Workout X-RayConsumer Health Data Notice
This notice explains how Workout X-Ray LLC collects, uses and shares "consumer health data". It supplements our Privacy Policy.
1. The health data we collect
- Body measurements: height and weight.
- Information that can indicate health: sex and year of birth, when combined with the information below.
- Fitness and training information: your workouts, exercises, sets, reps, the weights you log, your training days, and your answers about how close to failure you trained.
- Your answers about motivation, mindset and experience, including anything you type in the "why now" box.
- Wellness notes: journal notes and moods, if you choose to add them.
- Photos of your workout notes, if you upload them.
- A recording of what the app draws on your screen, only if you tick the optional usage-measurement box. It can show your muscle map, score and plan; anything you type is masked before it leaves your phone, and photos are blocked.
- That you completed our pre-training check. We don't collect which condition, if any, applies to you.
2. Where it comes from
Only from you: what you enter, log or upload in the app.
3. Why we collect it
- To score your workout and build, show and adjust your plan.
- To back up and restore your plan, if you choose to.
- To respond when you contact us, and to keep the Service secure.
4. Who we share it with
We don't sell consumer health data. We share it only with service providers who handle it for us:
- Anthropic: reads the text in photos you upload, and the text of your workout when our own reader can't make sense of it. It doesn't use either to train models, and deletes them within 30 days.
- PostHog: only if you chose to share it, records which screens you see, what you tap, and a recording of what the app draws on your screen — which can include your muscle map, score and plan — so we can improve the app. It does not receive your workouts, answers, notes or anything you type as text: typed text is masked before it leaves your phone, photos are blocked, and recordings are kept for 30 days.
- Sentry: receives crash reports when the app fails. It does not receive your workouts, answers, notes, photos or anything you type.
- Supabase: stores your plan backup, if you create one, and the record that you agreed to our documents.
- Our hosting and network providers, such as Cloudflare: deliver the app and run our server.
Resend sends your sign-in emails and renewal reminders. It receives your email address, not your health data. We have no affiliates that receive this data. We don't use geofencing around healthcare locations.
5. Your rights
You can ask us to:
- confirm whether we hold your consumer health data, and give you a copy;
- delete it;
- withdraw your consent, which stops us processing it and means we can't build or restore your plan;
- tell you the third parties we've shared it with.
Use Export my data or Delete account in Profile, or email [email protected]. We'll verify the request comes from the email linked to your backup, and respond within 30 days, or sooner where the law where you live requires. We may extend that once, by up to 45 more days, if necessary, and we'll tell you if we do.
Deleting your account erases your consumer health data from our server. We keep the record that you agreed to our documents — which notes only that you completed the pre-training check, never what it found — as proof of your consent, no longer linked to your email.
Appeals: if we decline your request, reply to our answer with "Appeal". We'll respond within 45 days. If you're not satisfied, you can contact the Washington State Attorney General at atg.wa.gov.
6. Contact
Workout X-Ray LLC · [email protected]