Consumer Health Data Privacy Policy

MuscleKeep — for Washington and Nevada residents

This policy is provided separately to comply with Washington's My Health My Data Act and Nevada's consumer health data law. It stands on its own — you do not need to read our main Privacy Policy to understand it, though the two policies are consistent with each other.

1. Categories of Consumer Health Data We Collect

• Dietary and nutrition information you log, including protein intake and favorite foods
• Body metrics: weight, height, and goal weight/targets
• Symptom check-in answers
• The fact, time, and site of medication injections you log, and whether you indicated a dose increase (never the dose amount)
• Strength-training completions and workout schedule
• Protein-intake data imported from Apple Health, if you turn that on
• Scores derived from the above (a behavioral indicator, not a medical measurement)

2. Purpose for Collection

We collect this data solely to provide the App's core service to you: tracking your logged habits, calculating your daily score, and syncing that data across your own devices. We do not use it for advertising or any purpose unrelated to running the App.

3. Sharing of Consumer Health Data

• Supabase — hosts the database that stores and syncs your data
• Apple App Store / RevenueCat — process payment and subscription status only (do not receive your health data)
• PostHog — only if you opt in to usage analytics (off by default); receives screen-view and feature-usage events, not health values

We do not sell consumer health data, and we do not share it with anyone for advertising purposes.

4. Your Rights

• Confirm and access what consumer health data we hold about you
• Withdraw consent to our collection or sharing of your consumer health data going forward
• Delete your consumer health data
• Appeal a denial of any of the above requests

Because your account is anchored to your device rather than to your name or email, we have no way to verify or locate your data from an inbound request alone. For that reason, the fastest and most reliable way to exercise these rights is directly in the App:

• To access or review your data, open it directly within the App's tracking screens.
• To withdraw consent for optional analytics, turn it off in Care → Logging options.
• To delete your consumer health data, use Care → Account → Delete Account.

If you believe you cannot exercise a right through the App, or want to appeal how a request was handled, email fuji.indiedev+musclekeep@gmail.com. We will respond to appeals within 45 days. If your appeal is denied, Washington residents may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

5. Contact

Questions about this policy can be sent to fuji.indiedev+musclekeep@gmail.com.

---

Effective: August 10, 2026