Health & Fitness Data Privacy Notice

This notice supplements Genova's general Privacy Policy. The general Privacy Policy still explains topics such as account information, payments, website use, security, international transfers, and general privacy rights.

This notice is informational. It does not replace:

• the health-data consent shown inside Genova;
• the separate choice to use AI features;
• your Apple Health permissions; or
• any additional consent or authorization required by law.

Genova is provided by Kirill Hundoryn, doing business as Genova, who is responsible for the processing described in this notice.

Privacy questions and requests can be sent to support@genovasport.app or by post to:

Information you provide

• workouts, exercises, sets, repetitions, weights, duration, distance, effort, and notes;
• training plans, goals, preferences, experience level, and equipment;
• body information such as height, weight, body-fat percentage, waist measurement, and the health and performance calculation reference you choose to provide;
• recovery check-ins, soreness, energy, readiness, and similar self-reported information; and
• questions and instructions you choose to send to Genova's AI features.

Information imported from Apple Health

When you connect Apple Health and allow access, Genova may read the categories you approve. These may include:

• workouts and activity;
• heart rate, resting heart rate, and heart-rate variability;
• sleep;
• active energy, distance, speed, and effort;
• VO2 max and other fitness indicators;
• body measurements; and
• date of birth, when you choose to use it for age-related fitness calculations.

Apple controls the Apple Health permission screen. You can change these permissions in Apple Health or iOS Settings.

Information created by Genova

Genova may calculate or infer information from your activity, workouts, body information, and recovery signals. Examples include:

• Training Score and Training Load;
• recovery or readiness information;
• progress trends and goal progress;
• workout, plan, and recovery recommendations; and
• AI-generated coaching responses.

These are fitness features. Genova does not diagnose, treat, cure, or prevent a medical condition, and its outputs are not medical advice.

Account and technical information connected to health features

Genova may use an account identifier and other limited technical information to keep your data linked to the correct account, synchronize supported data, protect the service, and respond to support or privacy requests.

Genova receives health and fitness information from:

• you;
• Apple Health, when you give permission;
• the Genova iPhone and Apple Watch apps while you use their features;
• calculations performed by Genova or its optional AI features; and
• information already associated with your Genova account.

Genova does not buy health and fitness information from data brokers.

Genova uses health and fitness information to:

• record and display your workouts;
• create and adjust training plans;
• show progress, recovery, Training Score, and Training Load;
• provide Apple Health import or export features you enable;
• synchronize supported account data across your devices;
• provide AI coaching when you separately enable it;
• keep the service secure, prevent misuse, and fix technical problems;
• answer support and privacy requests; and
• meet legal obligations.

Genova does not use health and fitness information for a new, unrelated purpose without providing any notice or choice required by law.

Genova uses a local-first design, but that does not mean every item always stays on your phone.

Normally kept on your device

• raw Apple Health samples and Apple Health sample identifiers;
• raw heart-rate series;
• exact date of birth;
• current body-measurement values and local measurement snapshots;
• per-set bodyweight used in calculations;
• health-reference preferences; and
• local goal baselines and freshness snapshots.

This information may still be processed by Genova on your device. Keeping it local reduces exposure, but it does not make the processing disappear.

Information that may be stored or processed in Genova's cloud

• your Genova account and settings;
• workouts, plans, goals, and exercise history;
• imported cardio summaries such as workout type, date, duration, distance, calories, speed, and effort;
• derived progress, recovery, and training information needed for account features;
• consent records and privacy choices; and
• limited information needed for security, support, and service operation.

Genova accesses Apple Health only after you grant the relevant Apple permission. Genova may also write supported workouts or measurements to Apple Health when you enable that feature.

Changing or revoking an Apple Health permission stops the related future access to the extent allowed by Apple. It does not automatically delete information that Genova already stored or information that Genova previously wrote to Apple Health.

Deleting your Genova account does not automatically delete Apple's independent copy of your Apple Health or Apple Fitness history. Genova provides a separate control for supported information written by the Genova iPhone app, and you can also manage Health data in Apple's Health app.

