Consumer Health Data Privacy Policy
Effective and last updated:
This separate notice explains which activity and health-related data Effort Signal collects, why it is needed, who processes it, and how to exercise U.S. consumer-health rights. We do not sell this data or use it for marketing.
Scope and health data collected
This Consumer Health Data Privacy Policy describes Effort Signal’s practices for consumer health data under the Washington My Health My Data Act and similar U.S. laws. Consumer health data is personal information that identifies or can reasonably be linked to a consumer and identifies the consumer’s past, present, or future physical or mental health status.
Depending on the files, devices, settings, and features you use, we collect:
- Exercise and activity data: sport, workouts, duration, distance, pace, speed, elevation, cadence, intervals, laps, training load, energy expenditure, and device details.
- Bodily functions, vital signs, and measurements: heart rate, heart-rate variability, temperature, movement, power, body mass, thresholds, and compatible sensor measurements.
- Location related to activity: GPS routes, precise coordinates, timestamps, and route-derived information.
- Health and fitness inferences: zones, load, intensity, efficiency, data-quality indicators, comparisons, and other analyses derived from the information above.
- Data linking an account to health information: account and provider identifiers needed to keep health data private to the correct user.
We collect these categories only to provide the activity library, processing, analysis, maps, connected imports, support, security, and reliability that you request. We do not collect consumer health data for advertising or marketing.
Sources of consumer health data
- You, through profile settings, files, edits, tags, and support or privacy requests.
- Your watches, cycling computers, sensors, and FIT, TCX, or GPX files.
- Garmin, Polar, Strava, Wahoo, or another provider you direct us to connect when that integration is enabled.
- Effort Signal’s calculations, which derive metrics and inferences from the data above.
- Technical systems that record limited activity-related context when needed to secure, troubleshoot, and deliver the requested Service.
How consumer health data is used
- Import, validate, preserve, and organize activity records.
- Calculate and display routes, sensor series, metrics, zones, intervals, comparisons, and training analysis.
- Apply your profile, unit, threshold, and visualization settings.
- Operate user-requested provider connections and activity imports.
- Authenticate users, isolate each user’s data, prevent abuse, and protect the Service.
- Diagnose errors, restore interrupted processing, provide support, and improve Service reliability and accessibility.
- Comply with law and establish, exercise, or defend legal claims.
Health data disclosed and recipients
We do not disclose consumer health data for advertising, marketing, data brokerage, or a recipient’s independent commercial use. The following recipients process or receive only the categories needed for the stated Service purpose:
| Recipient or category | Consumer health data involved and purpose |
|---|---|
| Hosting and database infrastructure providers | Account-linked activity, health, location, and derived data needed to run the Service and maintain protected backups. |
| Backblaze | Private activity source files, derived sensor and route artifacts, and profile media stored on our behalf. |
| Cloudflare | IP address, request metadata, and requested URLs needed for secure delivery, abuse prevention, and network protection. |
| Sentry | Account identifiers, request context, diagnostics, and activity-related details that may be involved in an application error, used only to detect and resolve failures. |
| OpenFreeMap | IP address and map-tile coordinates needed to render the visible map when you open a route map; Effort Signal does not send the route geometry itself. |
| Amazon Web Services public Terrain Tiles | Effort Signal’s server network data and terrain-tile coordinates needed to fill missing elevation in an imported GPX track; no account identifier, GPX file, or full route geometry is sent. |
| User-directed connected providers | Provider identifiers, authorization data, activity identifiers, and requests needed to enable, use, or disconnect Garmin, Polar, Strava, Wahoo, or another integration you select. |
| Authorities, courts, and advisers | Only the information reasonably necessary to comply with law, protect rights and safety, or establish and defend legal claims. |
Effort Signal has no affiliates with which it shares consumer health data. Processors are contractually or otherwise required to handle data only for the limited operational service they provide where applicable law requires that relationship.
No sale of consumer health data
Effort Signal does not sell consumer health data. We do not exchange it for money or other valuable consideration, and we do not use it for targeted advertising or marketing.
Your consumer health data rights
Subject to applicable law, you may:
- confirm whether we collect, share, or sell your consumer health data;
- access the consumer health data we maintain about you, including a list of recipients where required;
- withdraw consent from future collection or sharing where processing relies on consent;
- request deletion of consumer health data, including notification to processors or other recipients where required; and
- appeal our refusal to act on a request.
Email privacy@effortsignal.com with the subject “Consumer Health Data Request.” Include the account email and the right you wish to exercise. We may request proportionate information to verify your identity and protect health data from unauthorized disclosure or deletion. We will respond and provide appeal instructions within the period required by applicable law. We will not unlawfully discriminate against you for exercising a right.
Deleting an activity in the current interface hides it from the active library but is not a permanent health-data deletion request. Use the email process above for permanent deletion. We may retain information where a legal exception applies and will explain that exception when required.
Changes and contact
We will not collect, use, or disclose an additional category of consumer health data or use it for an additional purpose not described here without first updating this Policy and obtaining affirmative consent when applicable law requires it.
Contact Effort Signal, the operator of effortsignal.com, at privacy@effortsignal.com.