Consumer Health Data Privacy Policy

Some US state laws, including Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's privacy law, protect "consumer health data". This policy explains how Rebar, operated by Christo Corriher, an individual based in North Carolina, USA, handles it. It adds to our Privacy Policy, which covers all the data Rebar collects.

• Body metrics you enter: bodyweight, height, target weight and weigh-in history, along with the age and sex you give us.
• Fitness and training data: the workouts you log, effort ratings, and how recovered or sore you say a muscle feels, plus the measures worked out from them, such as estimated maxes, training volume and the Strength Index.
• Apple Health: finished workouts and an estimated calorie figure that the app saves to Apple Health, and your recent Health workouts, read only to avoid saving a duplicate. Heart rate and active energy read by the Watch app stay on your devices and are not sent to us.
• Anything health-related shown in screenshots or text you submit through AI import.

Directly from you, from your use of the app, and, if you allow it, from Apple Health on your devices. We don't buy health data or get it from anyone else.

• To provide the features you ask for: your log and history, suggested loads, planned training blocks and deloads, stats and records, and syncing with Apple Health.
• To calculate the per-lift levels your training partners see on friends boards. They see the level, not your bodyweight, age or sex.
• To keep the app secure and working, and to fix problems.

We don't use consumer health data for advertising, and we don't sell it.

• Google (Firebase and Google Cloud) stores and processes it for us to run the app. Google Analytics for Firebase receives summary numbers about finished sessions if you leave Settings → Share usage data on.
• Anthropic receives the screenshots or text you choose to submit through AI import, only after you give permission in the app.
• Apple Health, on your own device, receives the workouts Rebar saves there, only if you turn that on.
• Other Rebar users see only what the Privacy Policy's "Who can see what" section describes, such as per-lift levels shown to your training partners.

We may also disclose data when the law requires it, or to a successor that takes over running Rebar, which would remain bound by this policy.

• Confirm whether we collect, share or sell your consumer health data, and get a copy of it. Settings → Export my data exports your workouts and body metrics, and we'll email a complete copy on request.
• Get a list of the third parties and affiliates we have shared it with, and how to contact them.
• Withdraw consent: turn off Apple Health or usage sharing, stop using AI import, or delete the data you entered.
• Delete it: delete individual entries in the app, or your whole account in Settings → Delete Account.

To use any of these rights, email support@getrebar.app from the address on your account. We reply within 45 days. If we turn down your request, you can appeal by replying to our answer, and we will respond within 45 days. If you are not satisfied, you can contact your state Attorney General.