This Consumer Health Privacy Notice applies to Washington State residents and supplements our Privacy Policy. It describes our practices regarding consumer health data as defined under the Washington My Health MY Data Act (WMHMD Act), RCW 19.373.
Mass in Motion™ ("we," "us," or "our") is committed to protecting your health data. This notice explains what consumer health data we collect, how we use it, and your rights under Washington State law.
1. WHAT IS CONSUMER HEALTH DATA?
Under the Washington My Health MY Data Act, "consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies a consumer's past, present, or future physical or mental health condition. In the context of Mass in Motion, this includes:
Workout logs and exercise history
Body weight, body composition measurements, and related biometrics
Heart rate data and heart rate zone training data
Recovery scores and training load metrics
Sleep schedule data you enter into the app
Injury or pain notes you record in the app
GPS running routes and GPS-derived workout data
Health data synchronized from Apple Health (HealthKit) or Google Health Connect with your consent
Stimulant tracking data (caffeine, nicotine) you voluntarily log
2. HOW WE COLLECT CONSUMER HEALTH DATA
We collect consumer health data in the following ways:
Directly from you. When you log workouts, enter body measurements, record recovery scores, or otherwise input data into the app.
Automatically. When you use the running feature with GPS enabled, we collect location data that is linked to your workout.
From third-party integrations you authorize. If you connect Apple Health (HealthKit) or Google Health Connect, we receive the health data you expressly authorize those services to share. You may revoke this authorization at any time through your device settings.
We collect consumer health data only with your consent and only to the extent necessary to provide the Service.
3. HOW WE USE CONSUMER HEALTH DATA
We use your consumer health data solely for the following purposes:
Providing the Service. To display your workout history, calculate training load, generate recovery scores, and deliver personalized training recommendations within the app.
Improving the Service. In aggregate, de-identified form to identify usage trends and improve algorithmic performance. We do not use individually identifiable health data for this purpose without your separate consent.
Syncing your data. To synchronize data between your devices and our secure cloud storage so your information is consistent across sessions.
Safety and error correction. To diagnose technical problems and maintain app stability. Crash reports do not include your health or workout content.
We do not use your consumer health data for:
Targeted advertising or behavioral profiling;
Sale to data brokers or any third party;
Any purpose unrelated to providing and improving the Service.
4. HOW WE SHARE CONSUMER HEALTH DATA
We do not sell your consumer health data. We do not share your consumer health data with advertisers or data brokers.
We may share consumer health data only in the following limited circumstances:
Service providers acting on our behalf. Firebase/Google LLC provides our database and authentication infrastructure and processes data only as directed by us under a data processing agreement. These service providers are prohibited from using your health data for their own purposes.
With your explicit consent. We will not share your consumer health data with any other party without first obtaining your separate, affirmative consent.
Legal obligations. If required by a court order, subpoena, or applicable law, we may disclose the minimum necessary data required by that legal obligation.
Business transfers. In the event of a merger, acquisition, or sale of substantially all our assets, consumer health data may be transferred to the successor entity, which will be bound by obligations no less protective than those in this notice.
5. YOUR RIGHTS UNDER THE WASHINGTON MY HEALTH MY DATA ACT
If you are a Washington State resident, you have the following rights with respect to your consumer health data:
Right to Confirm and Access. You have the right to confirm whether we are collecting, sharing, or selling your consumer health data and to access a list of all third parties and affiliates with whom we have shared or sold your data.
Right to Withdraw Consent. You have the right to withdraw your consent to our collection or sharing of your consumer health data at any time. You may do this by contacting us at the address below or by disconnecting Apple Health/Google Health Connect through your device settings.
Right to Deletion. You have the right to request that we delete your consumer health data. Upon a verified deletion request, we will delete your consumer health data from our systems, subject to limited exceptions (e.g., data we are legally required to retain).
Right to Appeal. If we deny your request, you have the right to appeal our decision by contacting us at the address below. We will respond to your appeal within 45 days and will provide written explanation of our reasons if we deny the appeal.
Right Not to Be Discriminated Against. We will not discriminate against you for exercising any of these rights.
6. HOW TO EXERCISE YOUR RIGHTS
To exercise any of your rights under the Washington My Health MY Data Act, please contact us using one of the following methods:
Email:support@massinmotionapp.com Mail: Mass in Motion, 6545 Market Ave. North Suite 100, Canton, Ohio 44721
Your request must include:
Your full name and email address associated with your Mass in Motion account;
A description of the right you wish to exercise;
Sufficient information to allow us to verify your identity.
We will respond to your request within 45 days. If we need additional time (up to a total of 90 days), we will notify you of the extension and the reason for it within the initial 45-day period. We will not charge a fee for reasonable requests.
7. DATA SECURITY
We implement appropriate technical and organizational safeguards to protect your consumer health data, including encryption in transit and at rest, access controls, and regular security assessments. Despite these measures, no system can be guaranteed to be 100% secure. If you believe your account has been compromised, please contact us immediately at support@massinmotionapp.com.
8. DATA RETENTION
We retain your consumer health data for as long as your account is active or as needed to provide the Service. If you delete your account or submit a deletion request, we will delete your consumer health data from our active systems within a reasonable period, except where retention is required by law or for legitimate business purposes (such as resolving disputes or complying with legal obligations).
9. CHANGES TO THIS NOTICE
We may update this Consumer Health Privacy Notice from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page and, where required by law, by seeking your renewed consent. Continued use of the Service after the effective date constitutes acceptance of the updated notice.
10. CONTACT US
If you have any questions about this Consumer Health Privacy Notice or wish to exercise your rights, please contact us: