Consumer Health Data Privacy Policy

1. Consumer health data we collect

• Workout activity, including exercise names, session dates and frequency, sets, repetitions, weight, duration, distance, and workout notes.
• Recorded and imported activities: the route of a run, walk, hike, or ride you record or import, which is the precise location of the device that recorded it during the activity; the heart rate and calories of a workout you import; and the statistics calculated from them, such as distance, pace, splits, elevation gain, best efforts, and estimated calories.
• Fitness measurements and records derived from your workouts, including statistics, trends, exercise performance, muscle and equipment distribution, and personal records.
• Body measurements you record or import, such as body weight, body fat percentage, and circumferences like waist or chest, with their dates and any notes you add; your height and the body mass index (BMI) calculated from it; and the goals you set.
• Photos you choose to attach to a workout, which may show your body or your training environment.
• AI-generated fitness observations and recommendations based on the workout statistics and body measurements you choose to analyze.

2. Sources of consumer health data

We collect consumer health data directly from information you enter in Braced and from files you choose to import, and derive statistics and insights from that information. When you record a run, walk, hike, or ride, we collect the precise location of your device for the duration of the recording in order to measure it, and we do not collect your location at any other time. If you turn on an import from Apple Health or Health Connect, we also collect, depending on what you import, body weight, body fat percentage, and height, plus waist circumference from Apple Health, or your cardio workouts with their routes, distance, calories, and heart rate. Braced does not collect consumer health data from medical providers or data brokers, does not connect directly to fitness wearables, and does not collect your age or gender.

3. Why we collect and use it

• Record, synchronize, and display the workouts and fitness information you request.
• Measure the activities you record or import, show you their routes on a map, and show a map of each route, by default without its start and finish, to the people who can see the activity.
• Calculate training history, statistics, trends, and personal records.
• Chart your body measurements, calculate your BMI, and show your progress toward the goals you set.
• Show your workouts to other users when you choose to share them.
• Generate AI training insights when you request that feature, and review the quality of that feature.
• Secure, troubleshoot, and maintain the workout-tracking service.

Braced will not collect or use additional categories of consumer health data, or use the data for additional purposes, without first updating this policy and obtaining affirmative consent where required by law.

4. How you can share consumer health data with other people

Braced includes social features, so your consumer health data can become visible to other users when you choose to share it. This sharing is directed by you and controlled by two settings: your profile visibility and the visibility saved on each individual workout. The general Privacy Policy explains both settings in detail.

Please note that new workouts default to a visibility of Everyone. If your profile is set to Public, each workout you record (including its exercises, sets, weights, duration, and any attached photo) is visible to any signed-in Braced user unless you change that workout's visibility. Workouts imported from Apple Health or Health Connect start as Only me unless you choose another visibility when you turn on the import. Your written workout notes are never shown to other users. People who can see a recorded or imported run, walk, hike, or ride see its statistics and a map of its route, by default without its start and finish, unless you hide that map. They see its heart rate only if you turn on Show heart rate to others, and never its calories.

You can change your profile visibility at any time in Profile privacy and choose there how much of your routes others see and whether they see your heart rate, change the visibility of any individual workout, hide the map of any workout, remove followers, block someone so that neither of you can see the other, or set your profile to Hidden to turn social features off. Changing a setting stops future access, but a person who already saw or saved your information may still have it, and a previously issued link to a photo may keep working until it expires.

Photos you attach to a workout are checked automatically before they are stored, so that images breaking our Community Guidelines are not shared. The check is automated and no person at Braced views your photo as part of it. The general Privacy Policy describes this check and the service that performs it.

Body measurements, height, and goals are not part of these features: they are never shown to other users, whatever your visibility settings. A workout's heart rate is shown to the people who can see that workout only if you turn on Show heart rate to others, and its calories are never shown.

5. Consumer health data we disclose

Braced does not sell consumer health data and does not disclose it for advertising. Apart from the user-directed sharing described in section 4, we disclose it only to service providers that process it as needed to provide features you request:

• Amazon Web Services processes and stores workout records, body measurements, photos, and derived statistics as Braced cloud infrastructure, in the European Union.
• Amazon Rekognition receives a workout photo when you upload it, in order to check automatically that it does not break our Community Guidelines before it is stored. The check is automated and looks only at the image itself; no workout records or statistics are sent with it.
• OpenAI receives a limited snapshot of your workout statistics and, if you record them, your body measurements, height, BMI, and goals when you request AI analysis. The snapshot is designed not to include your name, email address, account identifier, workout or measurement notes, or payment information, and Braced instructs OpenAI not to retain the response for its own purposes.

Braced has no affiliates with which it shares consumer health data. Apple, Google, RevenueCat, Expo, and identity providers receive subscription, account, or notification-delivery information, but Braced does not send them your workout records, body measurements, or AI snapshot. When you import from Apple Health or Health Connect, Braced only reads from them and sends nothing back. A push notification about a like or comment identifies the person who sent it and the fact that a workout was involved, but does not include your workout data. OpenFreeMap, which provides the maps Braced shows, receives the IP address of the device showing a map and the area of that map, including when someone else views the map of one of your workouts, but never your workouts or your recorded routes.

6. Your consumer health data rights

Where applicable law provides these rights, you may ask us to confirm whether we collect, share, or sell your consumer health data; access that data; obtain a list of third parties or affiliates that received it; withdraw consent; or delete it. Deletion requests are also sent to processors that hold the data on our behalf.

You may delete your Braced account from Settings or submit a request by email. We may need to verify your identity. We will respond within the period required by applicable law. If we deny your request, you may appeal by replying to our decision with the subject "Consumer Health Data Appeal."

Email privacy@getbraced.app.

7. Deletion

Deleting your account removes consumer health data from Braced's active systems, including workout records, body measurements, your height and goals, photos, derived statistics, stored AI results, and the diagnostic records kept for AI quality review. Deleting an individual workout or measurement marks it as deleted and stops displaying it, but the record is retained on our servers until you delete your account, so that the deletion can be synchronized to your other devices. The route of a deleted recorded or imported workout is an exception: it is erased from our servers within seven days.

Data in routine backups may remain until the backup is overwritten, but no longer than the period allowed by applicable law, and will not be used except for disaster recovery, security, or legal compliance. Technical and security logs may retain account identifiers after deletion, but do not contain your workout records or body measurements.

8. Contact

Consumer health data contact: Airat Akhmadullin, operator of Braced. Email privacy@getbraced.app.