Consumer Health Data Privacy Policy

Who this policy covers

This is the Consumer Health Data Privacy Policy of Garrett Makes It, LLC, which operates MuscleBuddy. It applies to "consumer health data" as Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A.400 to 603A.550) define it, and it is effective as of October 12, 2026.

Consumer health data we collect

Bloodwork results, medical imaging studies and the files attached to them, compound/HRT/PCT cycle tracking, supplement and hormone details, vital signs, biometric/device data and recovery scores, genetic/genotype data, medications, appointments, self-care, skin routine and fasting tracking, declared health conditions, menstrual-cycle logs, rehab and return-to-training episodes, symptom logs, progress photos, body weight, weigh-ins and body measurements, daily check-in answers including mood, stress, motivation, anxiety and libido ratings and the optional PHQ-2 and GAD-2 mental-health questionnaires, sexual-health questionnaire responses, and workout videos.

Why we collect it and how we use it

We use consumer health data to show you your own records and trends, to adjust your training program, nutrition targets and recovery guidance, and to run the features you turn on, such as reminders for your appointments and medications, the AI coach and check-in analysis when you allow them, and sharing with a coach you choose. We collect and process it only with your consent, which the app asks for on a screen of its own before you first record any of it.

Where it comes from

You, when you log, type, upload or answer something in the app; devices and health platforms you connect, such as Apple Health, Health Connect and wearables; apps you connect, such as AdventureOS; a coach you work with, when they record something on your behalf; and files you upload, such as a lab report or an imaging study.

Consumer health data we share

With a coach you grant the health scope: your bloodwork and lab-marker values, vital-sign readings, body measurements and the special-category answers in your check-ins. With a coach you grant the compounds scope: your supplement and compound stack, including doses. With an app or AI assistant you connect and allow to read it: your daily recovery score, and, only for AdventureOS and only if you separately allow it, whether illness, injury or sleep debt lies behind a low score. With the service providers that run the features: the data each feature needs, described for each provider in our Privacy Policy. We do not sell consumer health data.

Who we share it with

Coaches you authorize, under the scopes you grant and can revoke. Apps you connect: AdventureOS. AI assistants you connect: ChatGPT (OpenAI) and Claude (Anthropic). Service providers that process it on our behalf: database hosting (Supabase), application hosting (Railway, which carries requests in flight and keeps no copy), the AI model provider (Anthropic, only for the AI features you allow), and email delivery (Resend, for the reminders and recaps you turn on, whose message carries the detail it is about). We have no affiliates that receive consumer health data, and we share none of it with any advertising platform.

Third-party collection across websites

No third party collects consumer health data from MuscleBuddy over time or across other websites. The advertising and analytics tags described in our Privacy Policy run only after you accept them in the cookie banner, never on the health and upkeep pages, and never receive health, fitness or nutrition data. We do not use geofencing around places that provide health services.

Your rights and how to use them

You can confirm whether we process your consumer health data and see it ("Export my data" in Settings, under Privacy & data); withdraw your consent ("Health data consent" in the same place); and have it deleted ("Delete my health data" in the same place, which deletes every category listed above except two: genetic data, which you delete separately on the Genetics page, and the current height and weight in your profile, which you can change in your profile or remove by deleting your account), including by our service providers. We complete a deletion within 30 days and confirm it within 45. You can also make any of these requests by email to garrett@garrettmakesit.com. If we deny a request, you can appeal by replying to our answer or writing to the same address; we answer an appeal within 45 days, and if you are in Washington and disagree with the outcome you can contact the Washington Attorney General.

These rights apply to your own account. They are not available on the public demo, which runs on shared accounts that belong to no one.

Reviewing and correcting your data

You can review everything you have recorded where you recorded it, and edit or delete any entry there. To ask us to correct anything you cannot change yourself, write to garrett@garrettmakesit.com; we answer within 45 days.

Changes to this policy

We update the date at the top of this page whenever this policy changes. Before a material change takes effect, we tell you in the app, and if the change widens what your health-data consent covers, the app asks for your consent again before any more of your consumer health data is processed under it.