Consumer Health Data Privacy Policy
Last updated October 26, 2026
This policy covers the health information Durava collects to coach you. It applies to every client, wherever you live, and follows the strictest US health data laws, including Washington's My Health My Data Act and Nevada's consumer health data law.
Health data we collect
•
Health screening answers (PAR-Q+) and whether medical clearance is needed
•
Injuries, surgeries, medical conditions and medications you choose to share
•
Lifestyle answers: daily activity, sleep and stress
•
Daily check-ins: sleep, soreness, energy, stress and motivation
•
Pain ratings on exercises your coach marks for a pain check
•
Body weight, if you choose to log it
•
Workouts you or your coach log: exercises, sets, reps and loads
Where it comes from
You (intake, check-ins, logging) and your coach (coached sessions, programs and notes).
Why we collect it
Only to plan, adjust and track your training safely, and to run the app you asked for. Nothing else.
Consent
We collect health data only after you give clear, separate consent in the app. Using AI to help draft your program needs its own separate consent. You can withdraw either at any time in Settings.
Who receives it
Your coach, and these service providers, which process it only on our instructions and only to run the service:
•
Supabase: Hosts the database, sign-in and sends sign-in codes. Data: All account, health and training data.
•
PowerSync: Keeps the app working offline and syncing between devices. Data: All account, health and training data, in transit.
•
Vercel: Hosts the website and app. Data: Technical data such as IP address and browser when you visit.
•
Anthropic: AI help drafting your program, only if you turn it on. Data: Training goals, schedule, equipment and injury notes. Never your name or contact details.
What we never do
•
Share it for advertising, or use ad trackers or pixels.
•
Track your location or use geofencing.
Your rights
•
Confirm whether we hold your health data, and get a copy (Settings > Download my data, or ask your coach for a full copy including coach notes).
•
See the list of providers who receive it (above).
•
Withdraw consent (Settings).
•
Have it deleted, including from backups (Settings > Ask to delete my account). Backups clear within the provider’s retention period, and never later than six months.
How we respond
We answer every request within 45 days, free of charge. If we need more time we will tell you why within those 45 days, and take at most 45 more. If we decline a request, you can appeal: message your coach in the app with the subject "Appeal". We answer appeals in writing within 45 days. If we deny your appeal, you can complain to your state attorney general (in Washington: atg.wa.gov).
How long we keep it
While you are a client. If you stop training, we keep it for up to 3 years so you can pick up where you left off, then delete it, sooner if you ask.
Security
Your data is encrypted in transit and on our servers. Only you and your coach can access it, enforced by the database itself. If a breach ever affects your data, we will tell you promptly, as the law requires.
Contact
Questions or requests: message your coach in the app.