Washington — Consumer Health Data Privacy Notice

1. Who this applies to

This notice applies to natural persons who are residents of, or whose consumer health data is collected in, the State of Washington, USA. It is published as a separate disclosure as required by RCW 19.373.020(1).

2. Categories of consumer health data we collect

• Workout logs (sets, reps, weights, exercise selection, RPE, duration) — collected automatically when you log a session.
• Biometric measurements (body weight, body fat %, muscle mass, circumferences) — collected ONLY if you toggle Biometric consent in Settings.
• Progress photos — collected ONLY if you actively upload them.
• Wellness goals and goal-progress data (weight goals, strength goals, etc.).
• Athleex Score / Athlete Twin projections — derived from the above when you opt in to predictive analytics.

3. Sources

Consumer health data is collected directly from you through the Athleex web and mobile interfaces. Athleex does not purchase or ingest consumer health data from third-party data brokers.

4. Purposes of processing

• Providing the wellness-coaching service you signed up for.
• Sharing data with the Personal Trainer you have linked to your account, to enable coaching (only after you start the relationship).
• Computing optional projections (Athlete Twin, Athleex Score) that you have explicitly enabled in Settings.
• Aggregate, de-identified analytics to operate and improve the service.

Athleex does not use consumer health data for targeted advertising, profile-building for advertisers, or any non-wellness purpose.

5. Sharing

Athleex does not sell consumer health data. Athleex does not share consumer health data with third parties for advertising. The sub-processors listed on /legal/sub-processors receive consumer health data solely as service providers under written Data Processing Agreements that forbid any independent or secondary use.

6. Your rights (RCW 19.373.040–.060)

• Access — you may request a copy of the consumer health data we hold about you.
• Deletion — you may request deletion; on request, deletion is propagated to all sub-processors within 30 days (RCW 19.373.040(2)).
• Withdrawal of consent — you may withdraw your Biometric or Predictive Analytics consent at any time from Settings; revocation triggers the retention cron to purge stored measurements.
• Appeal — if a request is denied you may appeal the decision (RCW 19.373.060) and, if unresolved, file a complaint with the Washington State Attorney General.

To exercise any of these rights, email info@athleex.com. We respond within 45 days.

7. No geofencing

Athleex does not engage in geofencing of healthcare facilities or any other location-based collection of consumer health data, in compliance with RCW 19.373.030.

8. Authentication of requests

Requests under §6 must come from the email address registered to your Athleex account or be authenticated through the in-app account-deletion / data-export flow at Settings → Privacy.

9. Changes to this notice

When we materially change this notice we will post the updated version here and (if you have opted in to communications) email registered Washington residents at least 14 days in advance.