1. Introduction

This Consumer Health Data Privacy Policy explains how BodyBuddy ("we," "our," or "us"), operated by Please Clap, LLC, collects, uses, and shares consumer health data. It applies to consumers whose consumer health data is collected in Washington, as required by Washington's My Health My Data Act. It is a separate document from our general Privacy Policy, which describes our overall data practices. For consumer health data, this policy controls.

2. Consumer Health Data We Collect

Depending on how you use BodyBuddy, we collect the following categories of consumer health data:

• Appointment recordings: Audio recordings of your own health and fitness appointments (for example, visits with a doctor, therapist, or trainer) that you choose to record
• Transcripts, summaries, and plans: Transcripts of those recordings, and the AI-generated summaries and coaching plans created from them or from documents you import
• Health condition notes: Health context you share in your own words, such as medical conditions, medications (for example, GLP-1s), injuries, or pregnancy
• Imported medical documents: Medical or training documents you paste, photograph, or upload (for example, care instructions, physical therapy protocols, or workout programs)
• Health and fitness metrics: Information you provide about your body and habits, such as weight, height, age, gender, meals, exercise, and daily activity, including photos you upload for meal or exercise tracking and messages with our AI coach that contain health information
• Apple HealthKit data: With your permission, data from Apple HealthKit such as step count, walking and running distance, workouts, body weight, sleep analysis, active energy burned, and dietary calorie totals

3. Sources of Consumer Health Data

We collect consumer health data from:

• You directly: Messages you send, recordings you make, documents you upload, photos you share, and information you enter during onboarding and afterward
• Your device, with your permission: Apple HealthKit data you allow us to read
• Processing of content you provide: Transcripts, summaries, and plans that our AI processing derives from your recordings, documents, and messages

We do not purchase consumer health data from data brokers or collect it from other outside sources.

4. How We Use Consumer Health Data

We collect and use consumer health data to:

• Provide personalized AI coaching, daily check-ins, and accountability
• Transcribe, summarize, and turn your appointment recordings and imported documents into plans, when you use those features
• Track your progress and provide insights and reminders
• Respond to your support requests
• Ensure the security and integrity of our platform

No AI Training on Sensitive Health Content: We do not use your appointment recordings, transcripts, imported medical or training documents, or health condition notes to train or improve AI models. This content is processed by AI only to provide the Service to you.

5. How We Share Consumer Health Data

We do not sell consumer health data, and we do not share consumer health data for advertising purposes. We share consumer health data only with service providers that process it on our behalf, under contracts that limit how they may use it:

• Cloud infrastructure (Amazon Web Services): Stores your data, including appointment audio, imported documents, and photos, encrypted in transit and at rest
• AI service providers (OpenAI, Anthropic, and Google): Process your messages, photos, recordings, and documents to generate coaching responses, transcripts, summaries, and plans
• Communications provider (Twilio): Delivers text messages between you and BodyBuddy

We do not share consumer health data with any affiliates. We may also disclose consumer health data when required by law, or to protect rights and safety, as described in our Privacy Policy.

6. Your Rights

You have the right to:

• Know and access: Confirm whether we collect, share, or sell your consumer health data, access that data, and receive a list of the third parties with whom we have shared it
• Withdraw consent: Withdraw your consent to our collection and sharing of your consumer health data at any time
• Delete: Request deletion of your consumer health data. When you do, we delete it from our active systems and pass your deletion request on to the service providers that processed it. Data held in backups is deleted when the backup is purged, within six months of your request

7. How to Exercise Your Rights

To exercise any of these rights, email us at support@bodybuddy.app from the email address or phone number associated with your account, or include enough information for us to verify that the request is yours. We will respond within 45 days of receiving your request.

8. Appeals

If we decline to act on your request, you may appeal by replying to the email in which we communicated our decision and stating that you wish to appeal. Appeals are reviewed by a different reviewer than the person who handled your original request, and we will respond within 45 days of receiving your appeal. If your appeal is unsuccessful, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

9. Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. We will notify you of any changes by updating the effective date and, for significant changes, providing additional notice through the app or via email.

10. Contact Us

If you have questions about this policy or our consumer health data practices, please contact us at: