimates, date of birth and gender (when used to calculate health targets).
- Fitness data: workouts, exercises, loads, repetitions, personal records, step counts and active energy (including from Apple Health or Google Health Connect, if you enable them).
- Nutrition data: meals, calories, macronutrients, hydration, dietary preferences and restrictions (which may reveal health conditions or allergies).
- Wellbeing data: sleep, check-in and onboarding form answers, and notes about how you feel, injuries or limitations.
- Images: progress photos and technique videos.
- Inferences derived from the above, such as progress trends and AI-generated suggestions.
2. Sources
Directly from you; from devices and health platforms you connect; from your coach (if you are coached); and generated by the Services (including Alfi).
3. Purposes
We collect and use consumer health data only to provide the features you request — tracking, personalised targets, programs and meal plans, coach-client features, progress analysis and AI suggestions — and to secure the Services, comply with law, and handle support. We do not sell consumer health data, and we do not use it for advertising.
4. Consent
We ask for your express consent, named specifically in the acceptance checkbox you tick at sign-up (and when you accept updated terms), (1) to collect and use your consumer health data to provide the features you choose; and (2) to share it with our AI providers when Alfi is used for you — including when your coach uses Alfi to prepare your program. Sharing with a coach happens only when you choose to connect to that coach. You may withdraw consent at any time by contacting support@allinfit.app or deleting your account; features that need it will stop working.
5. Categories of recipients
- Your coach (and their team), when you choose to connect to a coach. A coach may use AI features with your data only if you have given AI consent.
- People you choose to share with (groups, followers, public profile, leaderboards — according to your settings).
- Service providers (processors) that host and process data on our behalf: Supabase (database and storage), Vercel (hosting), AI providers for Alfi (Anthropic; Google Gemini and xAI as backups), Google Firebase (notifications and app analytics), and email providers.
- Authorities, when legally required.
6. Your rights
You have the right to: confirm whether we collect, share or sell your consumer health data; access it, including a list of the third parties and affiliates with whom we have shared it and their contact information (available on request); withdraw consent; and delete it (deletion requests are also passed to our processors and the third parties we have shared it with). We will not discriminate against you for exercising these rights. You may appeal a decision by replying to it; if your appeal is denied, you may contact the Washington State Attorney General.
7. How to exercise your rights
Use Settings in the app, or email support@allinfit.app with the subject "Health Data Request". We will verify your identity and respond within 45 days (extendable once by 45 days where reasonably necessary, with notice).
8. Security and retention
See Sections 6 and 7 of our Privacy Policy. Access to consumer health data is limited to personnel and processors who need it to provide the Services.
Contact
AllinFit, LLC · support@allinfit.app