Consumer Health Data Privacy Policy
This page explains how RepClash handles exercise data that could be treated as "consumer health data" under laws such as Washington's My Health My Data Act and similar rules in Nevada and Connecticut, and as "sensitive" data under other Canadian and US laws. It supplements our Privacy Policy. RepClash is operated by Sunnatillo Yusupov, Tashkent, Uzbekistan (thesunnatilloyusupov@gmail.com).
What we collect, and why
- Workout results: exercise type (push-ups, squats, plank), number of reps or seconds, how long the set took, and the date. From these we compute personal records, streaks and club progress.
- Purpose: only to count and save your sets, show your streak, run challenges and clubs and make share cards. We do not use it for advertising, profiling, insurance, employment or any health diagnosis, and we do not make health inferences about you.
- Not collected: camera video or images (analysed on your device and never uploaded), heart rate, weight, medical conditions, location, or data from wearables.
- Source: only you, through the in-app camera counter.
Consent
We ask for your separate, explicit consent to collect and store your workout results when you start (a separate box from the Terms). Without it we do not save workouts. You can withdraw consent at any time in Profile (Withdraw consent and delete my workout results), which deletes your workout results, streaks, challenges you created and club check-ins and keeps your account, or by deleting your account.
Who we share it with
- Other people you choose to share with: results appear in challenges you create or answer, in clubs you join, and on share cards you create, as described in the Privacy Policy.
- Our service providers (processors): Supabase (database and file storage, United States) and Cloudflare (hosting and caching). They process data only for us.
- We do not sell consumer health data and we do not share it with advertisers or data brokers. We do not use geofences.
Your rights
You can confirm whether we collect your consumer health data and get a list of who it is shared with, access it, withdraw consent, and delete it, in Profile (Download my data, Withdraw consent, Delete account) or by email. We delete it from live systems right away and from any backups within 35 days. We answer within 45 days (extendable once by 45 days). If we refuse a request you may appeal by replying to our answer, and if you are still unhappy you may contact the Washington Attorney General or your local authority.