Washington State · Consumer rights

Consumer Health Data Privacy Policy

Last updated: July 2026

This policy is for residents of Washington State and addresses the My Health My Data Act (MHMD). It supplements our general Privacy Policy and applies to the limited categories of data that may qualify as "consumer health data". COMOVO is operated by Rincon sp. z o.o. (see Section 10). If anything conflicts, the more protective term applies.

1. What We Mean by Consumer Health Data

Under MHMD, "consumer health data" is personal information that identifies your past, present, or future physical or mental health status. In COMOVO, this is limited to:

your exercise and fitness activity — workouts you record (such as type of activity, duration, distance, pace, and similar), events you join, and derived progress data (fitness goals you set, workout streaks, badges you earn);
precise location collected during a workout (GPS routes), to the extent it indicates an attempt to acquire or receive health services or supplies (e.g. exercise);
optional body measurements you choose to enter (weight, height).

We do not collect medical records, diagnoses, medications, biometric identifiers, heart rate or other sensor health data, or reproductive or sexual-health information.

2. Sources of This Data

We collect consumer health data directly from you: from the information you enter and from your device's location sensor while you run a workout in the app. We do not buy consumer health data from third parties or data brokers.

3. How We Use It

We use this data only to provide the features you ask for:

to record, display, and let you review your workouts and routes;
to show activity to the people you choose (public, friends, or private, per your visibility settings);
to power nearby discovery and events you opt into;
to keep the service secure and working.

We do not use consumer health data for advertising, profiling, or any purpose beyond providing the service you requested.

4. Consent

We collect consumer health data only with your consent:

Recording a workout, entering body measurements, and creating or joining events are actions you choose to take.
Precise location requires you to grant location permission on your device, which you can withdraw at any time in your device settings.
We do not collect consumer health data beyond what is necessary to provide the feature you are using, and we do not share it (see Section 5).

5. Sharing

We do not sell your consumer health data, and we do not share it for advertising. We share it only:

with people you choose — for example, when you make a workout public or share it with friends;
with service providers who host the app on our behalf (our hosting provider, Supabase, which stores data in the European Union), bound by contract to process it only for us;
if required by law.

We do not share consumer health data with any third party for that party's own purposes. We would never sell consumer health data without the valid authorization MHMD requires — and we do not sell it.

6. Privacy Zones and Visibility Controls

You can hide chosen areas (such as around your home) from shared routes using privacy zones, and you control who sees each workout with visibility settings. These tools let you limit what location and activity data is ever shared.

7. Your Rights

As a Washington resident, you have the right to:

Confirm and access the consumer health data we hold — you can view it in the app, and you can request a copy;
Withdraw consent — turn off location permission, set workouts to private, or stop recording at any time;
Delete your consumer health data — delete individual workouts in the app, or delete your entire account, which erases your personal content immediately (see our Privacy Policy, "Storage, Retention and Deletion");
A list of third parties with which we share consumer health data — currently only our hosting provider, as described above.

To exercise any of these rights, use the controls in the app or contact us at hello@comovo.eu. We will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response, and you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

8. Retention

We keep consumer health data while your account is active and you keep the related workouts. When you delete a workout or your account, the data is erased as described in our Privacy Policy. Encrypted backups roll over on a short cycle (about 7 days).

9. Changes

We will post any changes to this policy here with an updated date.

10. Contact

COMOVO is operated by:
Rincon sp. z o.o.
ul. Spacerowa 9, 10-687 Klewki, Poland
NIP 7394035448 · KRS 0001242776 · REGON 544828315

Questions about consumer health data:
hello@comovo.eu