Consumer Health Data Privacy Notice

With your affirmative device permission, FitPerk reads daily step totals and recent workout records. On Apple devices, the requested read types are Apple Health Step Count (HKQuantityTypeIdentifierStepCount) and Workout (HKWorkoutTypeIdentifier). From a workout, FitPerk uses its source record identifier, duration, and end timestamp. On Android devices, the requested Health Connect record types are Steps and Exercise Session; FitPerk uses step counts and each session's source record identifier, start and end times, and calculated duration. FitPerk requests no health-data write access.

FitPerk creates associated verification records, FitPoints eligibility, award history, challenge progress, and fraud or duplicate-detection indicators. It does not intentionally collect active energy, calories, heart rate, routes, diagnoses, clinical records, medications, reproductive information, genetic data, or biometric identity templates. FitPerk has no direct Oura connection or Oura API access. Activity that another service writes into Apple Health or Health Connect may be included only when the operating system returns it as one of the requested step or workout record types.

• You and your activity in the FitPerk service.
• Apple Health or Health Connect after you choose to grant access.
• Calculations performed by FitPerk to award points and detect duplicates or abuse.

FitPerk does not retain complete copies of the underlying platform records. Its normalized activity table stores the account identifier, whether the record represents steps or a workout, workout minutes or a daily step total as applicable, a source record identifier, verification time, and creation time. The points ledger separately stores the resulting earning or spending entry, source reference, points, label, and timestamps. These records remain while the account is active and are handled under the retention and deletion terms in the Privacy Policy.

• Verify eligible movement and calculate, award, and display FitPoints.
• Display workout, step-goal, challenge, and synchronization status.
• Prevent duplicate awards, automated claims, manipulation, and redemption abuse.
• Diagnose synchronization failures, secure the service, and provide support.
• Comply with law and establish, exercise, or defend legal claims.

Consumer health data is stored by FitPerk's contracted infrastructure provider, Supabase, and may be processed by personnel or technical providers strictly as needed to operate, secure, support, or investigate the service. Apple and Google process the underlying data under their own terms when operating Apple Health, Health Connect, authentication, and mobile-platform services.

FitPerk does not disclose individual health records, step totals, workout history, or health-derived earning history to participating merchants. A merchant receives only the reward and redemption information needed to validate the offer. We may disclose information to authorities or advisers when legally required or necessary to protect rights and safety.

FitPerk does not sell consumer health data and does not use it for targeted advertising, profiling for unrelated decisions, data brokerage, or eligibility decisions involving employment, insurance, credit, healthcare, housing, or education. Merchant listing fees do not give merchants access to individual health data.

Health synchronization is optional. FitPerk presents an explanation before requesting platform permission. You may decline without losing basic account access, although you cannot earn health-based FitPoints without supplying eligible activity.

• Disable automatic health synchronization in FitPerk settings.
• Revoke FitPerk's permissions in Apple Health or Health Connect.
• Request access, correction, deletion, or withdrawal of health-data consent.
• Appeal a denial by replying to the decision or contacting the privacy address below.

Revoking device permission prevents future reads but does not delete data already processed. Account deletion removes associated health records after the disclosed 30-day recovery period, subject only to legally permitted retention.

Submit a request to privacy@joinfitperk.com or use the account-deletion page. Describe the right you want to exercise. We may verify your identity and authority. We will respond within the period required by applicable law and explain any denial and appeal option. You may contact your state attorney general or other regulator if an appeal is denied.

We will not materially expand the collection, use, or disclosure of consumer health data without updating this notice and obtaining additional consent where required. Contact: privacy@joinfitperk.com.