OPERATOR/apps

Operator Fitness

Consumer Health Data Privacy Policy

This policy is required by the Washington My Health My Data Act (RCW 19.373), Nevada SB 370, the Connecticut Data Privacy Act and similar laws. Our general practices are in the Privacy Policy.

Effective
27 October 2026
Version
2026-10-27

1. Consumer health data we collect

  • Biometrics logs you enter (only with your consent): sleep duration and quality, bodyweight, mood, stress level, calories, protein intake, hydration, recovery score, and private notes.
  • Training data that can reveal your physical condition: workouts and sets (weight, reps, effort, distance, time), personal records, and the estimates computed from them (estimated one-rep max, muscle fatigue, training load, readiness).
  • Inferences computed from the above and shown only to you: readiness score, recovery status, lifestyle-performance correlations.

2. Sources

You, directly in the app, and workout history files you choose to import (Hevy or Strong CSV exports). We do not buy data and do not collect health data from any other source.

3. Why we collect and use it

Only to provide the features you use: storing your logs, showing your history and progress, and computing readiness, recovery, training-load and correlation insights for you. We do not use consumer health data for advertising, marketing, profiling or research, and we do not use it to train third-party AI models.

We collect Biometrics logs only after you give separate consent (at sign-up, on the Biometrics page, or in Settings). Accepting the Terms of Use is not consent. You can withdraw consent at any time in Settings › Privacy & data; logging then stops, and you can delete your existing logs at the same time.

5. Sharing

We do not sell consumer health data. We do not share it with third parties or affiliates. It is processed only by our service providers (cloud hosting and database; error tracking configured without health values) under contracts that limit them to processing it on our instructions. Within our team, access is limited to people who need it to operate the service.

If you join a squad and switch on activity sharing, members of that squad see a summary of your completed sessions, selected personal records and weekly training volume. This happens only at your direction and can be switched off at any time. Biometrics logs are never shown to other users.

We do not use geofencing around health-care facilities.

6. Your rights and how to use them

  • Confirm and access the consumer health data we hold, including a list of all third parties and affiliates it was shared with (none): Settings › Export my data, or email us.
  • Withdraw consent: Settings › Privacy & data.
  • Delete it: delete individual Biometrics entries in the journal, delete them all when withdrawing consent, or delete your whole account in Settings or on the web deletion page. Deleted data leaves our live systems immediately and our encrypted backups within 35 days.
  • Email support@operatorapps.dev for anything else. We verify your identity through your account email, respond within 45 days (extendable once by 45 days with notice), and it is free.
  • Appeal: if we decline your request, reply to our answer within 45 days to appeal. We answer appeals within 45 days. If you remain unsatisfied, you may contact your state Attorney General (for Washington: atg.wa.gov).

7. Contact

Operator Apps
support@operatorapps.dev