Consumer health data privacy policy

The health data we collect, and why

We treat everything you log in the app as health data:

• Your training: your workouts, the exercises you create, your sets (weight, reps, time, distance, RPE, which is how hard a set felt, and set type), your templates and your rest settings.
• Your body measurements: your body weight, body fat and tape measurements.
• Your words: the names and notes you type into the app.
• What the app works out from them: your records and the charts of your progress.
• How often you train, only if you say yes: each workout you finish, marked only with its week (never the day or time you trained, or anything you logged), and that you turned sharing on.

We collect it to run the app for you: to store, sync and restore your history, and to show you your progress. Only if you say yes, we also count how often you train, to learn whether people keep training with Voimana. The app asks for your agreement before you log anything, and asks separately before it shares how often you train.

Where it comes from

Only from you: what you type into the app, and an export from Strong if you choose to import one. The app adds the time you log each thing, and works out from it the week of each workout.

Who we share it with

No one, and we never sell it. Supabase stores it for us, on our behalf, on servers in Oregon, United States, and, only if you say yes, PostHog counts how often you train for us, on servers in the United States; the law calls each a processor, not sharing. If you email us about your health data, your email passes through Cloudflare and arrives in a mailbox Google hosts for us. The companies that handle your data are all named in our privacy policy.

Your rights, and how to use them

• Confirm and see it. Ask us whether we hold your health data, and we will send you a copy and the list of every company that handles it. In the app, Profile, then Export all your data, gives you a copy at once of your workouts, measurements, templates, exercises and settings. It leaves out what you deleted, a workout still in progress and what PostHog holds; email us for those.
• Withdraw your consent. Delete your account, or email us and we will delete it for you. The app asks for your agreement before you can log anything. To stop sharing how often you train, turn it off in the app, Profile, at any time.
• Delete it. In the app, Profile, then Delete account removes it from our server right away, or email us. It also asks PostHog to delete what it holds, which PostHog does within 45 days. The copies our providers keep expire on their own, as our privacy policy describes.
• Appeal. If we turn a request down, reply to our answer and we will decide again and tell you why. If we still say no, you can complain to Washington's Attorney General at atg.wa.gov, or to the attorney general where you live.

Email us from the address on your account, so we know it is you. We answer within 30 days, and using a right never costs you anything.