Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy explains how BioMolecular Athlete LLC (“BioMolecular,” “we,” or “us”) collects, uses, and shares consumer health data, and the rights you have over it. It is part of our Privacy Policy. It is written to meet the Washington My Health My Data Act and similar laws in Nevada, Connecticut, and other states, and we give these rights to every client, wherever they live.

“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status.

1. Health Data We Collect, and Why

• Health history, conditions, injuries, surgeries, medications, allergies, and pregnancy status: to keep you safe, decide whether you need physician clearance, and tailor your plan.
• Laboratory results (blood, urine, saliva, or stool) and biomarkers: to assess your health and performance and build and adjust your plan.
• Scans, body composition, and physical measurements: to track progress and tailor training and nutrition.
• Performance and physiological testing (for example, strength, power, metabolic, cardiovascular, and movement testing): to design training and measure change over time.
• Wearable and app data you connect (for example, sleep, heart rate, heart rate variability, and activity): to monitor recovery, sleep, and training load.
• Nutrition, supplement, sleep, and lifestyle information: to make recommendations and track adherence.
• Genetic information, if you choose a test that includes it: only for the purpose you agreed to when ordering that test.
• Photos and videos you share for movement or body composition review: to give technique and progress feedback.
• Notes, messages, and recordings of coaching sessions: to deliver coaching and keep an accurate record of your program.

We also use consumer health data in de-identified or aggregated form to improve our programs. We use identifiable data for formal research only with your separate consent.

2. Where It Comes From

From you (forms, questionnaires, messages, and sessions); from laboratories, clinicians, and testing facilities you use through our services; from wearables and apps you choose to connect; and, if a team, employer, or organization enrolled you, from that organization as you agreed.

3. Your Consent

We collect consumer health data only with your consent or as necessary to provide a service you asked for. We ask for separate consent before sharing it with anyone other than our service providers, except as necessary to provide a service you asked for. You may withdraw consent at any time (see Section 6); doing so may limit the services we can provide. We never sell consumer health data, and we do not use geofencing around any place where health services are provided.

4. Who We Share It With

We share consumer health data only with:

(a) Service providers that help us deliver our services, under contracts that limit their use of the data to serving us: cloud hosting, email, and file storage; our coaching, messaging, and client-record platforms; laboratories and testing facilities; scheduling and video-conferencing tools; payment processing (billing information only); and approved transcription and artificial intelligence tools whose terms prohibit training on your data.

(b) Our affiliated companies (such as Absolute Rest and Vitality Blueprint), only when you ask us to or give your consent, for example when your program includes their sleep or biomarker services.

(c) People and organizations you choose, such as your physician or another provider, or a team or employer that enrolled you, only as you direct or agree.

(d) As required by law, or to protect someone’s life or safety.

5. How We Protect It

Access to consumer health data is limited to team members who need it to serve you, all of whom are bound by confidentiality obligations. We use encryption in transit, multi-factor authentication, and secure company systems, and we do not allow client health data on personal accounts or unapproved tools.

6. Your Rights

You have the right to:

(a) Confirm and access: know whether we collect, share, or sell your consumer health data (we do not sell it), get a copy of it, and get a list of all third parties and affiliates with whom we have shared it, with their contact information.

(b) Withdraw consent to our collection or sharing of your consumer health data.

(c) Delete your consumer health data. We will delete it from our systems and instruct our service providers and affiliates to delete it. Copies in backup systems are deleted within six (6) months.

(d) Not be treated differently for exercising these rights.

How to make a request: email support@biomolecularathlete.com with the subject line “Health Data Request.” We will verify your identity using information we already have and respond within 45 days. If we need more time, we will tell you, and we may extend by up to 45 more days. Requests are free up to twice a year.

Appeals: if we decline your request, you may appeal by replying to our decision. We will respond to your appeal in writing within 45 days, explaining what we did and why. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint, or your own state’s attorney general.

7. Changes and Contact

We will post any changes to this policy with a new effective date, and we will ask for your consent before using consumer health data in a materially different way. Questions: BioMolecular Athlete LLC, support@biomolecularathlete.com.