Skip to main content

Legal

Consumer Health Data Privacy Policy

Last updated: 1 August 2026

This policy describes how GrabGains handles consumer health data under the Washington My Health My Data Act and the Nevada consumer health data law. It sits alongside our Privacy Policy, which covers everything else and applies wherever you live.

Categories of consumer health data we collect

  • Body measurements you enter yourself: your weight and your body fat percentage.
  • Training you log: exercises, sets, repetitions, weights, duration, distance and how a session felt.
  • Body areas you ask us to avoid, for example after an injury.
  • What you type to the AI coach, if you mention a complaint, an injury or a limitation there.

How we collect it, and why

All of it comes from you, entered in the app. We do not buy health data, we do not enrich what you give us with data from brokers, and we do not receive it from other apps, wearables or devices.

We use it only to provide the app you asked for: building and adjusting your training plan, showing your progress over time, and answering what you ask the coach. We do not use consumer health data for advertising and we do not build profiles for anyone else.

Your weight and body fat percentage are not needed to run the app, so we ask your permission before we store them and you can say no and keep using everything else. You give that permission in the app, separately from accepting our terms.

Categories of consumer health data we share, and with whom

We do not sell consumer health data, and we have never done so. Selling it would require your separate written authorisation, which we do not ask for because we do not sell.

We share it only with the providers that run the service for us, and only so they can run it:

  • Supabase stores all of the above in a database in the European Union.
  • Cloudflare R2 stores photos you upload, on European servers.
  • Google processes your AI coach conversations so that the coach can answer you. Alongside what you type, we send your last five completed workouts: the exercises, the sets with weight and repetitions, and how heavy each exercise felt. We do not send your weight, your body fat percentage or your body measurements. This only happens once you turn the coach on, which is a separate permission you give before your first conversation and can withdraw at any time under Settings; from that moment no new coach data goes to Google.

Other users of GrabGains never see your body measurements or your coach conversations.

How long we keep it

Until you delete it or delete your account. Deleted data also disappears from our backups as those backups age out, which takes at most seven days.

Your rights

  • Confirm and access. You can confirm whether we hold your consumer health data and get a copy of it. In the app: Profile, Settings, Export data. You receive a JSON file with everything.
  • Withdraw consent. For body data, in the app under Settings, Body: deleting it there withdraws the permission you gave. For the AI coach, under Settings: turning it off stops any further data going to Google.
  • Delete. In the app: Settings, Delete account. You can also do it at grabgains.com/delete-account. We pass the deletion on to the providers listed above.

You do not need to give a reason and we will not treat you differently for using these rights.

How to reach us, and how to appeal

Mail [email protected]. We answer within 45 days and may extend that once by another 45 days where the law allows, in which case we tell you why.

If we refuse a request, you can appeal by replying to our answer or mailing the same address. We respond to an appeal within 45 days and explain the reasons. If we refuse your appeal, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint, or to the Nevada Attorney General if you live in Nevada.