US consumer health data notice
This section is a separate and distinct notice for US consumer health laws. It should be read with the full Privacy Policy above.
APRIL DOES NOT SELL CONSUMER HEALTH DATA.
April does not use consumer health data for targeted advertising and does not use precise-location geofences around health-care facilities.
2.1 Consumer health data April may collect
- Fitness, exercise, workout, recovery, heart-rate, sleep, activity and energy information.
- Height, weight, body trends, nutrition, food, calorie, macro, dietary and allergy information.
- Pregnancy, injury, medication, eating-disorder, care and other safety context you choose to provide.
- Health-related goals, symptoms or questions included in an AI chat or support request.
- Inferences April creates from the above, such as a training adjustment, recovery summary, body trend or food compatibility note.
2.2 Sources and uses
Sources are you, your use of April, a device or watch you connect, Apple Health, Health Connect, and services you deliberately ask April to use. April collects or processes this information to provide the feature you request, tailor fitness and food tools, apply safety controls, answer an AI request, maintain your records, secure the service and comply with law.
2.3 Who can receive consumer health data
Depending on the feature, consumer health data can be disclosed to Google Firebase and Google Cloud for April's infrastructure; Supabase and the April Food Database infrastructure for food search; OpenAI for attachment analysis or a selected specialist feature or model; the provider and approved routing infrastructure for the AI model you select; Apple or Google for platform health access; Zoho Mail if you include health information in a support message; EU Rep for an EU or EEA privacy request; and professional advisers or authorities when lawfully necessary. Search and content tools receive only the query or page needed when a web-enabled feature is used. Subscription services do not need your prompt or connected-health history to manage entitlement. Cloudflare Web Analytics is limited to the public website and is not used to analyse in-app health records.
April has no affiliates that receive consumer health data for their own independent marketing. The provider list will be updated before a new category of health-data sharing begins.
2.4 Consent and your rights
You can decline a health permission, leave sensitive context out, disconnect a health platform, delete editable records, delete the account, or email privacy@trainwithapril.com to request access or deletion of consumer health data or to withdraw consent. April will also instruct relevant processors to delete data when required, subject to lawful exceptions and restricted backup cycles.
If April denies a request, you may appeal by replying with the subject “Privacy appeal.” April will review the decision and explain any external complaint option available in your state.
2.5 HIPAA and breach notifications
April is generally not a health-care provider, health plan, clearinghouse or business associate under the US Health Insurance Portability and Accountability Act. Information you put into April may therefore not be protected by HIPAA. Other consumer privacy, health-data and breach-notification laws can still apply. If a qualifying breach of unsecured identifiable health information occurs, April will provide the notices required by applicable law.
