Consumer Health Data Privacy Policy
This policy is for A Player Mode ("APM"): the iPhone and Android apps, the web app, and the services behind them, run by Spry Labs ("we", "us"). It explains how we handle consumer health data, meaning personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health, as defined by Washington's My Health My Data Act and similar state laws. It adds to our Privacy Policy, which covers everything else.
The short version: APM asks before it collects any health information, separately from anything else you agree to. If you say no, APM still works and plans your Body steps from general habits only. You can withdraw your consent at any time in Settings → Privacy → Consumer health data. We never sell health information and never use it for advertising. APM is a planning and coaching tool. It is not a medical service and does not give medical advice.
1. The health information APM collects
Only with your consent, and only what you choose to tell APM:
- Body setup answers: the kinds of movement you would do and how many days a week, food habits (for example skipping breakfast or late-night eating), your current weight and how often you want to weigh in, and whether you have a daily health routine to be reminded of (vitamins, medication or physio). APM never asks for or stores the names of medications.
- Safety answers: whether pregnancy, diabetes medication, a heart condition or a history of disordered eating applies to you (or that you would rather not say), whether a clinician supervises your plan, and when you later record that a clinician has cleared you to continue.
- Morning routine: whether getting out of bed is hard for you, which adds a gentle, Pilates-style in-bed movement routine to your morning.
- Morning energy score: the 1 to 10 score you tap at the morning check-in, which APM uses to size the day (2 or lower makes it a light day). Without consent APM does not ask for it, and our servers discard a score that reaches them.
- Mental load score: how full your head feels, from 1 to 10, asked once at setup; APM uses it to suggest how firmly it coaches you. Without consent APM does not ask for it, and our servers discard a score that reaches them.
- Health goals: choosing "Losing weight / getting healthy" as one of your games, a weight or fitness goal under it, or a goal to return from an injury.
- Health-routine reminders you add in Settings → Life areas.
APM does not ask for health information anywhere else. If you write something about your health yourself, in a free-text answer, a diary entry or a coaching message, it is stored with that entry like the rest of what you write, used only for it, and deleted with it.
Calendars and email you choose to connect can contain health-related details, such as the title of a medical appointment. APM uses them only to plan your day around the event and does not use them to work out anything about your health.
2. Where it comes from
From you, in the app. We do not buy health information or receive it from data brokers, and APM does not use your location or set up geofences around health-care locations.
3. Why we use it
- To shape your Body pillar: the daily movement, food and routine steps APM suggests, on the days that suit you.
- To keep the pace of a weight goal within a safe limit, and to keep Body steps to habits only when a safety answer says so, until you record a clinician's clearance.
- To remind you of the health routine you asked to be reminded of.
- To show you your own answers, and to export or delete them when you ask.
We do not use health information for advertising, to decide on credit, insurance or employment, or to train AI models.
4. Your consent
- APM asks for consent on its own screen before the first health question, with "I agree" and "Not now" side by side. We record your choice, the date and time, and the version of this policy you saw.
- If you choose "Not now", APM skips the health questions, the mental load score and the morning energy score, does not offer the weight-loss game or the injury goal, and our servers discard any health answer that reaches them.
- You can give or withdraw consent at any time in Settings → Privacy → Consumer health data. When you withdraw, collection stops at once: new health answers and morning energy scores are discarded, health-routine reminders and clinician clearances can no longer be added, and the health answers in your setup answers are dropped the next time they save.
- Withdrawing does not delete what is already stored in your plan. To delete it, use Settings → Privacy → Export & Delete, which deletes your account and all of its data.
5. Who processes it
We share health information only with service providers that process it for us under contract, only to run APM:
- Supabase stores it (database and sign-in), in the United States.
- Cloudflare runs the APM API that handles it in transit.
- OpenRouter and the AI model providers we have approved, only when a feature that uses AI needs part of it. For private data we require providers that do not train on it and do not keep it.
We do not sell health information, and we do not share it with anyone else unless you ask us to, the law requires it, or it is needed to protect someone's safety. If the business is sold or merged, this policy continues to apply.
6. How long we keep it
For as long as you have an account, until you change it or delete your account. When you delete your account, it is erased from our active systems within 24 hours; copies in encrypted backups expire on our providers' backup schedules.
7. Your rights
- Access: see your answers in the app, or download everything in Settings → Privacy → Export & Delete. The service providers that process it are listed in section 5.
- Delete: delete your account and all of its data in Settings → Privacy → Export & Delete.
- Withdraw consent: in Settings → Privacy → Consumer health data.
- Ask us or appeal: email support@aplayermode.com. We answer within 45 days. If we decline a request, you can appeal by replying with "Health data appeal" in the subject; we answer an appeal within 45 days and tell you how to contact the Washington State Attorney General if you disagree with the outcome.
We will not treat you differently for using these rights.
8. Adults only
APM is for adults 18 and over, and asks you to confirm your age before an account is created.
9. Changes
We will update the date and version above when this policy changes. If a change would let us collect or share health information in a new way, we will ask for your consent again first.
10. Contact
Spry Labs · support@aplayermode.com