Health data consent.
Weight Commit is a health-tracking application. To function, the service must collect and process the health information you choose to enter, including body weight, medication name and dose, injection time and site, reported side effects, bloodwork results, sleep duration and quality, food and macro logs, supplement logs, and workout details. We treat this information as sensitive personal data under California, Washington, and other applicable state privacy laws.
PURPOSE. We use your health data only to operate the service for your personal use: visualizing your data, calculating macros, computing trends, and showing patterns. We never make medical recommendations, never substitute for a healthcare provider, and never share your health data for advertising or any commercial purpose.
LIMITED USE. We do not infer characteristics about you from your health data, do not use it to build a profile of you, and do not retain it for any purpose other than operating the service. This satisfies the California "right to limit use of sensitive personal information" by default.
RETENTION. Your health data is retained while your account is active. After account closure, all your health data is permanently deleted within 30 days.
NO SALE, NO SHARING, NO ADVERTISING, NO BROKERS, NO AI TRAINING. We will never sell your health data, share it with data brokers, share it for cross-context behavioral advertising, use it for advertising, or use it to train artificial intelligence or machine learning models. We honor the Global Privacy Control browser signal at signup as a standing opt-out of any future sale or sharing.
SECURITY. All data is stored privately on a per-account basis. Only your authenticated session can read your data. Encryption at rest and in transit is enforced.
WASHINGTON RESIDENTS (My Health My Data Act). A separate Consumer Health Data Privacy Policy is published at the chd-policy page in the legal section and describes how Washington residents can exercise their additional rights.
PROCESSORS. The current list of every service provider that handles any portion of your data is published on the Processors page in the legal section.
REVOCATION. You may revoke this consent at any time from Settings then Privacy. Because the service cannot operate without this data, revocation triggers full account deletion within 30 days, after which all your data is permanently purged.