Consumer Health Data Privacy Policy

Last Updated: August 20, 2026

This Consumer Health Data Privacy Policy applies to Rate My Physique, an app and related web services (the "Service") operated by MagFit Inc. ("MagFit," "we," "us," or "our"). It is issued to comply with Washington's My Health My Data Act (RCW 19.373), Nevada's Consumer Health Data Privacy Law (NRS 603A), Connecticut's Public Act 23-16, and similar state consumer health data laws.

This policy stands on its own and covers only consumer health data as defined under these laws. It does not contain marketing content and is not a substitute for our general Privacy Policy, which covers our broader data practices and is available here. Where this policy and the general Privacy Policy address the same data, this policy controls for consumer health data.

This policy applies to Washington residents, Nevada residents, Connecticut residents, and any other consumer whose consumer health data is collected while they are in a state that extends these protections, regardless of where the user is a legal resident.

1. What Consumer Health Data We Collect

"Consumer health data" means personal information that identifies, or that we or a third party could reasonably use to infer, a consumer's past, present, or future physical or mental health status. Based on how the Service works, we collect the following categories:

  • Body and physique photos: Photos you upload for scoring, tracking, comparison, or AI image generation ("Future You" feature).
  • AI-generated physique and health inferences: Derived from those photos, including ratings across overall appearance, potential, definition, proportion, vascularity, and conditioning, and estimated body fat percentage ranges.
  • Body metrics: Height, current weight, and goal target weight you provide directly.
  • Fitness and wellness activity data: Daily checklist/habit completions, streaks, and progress logged in the app.
  • Inferred fitness and body-composition trends: Derived from your ratings, metrics, and photos over time (e.g., progress and growth trend data).
  • Location information: We may collect general location information, such as country or timezone offset, through device or IP information for ordinary app functionality. We do not currently use precise or approximate location information to identify, infer, or facilitate an attempt to seek health-related services or products. Accordingly, ordinary country, timezone, and similar device-derived location information is not collected or used by us as consumer health data for a health-related purpose.

We do not knowingly collect genetic testing data, reproductive or sexual health information, or information about diagnoses, treatment, or medications, and the Service is not intended to provide medical advice or diagnosis.

2. Why We Collect and Use This Data

We collect and process consumer health data to:

  • Generate the AI physique ratings, body fat estimates, and "Future You" images you request.
  • Track and display your progress, streaks, badges, and trends over time.
  • Personalize your in-app experience (e.g., customized checklist habits, comparison tools).
  • Provide customer support related to your account and data.
  • Maintain, secure, and improve the Service, including detecting and preventing fraud or misuse.
  • Comply with legal obligations.

We do not use consumer health data for advertising targeted to you based on your health data, and we do not use geofencing around health care facilities.

3. Sources of Consumer Health Data

We obtain consumer health data from:

  • You, directly: Photos you upload, height/weight/ goal metrics you enter, and habits you complete or customize.
  • Automatically, through your use of the Service: Ratings, trends, and inferences our systems generate from the data above.

We do not purchase consumer health data from data brokers or other third parties.

4. Categories of Consumer Health Data We Share, and With Whom

We share the following categories of consumer health data, only as necessary to provide the Service:

  • Physique/body photos and derived metrics: Shared with AI service providers (OpenAI, Anthropic, and Replicate) to generate physique ratings, body fat estimates, and AI-generated images.
  • Account and app data, including body metrics and activity data: Shared with our cloud infrastructure provider (Google Firebase — Firestore, Cloud Functions, Storage, Auth) for hosting, storage, and backend processing.
  • Subscription status (not health data itself, but tied to your account): Shared with RevenueCat and Stripe to manage subscriptions and payments.

We do not sell consumer health data, as "sell" is defined under applicable law, to any third party. We do not share consumer health data with data brokers or for cross-context behavioral advertising.

Service providers that receive consumer health data from us are authorized to process that data only as necessary to provide the services they perform for us, subject to applicable contractual and legal requirements.

5. Your Rights

Depending on your state of residence, you have the right to:

  • Confirm and access whether we are collecting, sharing, or selling your consumer health data, and to obtain a list of third parties and affiliates it has been shared with.
  • Delete your consumer health data, including instructing our service providers and affiliates to delete it where required by applicable law.
  • Withdraw consent for the collection or sharing of your consumer health data at any time, prospectively, subject to applicable law and any limitations permitted by law.
  • Appeal a denial of any of the above requests.

We will not discriminate against you (e.g., by denying goods or services, or charging different prices) for exercising these rights.

How to Exercise Your Rights

To withdraw consent for the collection or sharing of consumer health data, or to submit another request described in this policy, email us at info@ratemyphysiques.com. You do not need to create a new account to submit a request, though we may ask you to verify your identity using your existing account.

Requests to withdraw consent will apply prospectively and will not affect processing that occurred before the withdrawal, or processing that we are otherwise permitted or required to perform under applicable law.

We will respond to verified requests without unreasonable delay, and in any case within the timeframe required by applicable law (generally within 45 days, extendable by an additional 45 days when reasonably necessary, or within 30 days for deletion requests under some state laws).

Appeals

If we deny your request, you may appeal by replying to our denial or emailing info@ratemyphysiques.com within 30 days. We will respond to your appeal in writing within 45 days, explaining our decision. If we uphold the denial, you may contact the appropriate state regulator to submit a complaint.

6. Data Retention and Security

We retain consumer health data only for as long as reasonably necessary to provide the Service and for the purposes described in this policy, subject to applicable legal requirements.

When you delete your account, we promptly delete the consumer health data and other personal information associated with your account from our active systems. This includes your uploaded photos, AI-generated or inferred data, body metrics, fitness and wellness activity data, and other account-associated information.

After account deletion, we retain only a minimal administrative record for audit, security, and compliance purposes. This record consists of an anonymized identifier derived from the former user ID and a timestamp indicating when the account deletion occurred. We do not retain your deleted consumer health data or other account content in this administrative record, and it is not used to restore or provide access to your deleted account.

Where applicable law requires us to retain specific information for a longer period, we will retain only the information required and only for the period required by law.

We maintain administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, use, or disclosure.

7. Changes to This Policy

If we intend to collect, use, or share new categories of consumer health data, or use existing consumer health data for a new purpose not disclosed here, we will update this policy and, where required by law, obtain your affirmative consent before doing so.

8. Contact Us

For questions or concerns about your consumer health data or this policy, you can contact us at:

By using Rate My Physique, you acknowledge that you have read and understood this Consumer Health Data Privacy Policy.