CONSUMER HEALTH DATA PRIVACY POLICY

1. Introduction

This Consumer Health Data Privacy Policy supplements our general Privacy Policy and describes how Makers Technology LLC (“we,” “us,” “our”) collects, uses, shares, and protects consumer health data through the TextFit SMS fitness coaching service. This policy is provided in compliance with the Washington My Health My Data Act, the California Consumer Privacy Act (CCPA/CPRA), and other applicable state health data privacy laws.

2. Consumer Health Data We Collect

We collect the following categories of consumer health data:

• Body measurements: Height, weight, and body composition data you voluntarily provide.
• Fitness and exercise data: Workout completion records, exercise types, fitness goals, fitness experience level, and physical activity history.
• Nutrition and dietary data: Food photos you submit for analysis, AI-generated calorie and macronutrient estimates, dietary preferences, restrictions, and protein targets.
• Health conditions: Injuries, medical conditions, allergies, and health concerns you voluntarily disclose during onboarding or in conversation.
• Progress data: Weight changes over time, workout streaks, and self-reported energy levels.

3. How We Collect This Data

All consumer health data is collected directly from you through SMS text messages you send to TextFit. This includes text responses during onboarding, ongoing conversations with your AI coach, food photos you send via MMS, and progress updates you text to us. We do not collect health data from third-party sources, health records systems, or wearable devices.

4. Purpose of Collection

We collect and use consumer health data solely for the following purposes:

• Generating personalized workout plans tailored to your fitness level, equipment, and goals
• Analyzing food photos to provide calorie and macronutrient estimates
• Tracking your fitness and nutrition progress over time
• Adapting workout recommendations based on your reported injuries or health conditions
• Providing group accountability summaries (limited to workout completion counts and meals logged, never specific health data)

5. Third Parties Who Receive Your Health Data

We share consumer health data only with the following third parties, solely for the purpose of providing the TextFit service:

• Anthropic (Claude AI): Your text messages and food photos are processed by Anthropic's AI to generate coaching responses and nutrition estimates. Anthropic processes this data according to their API data usage policy and does not use it for model training.
• Twilio: Our SMS provider transmits messages between you and TextFit. Twilio processes message content in transit.
• Railway: Our cloud infrastructure provider hosts the database where your data is stored.

We do NOT sell consumer health data. We do NOT share consumer health data with advertising platforms, data brokers, or any party not listed above.

6. Your Rights

You have the following rights regarding your consumer health data:

• Right to know: You may request a list of all consumer health data we have collected about you and the third parties with whom it has been shared.
• Right to delete: You may request deletion of all consumer health data we hold about you. We will process deletion requests within 30 days.
• Right to withdraw consent: You may withdraw your consent to the collection of consumer health data at any time by texting STOP or by contacting us. Withdrawal of consent will result in discontinuation of the TextFit service.
• Right to opt out of sharing: You may opt out of the sharing of your consumer health data with any third party. Note that opting out of sharing with Anthropic or Twilio will result in inability to provide the service.

To exercise any of these rights, text “DELETE MY DATA” to your TextFit number, or email us at the address below.

7. Data Security

Consumer health data is stored in an encrypted PostgreSQL database hosted on secure cloud infrastructure with access controls. Data in transit between your phone and our servers is encrypted via TLS. We implement reasonable administrative, technical, and physical safeguards to protect consumer health data from unauthorized access, use, or disclosure.

8. Data Retention

We retain consumer health data for as long as your TextFit account is active. If you opt out by texting STOP, we retain your phone number on a suppression list to honor your opt-out preference but delete all associated health data within 30 days unless you request otherwise. Upon receiving a verified deletion request, we delete all consumer health data within 30 days, except where retention is required by law.

9. Group Accountability and Health Data

If you participate in a TextFit group, weekly accountability summaries shared with your group include only: workout completion counts and meals logged. We never share your weight, body measurements, calorie intake, specific foods, health conditions, or any other personal health data with group members. Your 1-on-1 coaching conversation is always private.

10. Changes to This Policy

We will notify you via SMS of any material changes to this Consumer Health Data Privacy Policy before the changes take effect.

11. Contact Us

For questions about this policy or to exercise your rights regarding consumer health data:

Makers Technology LLC

support@gettextfit.com