Why this page exists
Washington’s My Health My Data Act (MHMDA) requires services that handle “consumer health data” to publish a standalone notice covering exactly that category. Several signals you bring into Summit Line meet that definition. This page covers them. The rest of our practices live in the main Privacy Policy.
What we treat as consumer health data
- Resting and maximum heart rate from your profile.
- Per-second heart rate streams pulled from your connected watch account’s activities.
- GPS coordinates from synced runs.
- Weight, sex, and birth year as entered in your profile.
- Training-load derivatives: TRIMP, CTL, ATL, TSB, vertical load. These are inferences computed on top of the raw inputs above.
- Free-text training notes you write, these may reference symptoms, injury, illness, or sleep, so we treat them as health-adjacent.
What we use it for
- Drawing your training-load and progression charts.
- Projecting goal-race finish times against your fitness curve.
- Generating AI coaching summaries when you ask the coach to read your training.
We do not use your consumer health data for advertising, lead generation, profiling for marketing, or any purpose outside the running of Summit Line.
Who we share it with
- Your connected watch account: the source. Data flows from your watch provider to ours under your OAuth grant. Your provider may itself aggregate data you recorded on your own GPS watch or device.
- Supabase: stores it in our Postgres database with row-level security and at-rest encryption.
- Anthropic: receives activity names, your notes, and metric summaries when you ask for an AI coaching summary. Anthropic’s commercial API terms state this content is not used to train their models.
- Vercel: hosts the application and runs the request infrastructure.
- Resend: sends operator-only digest email. Consumer health data is not included in those digests.
- Stripe: our payment processor for subscription billing. Stripe receives your payment card details and billing metadata, not your consumer health data.
Sale and behavioral advertising
We do not sell consumer health data. We do not share consumer health data for cross-context behavioral advertising. We do not run advertising of any kind.
Your rights
- Access the consumer health data we hold about you.
- Portability: export it in a machine-readable format.
- Deletion: delete it or your whole account.
- Withdraw consent at any time. Withdrawing consent ends collection going forward.
How to revoke consent
The fastest path is Settings → Account → Delete my account. That cascades the delete across our database, revokes your connected watch account’s grant, and purges every consumer health data record tied to your user ID.
For requests you cannot serve yourself, targeted access, partial deletion, or correction, email privacy@runsummitline.com. We respond within 30 days.
Geofencing
We do not enter or use location data within 2,000 feet of any healthcare facility for advertising, marketing, or for inferring health care you may be seeking or receiving.