Genova does not use information obtained through Apple Health for advertising, marketing, or sale to data brokers.

AI coaching is optional and has a separate consent step.

When you enable it, Genova may send selected information that is relevant to your request through Genova's service to OpenAI. Genova may automatically attach the categories allowed by the AI privacy choices stored for your account on that device. These categories may include:

• profile context;
• workout history;
• progress statistics;
• body measurements;
• health vitals such as sleep, resting heart rate, and heart-rate variability;
• recovery information; and
• cardio history.

You may also type health or fitness information directly into an AI message. Information you deliberately include in a message is sent as part of that message even if an automatic data category is turned off.

Turning a category off is intended to prevent that category from being attached automatically to future AI requests from that device. It does not change the choices on another device or remove information from earlier messages or requests already sent. Exact date of birth, raw heart-rate series, and Apple Health sample identifiers are not intended to be sent to the AI service.

Genova uses the response to provide the AI feature you requested. Genova sets store: false on Responses API requests, so the response object is not kept for the API's ordinary 30-day application-state period. This does not provide Zero Data Retention or eliminate every temporary storage path. OpenAI says encrypted prompt-cache data may be kept for up to 24 hours. Under OpenAI's default data controls, abuse-monitoring logs may also contain request or response content for up to 30 days, or longer when required by law or reasonably necessary to protect OpenAI's services or a third party from harm. Genova has also disabled optional API call logging and voluntary data sharing for model improvement in its OpenAI account.

After you withdraw AI consent, the current Genova app will not start new AI requests for your account. Withdrawal does not, by itself, delete information already stored by Genova or a service provider. You can make a separate deletion request.

Genova limits disclosure to what is needed for the feature you use or the sharing you choose.

Genova also uses providers for subscriptions, website hosting, consent management, app delivery, and infrastructure. They are not intended to receive health and fitness information. Genova's general Privacy Policy identifies the remaining providers and their purposes.

Genova does not:

• sell health and fitness information;
• use health and fitness information for targeted advertising;
• allow a data broker to build a health profile about you;
• use a geofence around a health-care facility to identify or target people based on health information; or
• use Apple Health information for advertising or marketing.

Genova also does not permit a third party to collect consumer health data through Genova over time and across unrelated websites or online services for advertising or profiling.

Genova keeps information only while it is needed for the purposes described in this notice, to provide your account, meet legal obligations, resolve disputes, and protect the service.

The exact period depends on the type of information and where it is stored:

• device-local information usually remains until you delete it, remove the app's local data, or delete your account through Genova's controls;
• cloud account information remains while the account and relevant feature are active, subject to the applicable retention and deletion process;
• service-provider and backup copies may remain for a limited period after a deletion request where technically or legally necessary; and
• security or legal records may be kept longer when required to establish, exercise, or defend legal claims or comply with law.

Depending on your app version and location, you can:

• accept, refuse, review, or withdraw Genova's health-data consent;
• separately enable or disable AI coaching;
• choose which health and fitness categories may be used in AI requests;
• change Apple Health permissions in Apple Health or iOS Settings;
• export supported Genova data;
• correct supported profile information;
• delete supported Genova-created information from Apple Health using the separate Apple Health control;
• delete your Genova account and Genova-controlled local and cloud information; and
• contact Genova about a privacy request or an appeal.

In the current Genova app, withdrawing consent stops future processing controlled by that consent. It does not automatically delete information already collected. Account deletion and Apple Health deletion are separate actions.

If a feature cannot work without the information you withdraw, that feature may pause or become unavailable.

Privacy rights vary by location. Subject to applicable law, you may have the right to:

• know whether Genova processes your health and fitness information;
• access or receive a copy of it;
• learn where it came from and who received it;
• correct inaccurate information;
• withdraw consent;
• delete information; and
• appeal a denied privacy request.

Send a request to support@genovasport.app. Genova may need to verify that the request relates to your account. Genova will not discriminate against you for exercising a privacy right.

