Consumer Health Data Privacy Policy

Data and purposes

This notice describes consumer health data used by FitGlade, operated by Corbello Inc. Workout selections, exercise sessions, progress and activity estimates may reveal physical activity or health-related goals. We use them to deliver the workouts and progress features you request.

Where offered and separately consented, optional measurements and answers include height, weight, target weight and body areas you want to work around. They support the feature that asks for them. If you include health information in a support request, we use it to answer that request.

Sources

The sources are you, your activity in FitGlade and calculations from that activity, such as progress or calorie estimates. At launch, we do not import medical records or connect wearable or third-party health accounts.

Recipients

Supabase stores account-linked workout and optional health records. Vercel and Cloudflare support the app, network requests and media delivery, which may reveal the workout being accessed. Providers receive information needed to operate the requested service.

Paddle receives purchase information to complete the sale. Consented website analytics and advertising events can reveal a visit to or purchase from a fitness service; PostHog and Meta receive those events for usage analysis and ad measurement. They do not receive stored health measurements, quiz answer values or workout history through those events.

We do not exchange workout history or optional health measurements for payment or use those records for advertising. We do not share those records with other Corbello products or affiliates for their own purposes. Any disclosure required by law must meet the protections that apply to consumer health data.

Your choices and rights

Where consumer-health privacy law applies, you may request confirmation, access, a recipient list, withdrawal of consent or deletion by emailing us. We may verify your identity; you do not need to create an account. Turning off health-metric consent in Account → Privacy deletes that optional record, while requests about workout history can be made by email.

For Washington requests, we respond within 45 days, subject to a permitted extension. If refused, reply to appeal; we respond to the appeal within 45 days and explain the result. You may complain to the Washington Attorney General. Deletion includes notifying relevant recipients; backup deletion must follow the applicable legal deadline.