Consumer Health Data Privacy Policy

Ionik is operated by Ionik Health Ltd. This policy explains how we handle consumer health data and the rights you have over it. It supplements our general Privacy Policy; where this policy and the general Privacy Policy address the same topic for consumer health data, this policy controls.

It is provided to meet the requirements of consumer-health-data laws such as Washington's My Health My Data Act, Nevada SB 370, and the consumer health data provisions of the Connecticut Data Privacy Act. We apply the protections below to all consumers in the United States, regardless of the state you live in.

What "consumer health data" means

Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. In Ionik, this is principally the fitness and body information you enter and generate as you train. We are a general wellness and fitness product; we do not diagnose, treat, or provide medical care.

Categories of consumer health data we collect

• Body and profile information — year of birth, gender, height, weight, and any self-reported injuries or movement limitations.
• Health screening responses — answers to the short pre-exercise safety questions we ask before building your plan.
• Training data — your workouts, exercises, sets, reps, load, RPE, session notes, completed sessions, weekly statistics, and personal records.
• Body-weight history — optional weigh-in entries you choose to log over time.
• AI coach conversations — the messages you exchange with the in-app AI coach, which may reveal information about your health, training, or wellbeing.

Where this data comes from

We collect consumer health data directly from you — the details you enter during onboarding, the workouts you log, and the messages you send the AI coach. We do not buy consumer health data, and we do not collect it from data brokers or from third-party advertising sources.

How we use it

• To build and continually adapt your personalised training programme.
• To power the AI coach's responses and weekly programme adjustments.
• To flag pre-exercise safety considerations and suggest you seek medical clearance where appropriate.
• To show you your own training history, progress, and statistics.
• To operate, secure, debug, and improve the app.

We collect this data with your consent, given when you create your account and complete onboarding, and we use it only for the purposes above.

Who we share it with

We share consumer health data only with service providers (processors) who handle it on our behalf, under contract, and only as needed to run Ionik:

• Google (Firebase / Google Cloud) — secure data storage, account authentication, app analytics, crash reporting, and app-integrity checks.
• Anthropic — provides the AI model behind the coach; it processes your training context and coach messages to generate responses.
• RevenueCat — manages subscription status (receives your account identifier and subscription state, not your training data).
• Resend — sends account emails such as password resets (receives your email address and name).

What we never do

• We never sell your consumer health data.
• We never share it with advertisers or use it for targeted advertising.
• We do not attach advertising identifiers to your health or fitness data.
• We do not use geofencing to track you near healthcare facilities or to send you messages based on your presence there.

Your rights

You have the right to:

• Confirm and access the consumer health data we hold about you, and learn the third parties with whom we have shared it.
• Delete your consumer health data.
• Withdraw your consent to our collection and use of it.

To exercise these rights:

• Delete everything yourself in the app: Account → Delete account removes your account and associated data. See deleting your account for details.
• Email us at privacy@ionikhealth.com to access, delete, or withdraw consent. We respond within the timeframes required by law and will not discriminate against you for exercising a right.

If we deny your request, you may appeal by replying to our response; where a law provides one, you may also contact your state attorney general.

Security and retention

Access to consumer health data is restricted to the people and systems that need it to run Ionik, protected by authentication and access controls, and transmitted over encrypted connections. We keep your data for as long as your account is active; when you delete your account, we remove it as described in deleting your account.

Changes to this policy

If we materially change how we handle consumer health data, we will update this page and its "last updated" date, and obtain fresh consent where the law requires it.

Contact

Questions about your consumer health data? Email privacy@ionikhealth.com.