Health Data Privacy Policy

Last updated: October 5, 2026

The short version

Your logged sets, goals, height, weight and Injured Reserve status may be consumer health data.
We collect and share it only with your consent, which you give at signup separately from the Terms and Privacy Policy.
Other users see your totals, standings and logged sets. Nobody but you sees your height, weight or the goal numbers you set.
We never sell it, never use it for ads, and never share it with data brokers.
You can see it, download it, delete it, or withdraw your consent at any time.

What this covers

This policy explains how Nova Hawk Labs LLC ("we") handles consumer health data on pushup.cc. It is written for Washington's My Health My Data Act and similar laws in Nevada, Connecticut and elsewhere, but it applies to everyone who uses pushup.cc, wherever they live. It adds to our main Privacy Policy, which covers everything else.

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. Some laws read this broadly enough to include exercise logs and body measurements, so we treat them as health data.

Health data we collect

Categories of consumer health data
Category	What it includes	Required?
Exercise logs	For each set: the exercise (push-ups, sit-ups, pull-ups, squats or dips), the rep count, the date and time, and whether it came from a game such as Timer or Deck. Game results such as duration and reps.	Yes, logging sets is how pushup.cc works
Goals	Your daily rep goal for each exercise.	No, defaults apply until you change them
Body measurements	Height and weight.	No, only if you add them
Injury status	Injured Reserve, if you turn it on to show you are resting or injured.	No
Derived data	Stats we calculate from the above: totals, daily, weekly, monthly and yearly totals, streaks, records, badges, Weight Moved, averages and projections.	Calculated automatically

We do not collect diagnoses, conditions, medications, heart rate, sleep, reproductive or sexual health information, biometric data, genetic data, precise location, or any data from health apps or wearables.

Where it comes from

From you: when you log a set, play a game, set a goal, add your height or weight, or turn on Injured Reserve.
From our calculations: the derived stats above, which we compute from what you log.

We do not buy health data or receive it from other companies.

Why we collect and use it

To track your workouts and show your progress, streaks, records, badges and recap.
To calculate Weight Moved from your weight, if you add it.
To run the social features you use: leaderboards, the activity feed, friends, clubs and game rooms.
To keep the boards fair and the service secure, including reviewing reports of fake reps.
To find and fix bugs.
To comply with the law.

We collect and share consumer health data only with your consent. We ask for it at signup in its own step, separate from agreeing to the Terms of Service and the Privacy Policy, and we record the date you agreed. If we ever want to collect a new kind of health data or use or share it for a new purpose, we will ask for your consent again first.

Recipients of consumer health data
Recipient	What they receive	Why
Other signed-in pushup.cc users, with your consent	Your totals and period totals, leaderboard standings, streaks, records, badges, Injured Reserve status, how often you hit your daily goal, and each logged set and game result in the activity feed. Never your height, your weight, or the goal numbers themselves.	Leaderboards and social features are the point of the app.
Members, owners and admins of your clubs	Your standings and totals on the club leaderboard.	Club leaderboards.
Supabase (processor)	All of it.	Stores our database. Contact: supabase.com/privacy
Vercel (processor)	Data passing between your device and our servers.	Hosts and serves the app. Contact: vercel.com/legal/privacy-policy
Sentry (processor)	Technical context of an error, which can occasionally include details of the request that failed, such as a set being logged.	Error reports. Contact: sentry.io/privacy

Our processors may use the data only to provide their service to us. We have no affiliates that receive consumer health data. We may also disclose it when the law requires (for example, a valid court order), or as part of a merger or sale of our business, in which case this policy would continue to apply to it.

What we never do

We never sell consumer health data.
We never use it for advertising or share it with advertisers or data brokers.
We never set up a geofence around health care facilities, and we do not collect location at all.
We never use it to make decisions about your eligibility for insurance, employment, credit or housing.
We let no third party collect health data, or anything else, about what you do across other websites or apps through pushup.cc. There are no ad or analytics trackers in the app.

Your rights

Confirm and access: ask whether we collect, share or sell your health data, get a copy of it, and get a list of every third party and affiliate we have shared it with, with a way to contact each one.
Delete: have your health data deleted, including from our processors and, as they roll over, our backups.
Withdraw consent: stop us collecting new health data, and have us stop showing what we hold to other users.
Appeal: ask us to reconsider if we decline a request.
No discrimination: we will not treat you differently for using these rights.

We answer within 45 days. If we need up to 45 more days, we will tell you why within the first 45. Requests are free, up to two per year.

How to use your rights

See and download: your logs and stats are in the app. Settings, Download My Data gives you a copy of everything in one file.
Review and correct: change or delete a set you logged from the Log screen, and change your goals, height, weight and Injured Reserve status in Settings. Email us for anything you cannot change yourself.
Remove body measurements: clear your height and weight in Settings at any time. This does not affect anything else.
Delete everything: Settings, Delete My Account permanently deletes your account and all of your health data from our live database right away.
Withdraw consent: use the Health Data Consent setting in Settings, or email privacy@pushup.cc. From then on we collect no new health data, so you will not be able to log sets. What we already hold stays in your account until you delete it. If you want it deleted, or no longer shown to other users, delete your account or email us and we will hide your profile or delete the data, whichever you choose.
Any other request: email privacy@pushup.cc with "Health data request" in the subject, from the email address on your account. Or write to Nova Hawk Labs LLC, Attn: Privacy, 1122 Colorado Street, Apt 1410, Austin, TX 78701, USA.
Appeal: reply to our decision or email privacy@pushup.cc with "Appeal" in the subject. We answer within 45 days and explain our reasons. If we deny your appeal, you can contact your state attorney general. In Washington, use the Attorney General's complaint form.

How long we keep it

We keep your health data while you have an account. When you delete your account, we delete it from our live database right away, and with it the copy our database provider (Supabase) holds. Copies in our database backups are gone within 30 days. An error report that happened to include details of a set stays with Sentry until it is deleted after 90 days.

Changes to this policy

This policy is effective from the date shown at the top of this page. If we change it, we update that date. If a change is material, we tell you in the app and by email before it takes effect. If we want to collect a new kind of health data, use it for a new purpose, or share it with a new kind of recipient, we will ask for your consent first.

Contact

Nova Hawk Labs LLC, 1122 Colorado Street, Apt 1410, Austin, TX 78701, USA. Email privacy@pushup.cc.