This is a separate notice required by Washington's My Health My Data Act and Nevada's consumer health data law, and it also reflects Connecticut's consumer-health-data consent rules. It focuses specifically on the "consumer health data" Aldo collects: what it is, why, who else touches it, and what you can do about it. It covers the app and website at aldo-coach.app (the "Service") and supplements, rather than replaces, our main Privacy Policy, which covers everything the Service collects — including the data described here — in fuller detail. Using the Service means you accept this policy along with the Privacy Policy, the Terms of Use, and the Health & Safety Notice and Waiver.
1. Who this policy is for
This policy applies to anyone whose consumer health data Aldo handles, wherever you live. It is written specifically for residents of Washington and Nevada, whose laws require it, and its consent practices also reflect Connecticut's rules. If you live elsewhere, the protections in this policy still apply to you.
Aldo is an AI strength-training coaching app operated by River Lentil LLC, a California limited liability company, at aldo-coach.app. Contact: support@aldo-coach.app.
2. What counts as consumer health data here
Laws like Washington's define "consumer health data" broadly — personal information that reveals something about your physical or mental health, well beyond the narrow world of hospital and insurance records. In Aldo, that includes:
- Injury entries and per-set pain scores — the body part, what happened, how it feels, injury status over time, and 0–10 pain scores attached to individual sets. Collected only with your explicit, opt-in consent, used to shape rehab-aware coaching. See Privacy Policy §3.4 and the Use injuries & pain scores in coaching switch in Settings → Data & Backup → Sharing.
- Apple Health data (iOS only) — sleep, body weight, resting heart rate and HRV (shared with the coach only as a comparison to your own recent range, not as raw readings), heart rate and calories recorded by Apple Watch during an Aldo workout, and workouts recorded by other apps or your watch. Collected only if you connect Apple Health and agree, with a separate switch per data type, to tailor recovery and training load. See Privacy Policy §3.5.
- Profile data that can reveal health information — age, sex, bodyweight, sleep, and nutrition notes you choose to enter. Optional, entered because you want the coach to account for your situation. See Privacy Policy §3.2.
- Anything health-related you type into the coach chat — an illness, a medication, a menstrual cycle, or anything else affecting training — is stored as part of your chat history like any other message. See Privacy Policy §3.6.
- What the coach infers from the above — for example, adjusting a program around a reported injury, or flagging a conflict between a pain score and a planned load. This is coaching behavior, not clinical monitoring by a person.
- Plain workout logs — the sets, reps, and weights you log are primarily training data, not health data, but a pattern in them (a sudden drop in load, missed sessions) can reveal something about your health, so we treat this data as health-adjacent and apply the same protections described here. See Privacy Policy §3.3.
3. Where this data comes from
- You, directly — your profile, injury entries, pain scores, and coach chat messages.
- Apple Health, on your device — only after you connect it and agree; each data type has its own switch.
- Apple Watch — heart rate and calories during an Aldo workout, and, for outdoor cardio, GPS-derived distance, pace, splits, and elevation.
- Files you upload — a training-history spreadsheet or program PDF may contain health-adjacent information if you've included it.
4. How we use it
We use consumer health data for one purpose: to provide the coaching you're asking for. That means using it as context so the coach's suggestions, load adjustments, and rehab-aware recommendations are about you rather than a generic user, and using injury and pain data to flag conflicts between what you've logged and what's planned. Nobody watches it in real time, and it isn't used for anything else.
We do not sell your consumer health data. We do not use it for advertising, targeted advertising, or cross-context behavioral advertising. We do not share it with data brokers. We do not use geofencing or other location-based targeting — the only location feature in Aldo is GPS during an outdoor Apple Watch workout, and the route itself never leaves your phone (see Privacy Policy §3.5). We do not use your consumer health data to train AI models.
