Consumer health data
Your training log is data about your body. This is the separate notice Washington law requires for it, and the short version is that it is shared with nobody.
This page is the consumer health data privacy policy required by the Washington My Health My Data Act, and it is a separate document because that law requires it to be one. Nevada's consumer health data law asks for the same disclosures, so this page answers both. Everything here is also true of the Privacy Policy, which is the fuller account.
The Service is operated by Data Sauna LLC, a Wyoming limited liability company, at 30 N Gould St, Ste R, Sheridan, WY 82801, USA.
What counts as consumer health data here
The training log itself: every set you log with its load, reps and effort rating, the rest you take between sets, the workouts you programme, and your bodyweight if you record it. These are measurements of what your body did. We treat them as consumer health data whether or not a court would, because the cost of being wrong about that is yours and not ours.
Your live heart rate is read from Apple Health while a rest timer is running and shown on the timer. It is never written to our database, never sent to any analytics tool, never cached, and no part of the progression engine reads it. It exists on your screen and nowhere else.
Where it comes from
One source: you. You type every set. There is no import from another app, no connected device writing into your log, and no purchase of health data from anybody. The only exception is heart rate, which comes from Apple Health on your own device with your permission, and which we do not keep.
Why we collect it
To be the product you installed. The log is the app; the progression engine reads your history to prescribe the next session's load, rep range and rest. Under the My Health My Data Act this is collection to the extent necessary to provide a product you requested, and nothing beyond that is collected without asking you first.
Who it is shared with
No consumer health data is shared with any third party.
One company processes it: Supabase, which hosts the Postgres database your account and training log live in and sends the sign-in emails. Supabase is a processor acting only on our instructions under a written contract; it does not use your data for anything of its own. That is a processor relationship rather than sharing.
There are no affiliates. Data Sauna LLC has no parent, no subsidiaries and no related entities.
The app's analytics tools receive behaviour and never receive consumer health data — no load, no rep count, no effort rating, no bodyweight, no heart rate. The Privacy Policy sets out that split in full.
It is never sold
We do not sell consumer health data and we have never offered it for sale, to anybody, for money or for anything else of value. There is therefore no authorization for you to sign, and none will be asked for.
Your rights, and how to use them
You can:
- Confirm whether we collect, share or sell your consumer health data, and see the list of third parties it has been shared with. The answer to the second half is that the list is empty.
- Access a copy of it.
- Withdraw your consent to our collection and sharing of it.
- Delete it. Deleting the account deletes the log and everything derived from it, and there is no recovery window — email and it is done.
Email for any of these. We answer within 45 days. If a request is genuinely complicated we may take another 45, and we will tell you why before the first 45 are up rather than after.
If we refuse a request, you can appeal it, by replying to that refusal or writing to again. An appeal goes to a person and not to a form, and we answer within 45 days of receiving it with our decision and the reasoning behind it. If the appeal is refused you can complain to the Washington Attorney General at atg.wa.gov/file-complaint, and that link will be in the refusal.
We will not charge you, degrade the app, or refuse you service for using any of these rights.
Geofencing
We do not operate a geofence around any facility, and the app does not request or use your location at all.
Contact
Data Sauna LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Questions about health data: .