Consumer Health Data Privacy Policy

Effective date: October 27, 2026

This policy is for people who live in Washington, Nevada, Connecticut and other places with laws about "consumer health data." It explains the health information Signl Advisory ("Signl," "we") collects through the Signl Health app, why, who we share it with, and your rights. It adds to our main Privacy Policy, which covers everything else.

Consumer health data we collect

• Body and vital signs: heart rate, resting heart rate, heart rate variability, blood oxygen, respiratory rate, skin temperature, blood pressure, weight, height, body composition and body scan (DEXA) results.
• Sleep, activity and recovery: sleep times and stages, steps, calories burned, workouts and sets, stress, Body Battery, training load, and the scores we calculate from them (such as Recovery, Readiness, sleep debt and biological age estimates).
• Nutrition: foods and meals you log, including meal photos you choose to send for an estimate, and calorie and macro targets.
• Lab results: lab values you import from Apple Health Records or a lab report.
• Health goals, conditions and how you feel: goals, injuries or movements you want to avoid, journal entries (such as mood, energy, soreness, alcohol), and messages to the AI coach.
• Reproductive health: period days, only if you turn on cycle tracking. This stays on your device and is never sent to us or anyone else.

We do not collect precise location, and we do not use geofencing.

Where it comes from

From you (what you enter or upload), from Apple Health on your iPhone and Apple Watch when you allow it, from Garmin Connect if you connect it or upload a Garmin export, from Google Health (Fitbit, Pixel Watch) if you connect it, and from our own calculations based on that data.

Why we collect and use it

Only to provide the features you ask for: showing your data and trends, building and adjusting your training and nutrition plan, calculating scores, sending notifications you turned on, keeping the Service secure, and answering you when you contact us. We do not sell consumer health data, and we do not use it for advertising, marketing or building advertising profiles.

Who we share it with

• Supabase (database and sign-in) and Netlify (server hosting), as our processors, to store and run the Service.
• Anthropic (AI processing), as our processor, only after you separately agree to AI features, and only the data a feature you use needs. You can turn this off at any time in Settings.
• Apple, to deliver notifications you turn on.
• Garmin, only to connect and disconnect your Garmin account if you choose to.
• Google, only to connect, read from and disconnect your Google Health account if you choose to.
• An AI assistant you connect (such as Claude or ChatGPT), only if you connect it in Settings. It can read your data when you ask it and send suggestions you accept or decline; it cannot change anything on its own. You can turn this off at any time in Settings.

We do not share consumer health data with anyone else unless you direct us to, or when the law requires it.

Your consent

You give consent to collect health data from Apple Health, Garmin and Google Health in the iOS, Garmin and Google permission screens, and you can change those at any time. Sharing with our AI provider needs a separate yes in the app. Cycle tracking needs its own switch in Settings.

Your rights

You can:

• confirm whether we collect, share or sell your consumer health data, and get a copy of it;
• get a list of the third parties and processors we have shared it with, and how to contact them;
• withdraw your consent (turn off AI features or cycle tracking in Settings, or remove Apple Health, Garmin or Google Health access);
• delete your consumer health data. Delete your account in Settings > Delete account, or email us. We also tell our processors to delete it.

To make a request, email andrew@signladvisory.com from the address on your account. We respond within 45 days (we may extend once by 45 days if needed, and will tell you). If we decline, you can appeal by replying with "Appeal" in the subject line; we answer appeals within 45 days. If your appeal is denied, you can contact your state attorney general, including the Washington State Attorney General at atg.wa.gov/file-complaint.

We will not treat you differently for using these rights.

Contact

Signl Advisory
Email: andrew@signladvisory.com