Consumer Health Data Privacy Notice

This Consumer Health Data Privacy Notice supplements our Privacy Policy and describes how Charter Oak Strategic Partners, LLC ("Kinset," "we," "us," or "our") collects, uses, shares, and protects consumer health data as defined by the Washington My Health My Data Act (RCW 19.373) and similar state laws.

1. Categories of Consumer Health Data We Collect

Kinset collects the following categories of consumer health data:

2. Sources of Consumer Health Data

All consumer health data is provided directly by you through your use of Kinset. We do not obtain consumer health data from third-party sources.

Recovery estimates and strength metrics are computed from your self-reported workout data using deterministic algorithms. These computed values are not stored persistently. They are recalculated on each request from your logged workout history.

3. How We Use Consumer Health Data

We use consumer health data solely to provide and improve the Kinset service:

• Generate personalized workouts based on your recovery state, training history, and goals.
• Track your progress including estimated one-rep max trends and personal records.
• Apply safety constraints including age-appropriate training parameters for teen members.
• Calculate recovery so the workout generator can recommend appropriate training intensity and muscle group selection.

We do not use consumer health data to:

• Serve or target advertisements.
• Build consumer profiles for sale to third parties.
• Make decisions about your eligibility for insurance, employment, credit, or housing.
• Train machine learning models.

4. How We Share Consumer Health Data

Within your household

Joint workout sessions share exercise, weight, set, and rep data among session participants. This sharing is necessary for the joint-session feature to function.

Body weight, recovery data, soreness check-ins, and solo workout details are never shared with other household members, including the household owner.

With service providers

Consumer health data is processed by our infrastructure providers (Vercel for hosting, Neon for database storage) solely to operate the service. These providers process data on our behalf under contractual obligations and do not use your health data for their own purposes.

We do not sell consumer health data

We do not sell, rent, or trade consumer health data. We do not share consumer health data with third parties for advertising, marketing, or profiling purposes.

5. Your Rights Regarding Consumer Health Data

You have the right to:

• Know what consumer health data we have collected about you.
• Access your consumer health data through Settings or by contacting us.
• Export your data as a JSON file through Settings.
• Delete your consumer health data by deleting your account through Settings.
• Withdraw consent for optional data collection (body weight, soreness check-ins, session ratings) at any time by simply not providing that data. These fields are always optional.

To exercise these rights, see our Privacy Request page or contact us at privacy@onecharteroak.com.

6. Data Retention

Consumer health data is retained for as long as your account is active. Upon account deletion, consumer health data is removed from active systems within 30 days and from backups within 90 days.

Recovery state is computed, not stored. When your workout history is deleted, your recovery data ceases to exist.

7. Security

Consumer health data is protected by the same security measures described in our Privacy Policy, including encrypted connections, encrypted storage, server-enforced access controls, and tenant isolation.

8. Contact

If you have questions about this Consumer Health Data Privacy Notice or want to exercise your rights, contact us at:

Email: privacy@onecharteroak.com