Consumer Health Data Privacy Policy

Last updated October 23, 2026

This Consumer Health Data Privacy Policy explains how Repatory LLC, a South Carolina limited liability company ("we," "us," and "our"), collects, uses and shares consumer health data through https://repatory.com and the Repatory iPhone app (the "Services"). It is written to meet the Washington My Health My Data Act and Nevada Senate Bill 370, and it applies to everyone who uses Repatory, wherever you live. Our Privacy Policy covers all other personal information.

"Consumer health data" means personal information that is linked to you and that identifies your past, present or future physical or mental health. For Repatory, that is the fitness information you enter to use the app.

1. Consumer health data we collect

We collect the following categories of consumer health data, and nothing else in this category:

Body measurements you enter: bodyweight (and your bodyweight history), height, age and gender.
Workout logs you enter: the exercises, sets, repetitions, weights, cardio sessions, durations, effort ratings and notes you record, and the dates you trained.
Recovery information you enter: recovery and mobility sessions, rest days and how recovered you say you feel.
Training goals and preferences you enter, such as what you want to achieve, how often you train and the equipment you have.
Optional life-stage information, only if you choose to provide it and tick the separate consent box in the plan builder: whether you are pregnant, had a baby within the last 12 months, or are in perimenopause or menopause.

We do not collect medical records, diagnoses, medications, biometric data, genetic data, reproductive or sexual health information beyond the optional life-stage choice above, precise location, or data from wearables or other health apps. The fitness agreement does not ask you to list medical conditions.

2. Where it comes from

All of it comes from you, typed into Repatory. We do not infer health information about you from other data, buy it, or receive it from other apps, devices, data brokers or social networks.

3. Why we collect it

To build and adjust your training plan.
To show you your workout history, progress, calendar and recovery.
To give safety guidance in the app, including the pregnancy, postpartum and menopause adjustments you asked for if you provided life-stage information.
To keep your account working, including saving a workout that was logged offline, and to respond when you ask us for support.
To fulfil a data request you make, such as an export or deletion.

We do not use consumer health data for advertising, do not sell it, do not use it to decide what to charge you, and do not use it to infer other characteristics about you. We do not send marketing emails.

4. Who it is shared with

We do not sell consumer health data and we do not share it with affiliates, advertisers or data brokers. It is processed only by the service providers that run the Services for us, under written contracts that limit them to that work:

Cloudflare, Inc. (United States): hosts the Services and stores our database and backups. All consumer health data is stored with Cloudflare.
Clerk, Inc. (United States): runs sign-in and holds your account identity (name, email address, username). Clerk does not receive your health data; it is listed because your health data is linked to the account Clerk identifies.

No one else receives it. Stripe, Apple and RevenueCat handle payments and subscription status and are not given health data. If you choose to use the optional friends feature and turn on sharing, the friends you accept can see the recent sessions or routines you choose to share; you control that in Privacy preferences and can turn it off at any time. We would disclose consumer health data to a court or law-enforcement body only if legally required and, where permitted, we would tell you first.

5. Your rights and how to use them

Whether or not your state's law gives you these rights, you can:

See and export all consumer health data we hold about you (Data requests page, "Download my data").
Correct it, by editing the workout, measurement or plan setting in the app.
Delete it, by deleting individual entries in the app or by deleting your whole account (Data requests page, "Delete my account"). Deleting your account removes your health data from our active database immediately and from our database provider's backups within 30 days. We keep only a record of your account ID and the deletion time for 30 days to confirm the deletion, and the fitness-agreement acceptance records described in section 16 of the Privacy Policy, which contain no health data.
Withdraw consent to optional life-stage information, by removing it in your plan settings; rebuilding your plan also removes related notes from future planned workouts.
Ask for the list of third parties with whom we have shared your consumer health data (section 4 above is that list; we will confirm it in writing on request).

To exercise any of these rights, go to https://repatory.com/data-requests or email repatorysupport@gmail.com from the address on your account. We will respond within 45 days, and we will not treat you differently for making a request. If we decline a request, we will tell you why and you can appeal by replying to our answer; if you are still not satisfied, you may contact your state attorney general (in Washington, https://www.atg.wa.gov; in Nevada, https://ag.nv.gov).

6. Security

Consumer health data is stored in the United States, encrypted in transit and at rest by our hosting provider, and reachable only by your signed-in account and by us when needed to support you or keep the Services running. Our Privacy Policy has more on how we protect information.

7. Changes to this policy

If we change how we collect, use or share consumer health data, we will update this policy, change the date at the top, and, where the law requires it, ask for your consent before the new practice applies to your data.

8. Contact

Questions about this policy: repatorysupport@gmail.com, phone 8649526521, or by mail:

Repatory LLC 203 Silver Creek Rd Greer, SC 29650 United States

1. Consumer health data we collect

We collect the following categories of consumer health data, and nothing else in this category:

Body measurements you enter: bodyweight (and your bodyweight history), height, age and gender.

Workout logs you enter: the exercises, sets, repetitions, weights, cardio sessions, durations, effort ratings and notes you record, and the dates you trained.

Recovery information you enter: recovery and mobility sessions, rest days and how recovered you say you feel.

Training goals and preferences you enter, such as what you want to achieve, how often you train and the equipment you have.

Optional life-stage information, only if you choose to provide it and tick the separate consent box in the plan builder: whether you are pregnant, had a baby within the last 12 months, or are in perimenopause or menopause.

3. Why we collect it

To build and adjust your training plan.

To show you your workout history, progress, calendar and recovery.

To give safety guidance in the app, including the pregnancy, postpartum and menopause adjustments you asked for if you provided life-stage information.

To keep your account working, including saving a workout that was logged offline, and to respond when you ask us for support.

To fulfil a data request you make, such as an export or deletion.

4. Who it is shared with

Cloudflare, Inc. (United States): hosts the Services and stores our database and backups. All consumer health data is stored with Cloudflare.

Clerk, Inc. (United States): runs sign-in and holds your account identity (name, email address, username). Clerk does not receive your health data; it is listed because your health data is linked to the account Clerk identifies.

5. Your rights and how to use them

Whether or not your state's law gives you these rights, you can:

See and export all consumer health data we hold about you (Data requests page, "Download my data").

Correct it, by editing the workout, measurement or plan setting in the app.

Delete it, by deleting individual entries in the app or by deleting your whole account (Data requests page, "Delete my account"). Deleting your account removes your health data from our active database immediately and from our database provider's backups within 30 days. We keep only a record of your account ID and the deletion time for 30 days to confirm the deletion, and the fitness-agreement acceptance records described in section 16 of the Privacy Policy, which contain no health data.

Withdraw consent to optional life-stage information, by removing it in your plan settings; rebuilding your plan also removes related notes from future planned workouts.

Ask for the list of third parties with whom we have shared your consumer health data (section 4 above is that list; we will confirm it in writing on request).