Consumer Health Data Privacy Policy

This policy covers the consumer health data that Nate Labs Ltd ("NATE", "we", "us") collects about people in the United States. It's written for Washington's My Health My Data Act. Our Privacy Policy covers everything else.

1) The health data we collect

Your profile: age range, sex, height, weight, training experience and goal.
Weigh-ins, body measurements and any progress photos you add.
Your workouts: sessions, sets, reps, weights and personal records.
Your answers to the check-in before a session: sleep, energy and any sore areas.
Period dates and how you felt on those days, only if you turn on period adaptability.
Food and water you log, photos of meals, and your calorie and macro targets.
Anything about your health you tell Nate in chat, such as an injury, and what Nate remembers from it. Voice recordings are turned into text and the audio isn't kept.
What NATE works out from all of this: your calorie targets, which sessions to lighten, and how your weight is trending.

On Apple Watch, and only if you allow it, NATE reads your heart rate and active energy during the workouts you track with NATE, and saves those workouts to Apple Health. That stays on your watch, your iPhone and in Apple Health. It isn't sent to our servers.

2) Why we collect it

To run the features you ask for: building and adjusting your training plan, setting your calorie and macro targets, lightening a session after a rough check-in, showing your progress and answering you in chat. We also use it to keep your account secure and to fix problems.

We never use health data for advertising or marketing, and we never sell it.

3) Where it comes from

You: what you enter, the photos you add and what you say to Nate.
Your Apple Watch, only if you allow it. That data stays on your devices.
NATE itself, which works out targets, session changes and trends from what you give it.

4) Who handles it

We don't share consumer health data with any third party or affiliate, and we never sell it. These service providers process it for us, under contracts that limit them to our instructions:

Fly.io, which runs our servers.
Supabase, which hosts our database.
Amazon Web Services, which stores your photos, in the UK.
OpenAI, which runs chat with Nate, voice and food recognition, and gets the training and nutrition data those features need. Period data and Apple Health data are never sent to OpenAI.
Resend, which sends our emails. The monthly recap shows your session and PR counts.

PostHog, which we use for app analytics, and Meta, which we use to measure our ads, never receive your health or body data.

5) Your rights

See it. Ask whether we collect, share or sell your health data, and get a copy, with a list of everyone we've shared it with. You can download everything you've logged in the app under Your data, or email us.
Delete it. Delete your account in the app under Your data, or email us. We delete your data, tell the service providers above to delete it too, and it's gone from our backups within six months.
Withdraw consent. Turn off period adaptability under Settings, Body stats, and your period data is deleted. To stop everything else, delete your account.

Email hello@teamnate.app from the address on your account, so we know it's you. You don't need an account to ask. We answer within 45 days. If we need longer, we'll tell you why within those 45 days, and take at most 45 more. Requests are free up to twice a year. Using these rights never changes your price or what you get.

6) Appeals

If we turn down your request, reply to our answer with "Appeal" in the subject. We'll answer within 45 days and explain our decision. If we still say no, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

7) Changes to this policy

If we start collecting a new kind of health data, or using it for something new, we'll update this policy and ask for your consent first.

8) Contact us

Nate Labs Ltd, hello@teamnate.app.