Back to home

Legal

Consumer Health Data Privacy Policy

Effective date: [DATE PUBLISHED] · Last updated: [DATE PUBLISHED]

This policy explains how GrindSplit LLC collects, uses and shares consumer health data. It supplements our Privacy Policy and is provided under the Washington My Health My Data Act, Nevada's consumer health data law and similar state laws. We apply it to every user, whichever state you live in.

1. Consumer health data we collect, and why

Category What it includes Why we collect it
Apple Health data (only if you connect it) Heart rate, resting and walking heart rate, HRV, VO2 max, blood oxygen, respiratory rate, wrist temperature, steps, distance, walking asymmetry, exercise and stand time, active and basal energy, body weight, body fat percentage, sleep, workouts Calculate readiness, adjust training and nutrition, power AI coaching
Body measurements Height, weight, goal weight, weight history, sex, age Set training loads and nutrition targets
Daily check-ins Soreness, energy, stress, life stress, hydration, hours slept, late caffeine, travel, and alcoholic drinks for users 21 and older Calculate readiness and adjust training
Pain and injury log Body part, type of discomfort, severity, date resolved Adjust training around discomfort
Training data Workouts, sets, reps, weights, cardio, post-workout check-ins, heart-rate recovery, benchmarks Build and progress your program
Nutrition data Meal descriptions, meal photos, barcodes, calorie and macro estimates, nutrition grades Estimate intake and give nutrition guidance
Things we calculate Readiness scores, nutrition and training targets, and other values inferred from the data above Provide training and recovery guidance
Health details you write Anything about your health in coach chat messages or coach memories Answer you and personalize coaching

We use consumer health data only to provide the features you asked for, keep the Service secure and meet legal obligations. We do not use it for advertising or marketing.

2. Where it comes from

  • You, when you enter it in the app
  • Apple Health, from your iPhone and Apple Watch, if you connect it
  • GrindSplit's own calculations, including AI-generated estimates

3. Who we share it with

We share consumer health data only with processors that help us provide the Service. We do not sell consumer health data.

Recipient What it receives Why
Google LLC (Firebase and Google Cloud) All consumer health data saved to your account Hosting and storage in the United States
Anthropic, PBC Age, sex, height, weight, goals and goal weight, training history, HRV, resting heart rate, sleep, readiness, check-ins, nutrition logs, meal photos, form-check text results, and coach memories and chat messages only if OpenAI is unavailable Training program generation, meal analysis, form-check feedback and nutrition suggestions always; coach chat only as a backup — only with your separate consent
OpenAI, L.L.C. Age, sex, height, weight, goals and goal weight, training history, HRV, resting heart rate, sleep, readiness, check-ins, nutrition logs, coach memories and chat messages Coach chat — only with your separate consent

Our analytics provider, PostHog, receives app events such as "check-in saved" or "meal logged" linked to your user ID. It does not receive the health values themselves.

GrindSplit has no affiliates that receive consumer health data.

4. Consent

  • Collection. We collect consumer health data only with your consent, or as necessary to provide a feature you asked for. We ask for consent in the app before collecting it.
  • Sharing. We ask for a separate consent before any consumer health data is sent to Anthropic or OpenAI for AI features.
  • Sale. We do not sell consumer health data. A sale would require your signed written authorization, and we do not ask for one.
  • Withdrawing. You can withdraw either consent at any time in Settings. Features that depend on that consent stop working. You can turn off Apple Health access in iOS Settings → Health → Data Access & Devices → GrindSplit.

5. Your rights

You have the right to:

  • Confirm whether we collect or share your consumer health data, and access it
  • Get a list of every third party and affiliate we have shared it with, with contact information
  • Withdraw consent to collection or sharing
  • Delete your consumer health data. When you delete, we remove it from our live systems, tell our processors to delete it, and it is removed from backups within 6 months.

We will not treat you differently for using these rights.

6. How to use your rights

  • In the app: Settings, for consent choices, data export and Delete Account
  • By email: privacy@grindsplit.ai, from the email address on your account

We confirm that a request comes from the account holder before acting. We respond within 45 days. If a request is complex we may take up to 45 more days, and we will tell you why.

Appeals. If we refuse a request, you can appeal by emailing privacy@grindsplit.ai with the subject "Privacy appeal." We answer within 45 days with a written explanation. If your appeal is denied, you can complain to your state Attorney General. Washington residents can do so at atg.wa.gov/file-complaint.

7. No geofencing, no location

GrindSplit does not collect your location. We do not use geofencing around healthcare facilities or anywhere else.

8. Changes and contact

If we change how we collect or share consumer health data in a material way, we will update this policy and ask for new consent before the change applies to you.