Who this applies to
This Consumer Health Data Privacy Policy is provided by Coacha LLC, a California limited liability company ("Coacha", "we", "us"), under the Washington My Health My Data Act (RCW 19.373) and applies to "consumer health data" of Washington residents and others protected by similar consumer-health-data laws (for example, Nevada's SB 370). For all other aspects of our data practices, see our main Privacy Policy. Where this policy and the main Privacy Policy conflict with respect to consumer health data, this policy controls for the data and individuals it covers.
1. Consumer health data we collect
"Consumer health data" means personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status. The categories we collect are:
- Activity and exercise data — workouts and their type, duration, distance, pace, elevation, calories, and perceived effort.
- Biometric and physiological measurements — heart rate, heart-rate zones, power output, cadence, and computed training load.
- Bodily measurements you provide — for example height, weight, and age.
- Health context you share with the coach — injuries, pain, symptoms, recovery status, constraints, and any health-related information you include in messages to the AI coach (text, voice, or images).
- Precise location associated with a workout — GPS route data that may be present in activities you connect from Apple Health, used only to display and analyze that workout.
- Inferences we derive from the above to generate your coaching, plans, reviews, and trends.
2. Sources of consumer health data
- You — directly, through onboarding, manual entry, and your messages to the coach.
- Connected services you authorize — Apple Health (HealthKit), Strava, Hevy, and (where offered) Garmin.
- Generated by the Service — metrics and inferences computed from the data above.
3. Why we collect it (purpose)
We collect and use consumer health data only to provide the coaching service you signed up for: to build and adapt your training plans, summarize and analyze your workouts, track trends, and let the AI coach answer your questions with context. We do not use consumer health data for advertising or marketing, and we do not use it for any purpose that is not disclosed in this policy without first obtaining your consent.
4. Consumer health data we share, and with whom
We do not sell consumer health data, and we do not share it except with the service providers ("processors") that are necessary to operate the Service for you, each under a contract that limits their use of the data to providing services to us. The categories of consumer health data shared are the activity, biometric, bodily-measurement, health-context, and location data described in Section 1. The categories of third parties (and the specific processors) with whom we share it are:
- AI provider — Anthropic (Claude API): receives the coaching context and your messages needed to generate coaching. Anthropic does not train its models on this data by default and deletes API inputs and outputs within 30 days.
- Voice-transcription provider — Groq: receives voice audio transiently to transcribe it; not retained as audio.
- Hosting and database — Fly.io and Fly Managed Postgres: store and process the data on our behalf in the United States.
- Crash / error reporting — Sentry: receives diagnostic data configured to exclude message content, request bodies, and credentials.
We do not share consumer health data with affiliates (we currently have none) or with any third party for that party's own purposes. We may disclose consumer health data only where required by law or legal process, or to protect rights and safety, as described in our main Privacy Policy.
5. Consent
We collect consumer health data only after you affirmatively connect a data source or enter the data, and only for the purposes described above. Before collecting or sharing consumer health data for any purpose not identified in this policy, we will first obtain your separate, affirmative consent. You may withdraw your consent at any time (see your rights below); withdrawing consent does not affect processing that already took place while your consent was in effect.
6. Your rights
If you are a Washington resident (or are otherwise protected by a similar law), you have the right to:
- Confirm and access whether we are collecting, sharing, or selling your consumer health data, and access that data.
- Obtain a list of the third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, along with their contact information.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data. On a deletion request, we will delete the data from our records and notify the processors listed above to delete it from theirs.
How to exercise your rights
- In the app: the fastest path is to delete your account — open the app → Me → Settings → Account → Delete account. This deletes your data (including consumer health data), revokes access, and disconnects integrations.
- By email: contact hello@coacha.fit with your request. We will verify your identity (typically by confirming control of your account email) and respond within 45 days, extendable by an additional 45 days where reasonably necessary, in which case we will notify you.
Appeals
If we decline to act on your request, we will tell you why. You may appeal that decision by replying to our response or emailing hello@coacha.fit with the subject line "Consumer Health Data Appeal." We will respond to your appeal within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
7. Data security and retention
We protect consumer health data with encryption in transit and at rest, access controls, and the limits described in our main Privacy Policy. We restrict access to consumer health data to the people and processors who need it to provide the Service. We retain consumer health data only as long as needed to provide the Service or as required by law, and we delete it on the schedule described in the Retention section of our Privacy Policy.
8. Changes to this policy
We will update this policy when our consumer-health-data practices change, and will revise the "Last updated" date above. We will not collect, use, or share consumer health data for materially different, undisclosed purposes without first obtaining your consent.
9. Contact us
Coacha LLC
Email: hello@coacha.fit
Mail: Coacha LLC, c/o Northwest Registered Agent, Inc., 2108 N St, Ste N, Sacramento, CA 95816, USA