Consumer Health Data Privacy Policy

This policy explains how Attax collects, uses and shares consumer health data, as defined by the Washington My Health My Data Act and similar laws in Nevada, Connecticut and other U.S. states. It supplements our general Privacy Policy.

1. Consumer health data we collect

• Heart rate, including per-minute heart-rate values recorded during your workouts.
• Step counts.
• Workout session times and the time spent in each heart-rate zone, derived from the data above.
• Your year of birth, used to adjust heart-rate zones to your age.

2. Sources

We collect this data from you, through Apple Health (HealthKit) on iPhone or Health Connect on Android, only after you give your consent in the app and grant access in your phone's health settings. On iPhone, if no watch data is available, step counts may come from your phone's motion sensor.

3. How we use it

We use consumer health data only to provide the Attax game you asked for: calculating your activity points, resolving your daily duels, updating rankings and showing your activity history. We do not use it for advertising, marketing, profiling, or to determine eligibility for credit, insurance, housing or employment.

4. Consent

We collect and use consumer health data only with your explicit consent, given by ticking a dedicated checkbox when you create your account (or on a dedicated screen for accounts created earlier). You can withdraw your consent at any time by revoking access in Apple Health or Health Connect and by deleting your account (see section 7).

5. Sharing

• Other players: in a duel, your opponent sees your activity points and the heart-rate curve of your workout for that duel. They never see your other health data.
• Service providers (processors): our hosting and database provider (Supabase) stores this data on our behalf, under contract, only to run Attax.
• We never sell consumer health data and never share it with advertisers, data brokers or other third parties.

6. Security and retention

Data is encrypted in transit and access is restricted to the minimum needed to run the game. We keep it for as long as your account exists. When you delete your account, it is deleted from our database immediately and from backups within 30 days.

7. Your rights

You have the right to confirm whether we collect your consumer health data, to access it, to obtain the list of third parties and processors it is shared with, to withdraw your consent, and to have it deleted.

• Delete your data: in the app, tap your profile photo at the top of the Home screen > My account > My profile > Delete my account. All your data is deleted.
• Any other request: email contact@attax.app from the email address of your account. We respond within 45 days.
• Appeal: if we decline your request, you can appeal by replying to our answer. If your appeal is denied, you may contact your state Attorney General.

8. Contact

Attax — contact@attax.app