Draft. This document is being reviewed and is not yet in effect. Bracketed items will be completed before launch.

Consumer health data privacy policy

Effective [date]. Last updated [date].

This policy applies to consumer health data as defined by Washington's My Health My Data Act, Nevada's consumer health data law, and similar state laws. It supplements our privacy policy. Fit by Insurrect Rebellion is operated by 13109267 Canada Inc., 1187 Munro St., Esquimalt, BC, V9A 5P5.

Consumer health data we collect

Sources

You, through the app's setup screens and your conversation with the coach; and Apple Health or Health Connect, if you connect them.

Why we collect and use it

Only to provide the service you asked for: logging, daily summaries, plans, reminders and coaching replies. We collect it only with your consent, which you give during setup and can withdraw in Settings.

Who we share it with

We share consumer health data only with service providers that process it on our behalf to run the app:

We do not sell consumer health data, and we do not share it with third parties for their own purposes. We will not do either without your separate, explicit consent.

Your rights

How to exercise your rights

Most rights are available directly in the app: Settings lets you view, export and delete your data and withdraw consent. You can also email privacy@insurrectrebellion.com. We will confirm your identity by asking you to send the request from the email address on your account, and we respond within 45 days (extendable once by 45 days where reasonably necessary, with notice).

To appeal a decision, reply to our response with "Appeal" in the subject line. We will respond within 45 days. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint or your own state attorney general.