This section adds rights for people covered by U.S. consumer-health laws, including eligible Washington and Nevada consumers. The rest of this notice still applies to them.

For these laws, consumer health data can include information that identifies or can reasonably be linked to you and reveals, describes, or can be used to infer your physical or mental health status. It may include workouts, body measurements, vital signs, sleep, recovery information, Training Score, fitness goals, and related inferences depending on how the information is used.

The categories, sources, purposes, processing methods, and recipients of consumer health data are described in the sections above.

Collection and sharing

Genova collects and processes consumer health data only with the authorization or consent required by applicable law, or when it is necessary to provide a feature you requested.

Where the law treats disclosure to a recipient as sharing, Genova will obtain a separate consent when required. Genova does not sell consumer health data. If that changes, Genova would first provide the separate authorization required by law.

Washington rights

If Washington's My Health My Data Act applies to you, you may have the right to:

• confirm whether Genova collects, shares, or sells your consumer health data;
• access that data and receive a list of third parties or affiliates with whom it was shared or sold, including an available way to contact them;
• withdraw consent for collection or sharing;
• request deletion, including deletion from relevant processors and other recipients where required; and
• appeal Genova's decision about your request.

If Genova denies an appeal, it will explain how you may contact the Washington Attorney General to submit a complaint.

Nevada rights

If Nevada's consumer-health law applies to you, you may have the right to:

• confirm whether Genova is collecting, sharing, or selling your consumer health data;
• receive a list of third parties with whom Genova shared or sold that data;
• ask Genova to stop collecting, sharing, or selling that data;
• request deletion as provided by law; and
• appeal Genova's refusal to act on your request.

Requests and appeals

Send a consumer-health request or appeal to support@genovasport.app. Put Consumer Health Privacy Request or Privacy Appeal in the subject line. Genova must provide a secure and reliable request method and may take reasonable steps to verify that the request relates to you or your account.

For Washington requests, Genova will respond without undue delay and within 45 days after receiving the request. For Nevada requests, Genova will respond without undue delay and within 45 days after authenticating the request. Where reasonably necessary, Genova may extend either response period once by up to 45 additional days and will provide notice and an explanation within the initial 45-day period.

For an authenticated Nevada deletion request, Genova will delete the covered data from its active records and network and notify relevant recipients within 30 days. A notified Nevada recipient must delete the covered data from its own records and network within 30 days after receiving the notice. For Washington requests, deletion from archived or backup systems may be delayed for no more than six months after the deletion request is authenticated. For Nevada requests, deletion from archived or backup systems may be delayed for no more than two years after the request is authenticated, when necessary to restore the archived or backup system.

Genova will provide a conspicuous appeal process similar to the original request process. It will respond to a Washington or Nevada appeal in writing within 45 days. If an appeal is denied, Genova will explain the decision and provide the applicable Attorney General complaint method or contact information.

Material changes

If Genova makes a material change, it will notify affected users before the change takes effect when required by law. Depending on the change and available contact details, notice may be provided in the app, by email, or by another clear and conspicuous method. Genova will disclose any additional health-data categories, recipients, or purposes and obtain any fresh consent required by law before the changed collection, use, or sharing begins.

Genova uses technical and organizational safeguards designed to protect health and fitness information. These include limiting the information sent off-device, account and authorization controls, transport encryption, access restrictions, and controls intended to keep disallowed health categories out of AI and diagnostic payloads.

No system is perfectly secure. If Genova discovers unauthorized access, acquisition, or disclosure, it will investigate and provide notices required by applicable law.

Genova is intended for users aged 16 or older. Where Apple requires age assurance, the app asks Apple to share an age range. Genova does not receive an exact birth date from Apple's age-assurance process and stores only a device-local access result. The general Privacy Policy explains these rules in more detail.

Genova may update this notice when its features, data practices, or legal obligations change. The effective date appears at the top of this notice. Genova will provide additional notice or ask for new consent when required.

For questions, privacy requests, or appeals, email support@genovasport.app.