Consumer Health Data Privacy Policy

1. Who this is for

This policy is for people in Washington State and Nevada, and adds to our Privacy Policy (pantrainer.web.app/privacy). PanTrainer is run by Idesit AB, Stockholm, Sweden.

2. The health data we collect

• What you tell us: age, height, body weight, injuries and pain, and how you feel before and after training.
• Training: sessions, exercises, sets, weights and effort.
• From devices you connect (Apple Health, Health Connect, Garmin, Renpho): resting heart rate, heart rate variability, sleep, steps, calories, body weight and body composition.
• Food: what you eat, food photos and nutrition estimates.

3. Where it comes from

From you, and from the device accounts you choose to connect. We do not buy health data or collect it from anyone else.

4. Why we use it

Only to give you the service: plan and adjust your training and meals, track progress and recovery, and show you how you are doing. We only collect and use health data with your consent, given with a separate checkbox when you start.

5. Who we share it with

Only with the service providers that run PanTrainer for us under contract: Google Cloud and MongoDB Atlas (hosting and database in Belgium), Vercel (photo storage), and for AI Google Cloud Vertex AI (Gemini, processed in the EU) with Scaleway in Paris as a backup. Neither trains on your data; Google may keep a request for up to 30 days only to detect abuse. The food you log is shared with the people you invite to your household. We never sell health data and never share it for advertising.

6. Your rights

You can see, export and delete your health data in the app (Settings → Account), and withdraw your consent at any time (Settings → About & credits). Write to us for anything you can’t do in the app; we answer within 45 days. If we turn down a request you can appeal by replying to our answer, and if you still disagree you can contact the Washington Attorney General or the Nevada Attorney General.