Last updated: 9 August 2026
This policy supplements the Global Privacy Notice for consumer health data, including where laws such as Washington’s My Health My Data Act or Nevada’s consumer health law apply.
Consumer health data we may collect
Depending on the features you choose, this may include goals and training history; workouts, performance, effort and recovery; body measurements; injury, pain, limitation, menstrual, pregnancy or postpartum context; nutrition-related preferences if offered; heart rate, sleep, steps, distance and activity data from a connected platform; progress photos; and inferences drawn from those records to suggest training.
Sources
We collect this information directly from you, from your use of workouts and GRITFIT Coach, from your device, and from Apple Health or Health Connect only after you authorise the connection. We do not obtain consumer health data from data brokers.
Purposes
We use consumer health data to provide requested fitness features, personalise or adapt training, display progress and recovery context, enforce safety constraints, answer Coach requests, secure the service and comply with law. We do not use it for targeted advertising or sell it.
Sharing
We may disclose the minimum necessary information to processors that host and secure GRITFIT, store private media, operate authorised connected-health integrations, or provide contracted language-model processing for Coach. We may disclose information where required by law or necessary to prevent serious harm. A current functional list appears in the Subprocessor List.
Consent and control
Where required, GRITFIT obtains consent before collecting or sharing consumer health data and obtains separate authorisation for a sale. GRITFIT does not currently sell consumer health data. Connected-health permissions and cloud health history are optional and can be withdrawn. Withdrawing a platform permission stops new collection but does not by itself delete information already stored in GRITFIT.
Rights
You may request access to consumer health data and a list of relevant third parties or affiliates, withdraw consent, and request deletion as applicable. Deletion may require GRITFIT to notify processors holding the information. Email support@gritfit-ai.com and identify your state, or use the in-app account-deletion control. We verify requests to protect your account.
Security and contact
GRITFIT uses authenticated, owner-scoped systems and access controls appropriate to the sensitivity of the data. No storage system is risk-free. Contact GRITFIT.AI LIMITED at support@gritfit-ai.com or 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.