5. Who we share it with
We share consumer health data only with service providers who help us run Aldo. They act as our processors, under contract, on our instructions, only to provide the Service — never on their own account. River Lentil LLC has no affiliated companies, so none is shared with any affiliate.
- Supabase — stores your account data: injury and pain entries, the parts of Apple Health data that become part of your account (profile body weight, heart rate/calories saved with a Watch workout), profile data, chat transcripts, and training data.
- Anthropic — processes the relevant parts of this data (injury entries, pain scores, the Apple Health values above, profile data, chat content) to generate the coach's responses. See Privacy Policy §5.
- Vercel — hosts our backend API, so this data passes through it in transit to Supabase or Anthropic.
- GitHub — receives consumer health data only if you opt in, per report, to attach a data snapshot when filing a bug report; the issue carries a signed link (expiring 30 days after filing) to that snapshot, not the data itself. See Privacy Policy §7.
- Sentry and PostHog receive none of your consumer health data — every property either can receive is restricted to a boolean, a number, or a short status tag, and free text is dropped before it leaves your device. See Privacy Policy §3.9.
- Netlify hosts the app and website and does not receive your account data. Stripe (payments) and Resend (transactional email) do not receive consumer health data either.
We may also disclose consumer health data if required by law, to enforce our Terms of Use, or to protect the safety of a person or the Service.
6. Consent
We ask before we collect or use your injury and pain data, and before we read anything from Apple Health — a general acceptance of our policies isn't enough for either. Exactly how and when we ask is in Privacy Policy §3.4 (injury/pain) and §3.5 (Apple Health). This consent-first approach is also how we treat consumer health data for Connecticut residents.
You can withdraw consent at any time:
- Injury and pain data — turn off Use injuries & pain scores in coaching in Settings → Data & Backup → Sharing. Existing entries stay on your device and in your cloud backup but stop being sent to the coach. Withdrawing doesn't rewrite anything you or the coach already wrote about an injury in chat or notes. To remove the data entirely, delete the entries or delete your account.
- Apple Health data — turn off Use Health data in coaching on the Apple Health card, tap DISCONNECT, or revoke access in Apple Health app → Sharing → Apps → Aldo. Disconnecting stops all reading and writing. Deleting the app removes what's stored on your device; deleting your account removes what's stored in your account.
7. Your rights
If you're a Washington or Nevada resident — and we extend the same rights to everyone, wherever you live — you can:
- Confirm whether we collect or share your consumer health data, and access it.
- Get a list of the categories of consumer health data we've shared, and the processors and third parties described in section 5.
- Withdraw your consent, as described in section 6.
- Delete your consumer health data. You can do this in-app or by emailing us; when you delete it, we also instruct our processors to delete their copies under our contracts with them.
8. How to exercise these rights, and appeals
Email support@aldo-coach.app to make any of the requests above. We'll respond within 45 days; if we reasonably need more time, we'll tell you and take up to another 45 days. There's no charge for this (Washington law lets us charge only for requests that are clearly unfounded or excessive).
If we decline a request, you can appeal by replying to our decision and asking us to reconsider. We'll respond to your appeal within 45 days. If we still decline, Washington residents can file a complaint with the Washington Attorney General at https://www.atg.wa.gov/file-complaint; Nevada residents can file a complaint with the Nevada Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/.
9. Security and retention
Consumer health data is protected the same way as the rest of your account: transmitted over HTTPS, stored encrypted at rest with row-level access controls limiting each account to its own data, with administrative access limited to the operator. We keep it for as long as your account is active. Deleting your account removes it from our active systems, though limited copies may persist briefly in encrypted backups or provider logs until they expire on schedule. Full detail is in Privacy Policy §8 (retention) and §12 (security).
10. Changes to this policy
We may update this policy. When we do, we'll update the "Last updated" date and version number above, and announce material changes in the app.
11. Contact
Questions about this policy or your consumer health data: support@aldo-coach.app
Related documents: Privacy Policy · Terms of Use · Health & Safety Notice and Waiver