Nevada Consumer Health Data Privacy Policy

English
Indonesian

Effective Date: September 1, 2026

This Nevada Consumer Health Data Privacy Policy applies to Nevada consumers and supplements the Myfitsociety Privacy Policy.

It explains how Myfitsociety collects, uses, shares, and protects consumer health data as defined under Nevada law.

1. CONSUMER HEALTH DATA WE COLLECT

Depending on the features you use, consumer health data may include:

  • weight, height, body measurements, and body fat information;
  • workouts, exercise, steps, running, cycling, and other activity information;
  • calories, nutrition, food, and dietary information;
  • sleep and fasting information;
  • menstrual cycle information;
  • heart rate or similar activity-related information received from a connected service;
  • health, fitness, wellness, or body information you voluntarily provide;
  • photos or images used to provide health, fitness, body, or wellness-related features; and
  • health, fitness, or wellness-related estimates, recommendations, predictions, or inferences generated from information you provide.

We collect only the information reasonably necessary for the features and purposes described in this Policy or otherwise permitted by law.

2. SOURCES OF CONSUMER HEALTH DATA

We may collect consumer health data:

  • directly from you;
  • through your use of Myfitsociety features;
  • from your device or device sensors when you enable an applicable feature;
  • from services you choose to connect, such as Android Health Connect, Strava, or Garmin; and
  • from calculations, estimates, or inferences generated from information you provide or authorize us to receive.

3. HOW WE USE CONSUMER HEALTH DATA

We may use consumer health data to:

  • provide and personalize fitness, nutrition, activity, body, sleep, fasting, menstrual, and wellness features;
  • calculate or provide workout, calorie, macronutrient, fitness, or wellness recommendations;
  • provide AI-powered features requested by you;
  • synchronize connected fitness services;
  • display progress and activity history;
  • operate, troubleshoot, secure, and improve the features you use;
  • provide customer support;
  • prevent fraud, abuse, and security incidents; and
  • comply with applicable law or establish, exercise, or defend legal claims.

We do not intentionally use consumer health data for targeted advertising.

4. HOW CONSUMER HEALTH DATA IS PROCESSED AND SHARED

Consumer health data may be stored, organized, analyzed, transmitted, or otherwise processed as reasonably necessary to provide the features you request.

We may provide consumer health data to processors or service providers that assist us with services such as:

  • cloud hosting and storage;
  • infrastructure and security;
  • artificial intelligence;
  • connected fitness integrations;
  • technical monitoring; and
  • other functionality necessary to provide the Service.

Depending on the feature, these providers may include Google, OpenAI, Amazon Web Services, or other service providers acting on our behalf.

We may also share consumer health data:

  • with a connected service or third party when you request or direct the interaction;
  • with authorities or other recipients where disclosure is required or authorized by law;
  • where reasonably necessary to protect legal rights or security; or
  • in connection with a merger, acquisition, restructuring, or similar business transaction as permitted by law.

The categories of consumer health data shared depend on the feature involved and are limited to information reasonably necessary for the applicable purpose.

We do not sell consumer health data.

Categories of Consumer Health Data Disclosed to Processors

Depending on the feature that you request and the permissions you grant, the categories of consumer health data disclosed to a service provider acting on our behalf may include: (a) fitness, workout, step, running, cycling, and heart rate data; (b) body measurements, weight, body composition, and progress data; (c) food, nutrition, sleep, and fasting information; (d) menstrual-cycle information; (e) photos and images you submit for the feature; and (f) information supplied to or generated through an AI-enabled feature. The specific data disclosed is limited to what is necessary for the service involved.

Categories of Consumer Health Data Shared with Third Parties or Affiliates

When a disclosure is considered “sharing” under Nevada law, the categories of consumer health data that may be shared depend on the interaction you request or direct. They may include: (a) fitness and activity information, such as workouts, steps, running or cycling metrics, and heart rate; (b) body, progress, or wellness information; and (c) nutrition, sleep, fasting, or menstrual-cycle information, but only if the particular third-party interaction you authorize calls for those categories. We do not share consumer health data with third parties for targeted advertising. Other legally permitted or required disclosures may be made only as allowed by applicable law.

Categories of Third Parties and Affiliates

Where a disclosure is treated as “sharing” under Nevada law, recipient categories may include (a) connected fitness services or other external services that you specifically direct us to interact with; and (b) other recipients to whom disclosure is expressly authorized or required by law. The applicable categories of shared information depend on the interaction you request, as described above. Infrastructure, storage, security, and AI service providers acting solely as processors on our behalf are described separately and are not automatically treated as third-party sharing recipients.

We do not currently identify any Myfitsociety affiliate that receives consumer health data in a manner treated as sharing under Nevada law. Any additional categories of data, purposes, or third-party or affiliate recipients that require notice and affirmative consent under Nevada law will be disclosed, and consent obtained, before the applicable collection or sharing.

5. THIRD-PARTY COLLECTION ACROSS WEBSITES OR SERVICES

We do not intentionally permit third parties to collect your consumer health data over time and across unrelated Internet websites or online services when you use Myfitsociety.

In particular, we do not intentionally provide health, fitness, menstrual, nutrition, body measurement, progress photo, or AI conversation content to advertising platforms for targeted advertising.

6. YOUR NEVADA CONSUMER HEALTH DATA RIGHTS

Subject to Nevada law, you may request that Myfitsociety:

  • confirm whether we collect, share, or sell consumer health data relating to you;
  • provide a list of third parties with whom your consumer health data has been shared or sold;
  • stop collecting, sharing, or selling your consumer health data;
  • delete consumer health data relating to you; or
  • review and correct consumer health data associated with your account where correction is available.

To submit a request, email [email protected] from the email address associated with your account or use another privacy request method made available by Myfitsociety.

We may request information reasonably necessary to authenticate your identity and protect your information.

We will respond within the time required by Nevada law.

For authenticated deletion requests, we will also take the steps required by Nevada law with respect to processors, contractors, affiliates, or other recipients of the relevant consumer health data. Information stored solely in archived or backup systems may be handled as permitted by applicable law.

7. WITHDRAWING CONSENT

Where our collection or sharing of consumer health data is based on your consent, you may withdraw that consent and request that we stop the applicable collection or sharing by contacting [email protected] or through another method we make available.

Withdrawing consent may prevent us from providing a feature that requires the affected information.

Where Nevada law requires separate affirmative, voluntary consent for a new category of consumer health data, a new recipient, or a new processing purpose, we will request that consent before the applicable collection or sharing occurs.

8. APPEALS

If we decline to take action on an authenticated Nevada consumer health data request, you may appeal the decision by emailing [email protected] and stating that you are submitting a Nevada Privacy Appeal.

We will review the appeal and respond in writing within the period required by Nevada law.

If an appeal is denied, we will provide the information required by Nevada law, including information for contacting the Nevada Office of the Attorney General where applicable.

9. SECURITY

We limit access to consumer health data to employees and processors where access is reasonably necessary for the purposes described in this Policy.

We use reasonable administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of consumer health data.

No security system can guarantee absolute security.

10. MATERIAL CHANGES TO THIS POLICY

If we materially change the categories of consumer health data we collect or share, the categories of recipients, or the purposes described in this Policy, we will provide notice as required by Nevada law.

Where required, we will obtain affirmative, voluntary consent before applying the new collection, sharing, or use.

We may provide notice through the Service, email, an updated website notice, or another appropriate method.

11. CONTACT

For questions or requests regarding this Policy or your Nevada consumer health data rights, contact:

Myfitsociety
Jakarta, Indonesia
[email protected]