Consumer Health Data Privacy Policy

Nick Squared LLC, 7901 4th St N STE 300, St. Petersburg, FL 33702, USA, operates Spot. This supplements our Privacy Policy, including for consumers protected by Washington’s My Health My Data Act and other applicable health-privacy laws.

We collect information you enter, your coach supplies about your training, or an optional connected service supplies with permission. Categories include workouts and physical activity; weight and body measurements; fitness goals and injury information; sleep, energy, nutrition and check-in answers; progress photos and videos; health information in messages; and permitted daily device summaries of steps, sleep, resting heart rate, heart-rate variability, energy and readiness. Calculated training trends, records and progress may also reveal health information. Account identifiers connect these records to you.

We use this information to provide training records, coaching, feedback, progress displays and the integrations you request, and to protect and support the service. Optional imports, exports and publication have their own controls. We do not use health information for advertising or to train AI models, sell it, or use geofences around healthcare facilities to track visitors or advertise to them.

Your coach receives coaching information you share with them; solo records are not assigned to a coach. Hosting, database, media, email and push providers process relevant information for service delivery. When a coach requests an optional AI summary, Anthropic processes selected current and previous check-in answers, including health-related measurements and written notes. AI programme drafts use the coach’s brief and selected training information. The generated results support coach review and may also contain health information. The names, functions and policy links are on our provider list. Email and notification contents may include information users supply. Authorised staff may access data for necessary support, security and legal purposes.

With your separate choices, phone health stores receive workout times and energy; a connected Strava account receives the workout title, start time, duration, sets and total weight lifted. Other Spot users see first name, weekly sessions and XP if you join the board. Approved testimonials are public with your selected attribution. Recipients may copy public information. We may disclose information when legally required or permitted to protect rights or in a business transfer subject to applicable safeguards. We do not share consumer health data with affiliates as a routine business practice.

Use your profile controls to withdraw optional permissions, export data or request account deletion. You may also email [email protected] to request access, deletion or withdrawal of collection or sharing consent, including a list of relevant third parties and their contact methods. We verify requests proportionately using account information. Withdrawing required training permission can stop the affected service; previous lawful use is not undone. We notify relevant recipients of deletion requests where required. Existing exports may also need removal in the destination service.

For Washington requests, we respond within 45 days, with a further 45 days only when permitted and with notice. If we refuse, reply to [email protected] with “Privacy appeal”; we respond to appeals within 45 days. You can complain to the Washington Attorney General, including if an appeal is denied. These rights are available without discrimination. Other applicable laws may provide additional rights or different deadlines.