Washington Consumer Health Data Privacy Policy

Introduction

This Washington Consumer Health Data Privacy Policy supplements our general Privacy Policy and applies to Washington residents. It describes how we collect, use, and protect consumer health data as required by the Washington My Health My Data Act (MHMDA).

At Gram Fit, we are committed to protecting your health data and being transparent about our data practices. This policy explains your rights and our obligations regarding your consumer health data.

Categories of Health Data We Collect

We may collect the following categories of consumer health data when you use our nutrition tracking and wellness services:

Dietary and Nutrition Data

• Food logs and meal entries
• Caloric intake and macronutrient tracking
• Dietary preferences and restrictions
• Nutritional goals and targets

Fitness and Activity Data

• Exercise logs and workout data
• Steps and activity levels
• Calories burned
• Fitness goals and progress

Body Measurements

• Weight and weight history
• Height and BMI calculations
• Body composition data (if provided)
• Progress photos (optional, user-uploaded)

Connected Health Platform Data

With your explicit permission, we may access data from:

• Apple HealthKit: Activity data, body measurements, heart rate, sleep data
• Google Health Connect: Activity data, body measurements, nutrition data

We only access the specific data types you authorize and never access more than necessary to provide our services.

How We Collect Health Data

We collect consumer health data through the following methods:

Direct Input

Information you voluntarily provide when using our app, including food logs, weight entries, goals, and preferences.

Connected Devices and Platforms

With your explicit consent, we sync data from Apple HealthKit, Google Health Connect, and other connected fitness devices or apps.

App Interactions

We may derive health-related insights from your interactions with our app, such as your dietary patterns, meal timing, and progress toward goals.

How We Use Your Health Data

We use your consumer health data for the following purposes:

Service Personalization

• Providing personalized nutrition recommendations
• Calculating your caloric and macronutrient targets
• Tracking your progress toward health goals
• Offering insights and feedback on your dietary patterns

Communication

• Sending progress updates and milestone notifications
• Providing reminders and encouragement (with your consent)
• Responding to your support requests

Research and Improvement

• Improving our algorithms and recommendations (using aggregated, de-identified data)
• Conducting research to enhance our services (only with your explicit consent)

Your Washington Privacy Rights

Under the Washington My Health My Data Act, you have the following rights:

Right to Know

You have the right to know what consumer health data we collect, the purpose of collection, and the categories of third parties with whom we share it.

Right to Access

You have the right to access your consumer health data in a portable format.

Right to Delete

You have the right to request deletion of your consumer health data. We will delete your data within 30 days of a verified request, unless we have a legal obligation to retain it.

Right to Withdraw Consent

You may withdraw your consent to the collection and use of your consumer health data at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To submit a request to exercise your Washington privacy rights:

• Email us: privacy@gram.fit
• In-app: Navigate to Settings > Privacy Center to manage your health data preferences, access your data, or submit a deletion request

We will verify your identity before processing your request. For deletion requests, we will confirm deletion within 30 days.

Contact Us

If you have questions about this Washington Health Data Privacy Policy or wish to exercise your rights, please contact us:

Email: privacy@gram.fit

We are committed to responding to your inquiries and requests promptly and will work to resolve any concerns about our health data practices.