Consumer health data privacy policy

What we collect

Only after you give consent in the app:

• Fitness: your programmes, sessions and when you book them, exercises, training preferences, the training goal you choose, targets, workout logs (for each exercise, whether you did, skipped or swapped it, and any minutes, sets or reps; how the session felt and whether something hurt), and notes about effort, pain or injury; body details such as your height.
• Food: allergies and diet choices you add (for example "nut allergy" or "vegetarian").
• Guests: if you're a guest at an event in Retenna and you're 18 or over, foods you tell the organiser you need to avoid.

We may also work out health-related information from these, for example which meals avoid an allergen, how long a session should be, or whether to make your next sessions a little longer or harder, or ease off after something hurt. We treat that as consumer health data too.

We don't collect health information from health apps on your phone or from your location.

Health features are for adults only. Our terms ask anyone under 18 not to turn them on, and we don't knowingly collect health information from anyone under 18. When the age question arrives in an app update, health features will stay off automatically for anyone who tells us they're under 18. If you think we hold health information about someone under 18, email [email protected] and we'll delete it.

Why we collect it

Only to provide the Fitness and Food features you ask for: planning and adjusting your exercise, including from how your sessions went, planning meals and shopping that suit you, and showing these in your own plans, such as Today and Plan my week. For guests, only to plan that event's food.

We never use it for advertising or marketing, and we never sell it.

Where it comes from

From you. A guest's food needs come from the guest.

Who we disclose it to

We don't share consumer health data with third parties or affiliates (we have no affiliates). Service providers process it for us, only to run the features above and under contract:

• Microsoft (Azure): hosting, storage, and the AI that helps plan Fitness and Food.
• Google (Firebase) runs sign-in. It doesn't receive your health information.

People you choose to share with can see what you share. For example, if you share your day with your household, members can see Fitness sessions in it, and an event's organiser and co-hosts can see a guest's food answers.

If we ever want to share consumer health data for another purpose, we'll ask for your separate consent first.

Your rights

You can:

• see whether we collect, share or sell your consumer health data, and get a copy of it;
• get a list of every third party and affiliate we've shared it with (today: none), and an email address to contact them;
• withdraw your consent at any time in the app (Fitness or Food settings) or by email;
• have it deleted, in the app or by email. We also delete it from our service providers' systems; backup copies are overwritten within 7 days.

How to ask. Use the app, or email [email protected]. We'll confirm it's you, and answer within 45 days. If we need more time, we'll tell you why, and take up to 45 more days. We won't charge you, and we won't treat you differently for asking.

Appeals. If we refuse your request, you can appeal by replying to our answer. We'll respond within 45 days and explain our reasons. If you're unhappy with the result, you can contact the Washington State Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov), or the Attorney General of your state.

How we protect it

We limit access to people who need it to run Retenna, encrypt it in transit and at rest, and keep each account's information separate.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before the change applies, and ask for your consent again where the law requires it. The date at the top shows when it last changed.

Contact

Retenna Inc., [email protected]