Consumer Health Data Privacy Policy

Effective Date: September 14, 2026

1. Introduction

Fitness Connected is a product of Zungl LLC. In this Consumer Health Data Privacy Policy, “Fitness Connected,” “FC,” “we,” “us,” or “our” refer to Zungl LLC in connection with Fitness Connected.

This policy explains how Fitness Connected collects, uses, processes, stores, shares, and deletes consumer health data.

“Consumer health data” means personal information that identifies or may reasonably be linked to you and relates to your physical health, fitness, activity, sleep, or other health status.

This policy supplements the Fitness Connected Privacy Policy. If there is a conflict concerning consumer health data, this policy controls for that data.

2. Consumer Health Data We Collect

Depending on the permissions you grant and the features you use, Fitness Connected may collect and process the following categories of consumer health data.

The activity, heart, and sleep information described below comes from Apple Health or Health Connect, depending on your device, permissions, and available source data. Fitness Connected stores daily totals used by the Service. It is not designed to keep a warehouse of raw health samples, store a continuous clinical record, or provide medical diagnosis or treatment.

Activity and Fitness Information

This may include:

• Steps
• Distance
• Active calories
• Total calories
• Active or exercise minutes
• Workout and activity counts

Heart Information

This may include:

• Resting heart rate
• Heart rate variability
• Transient heart-rate information used to calculate resting heart rate or related metrics

Sleep Information

This may include sleep duration.

Profile Information You Enter

This may include:

• Date of birth
• Sex
• Height
• Weight

You enter this information directly in Fitness Connected. Fitness Connected does not currently import your height, weight, or basal metabolic rate from Apple Health or Health Connect.

Information Fitness Connected Derives

Fitness Connected may organize, calculate, or derive additional consumer health data from the information described above, including:

• Daily health and activity totals
• Basal metabolic rate calculated from the profile information you enter
• Calorie calculations
• Trends and progress information
• Insights and summaries
• Comparisons, rankings, standings, and leaderboards
• Group averages and other group-related health summaries

Stored basal metabolic rate is a calculated value. It is not information you type in as basal metabolic rate, and it is not currently imported from Apple Health or Health Connect.

3. Sources of Consumer Health Data

Fitness Connected obtains consumer health data from:

• Apple Health and HealthKit on supported Apple devices, after you grant permission
• Health Connect on supported Android devices, after you grant permission
• Information you enter directly in Fitness Connected
• Calculations and other information Fitness Connected derives from authorized or manually entered information

A wearable device or companion app may contribute information to Apple Health or Health Connect. Fitness Connected does not treat those devices or companion apps as direct integrations unless we expressly identify them as supported integrations.

Apple Health and Health Connect are source platforms. They are not Fitness Connected service providers.

4. How We Use and Process Consumer Health Data

Fitness Connected may collect, store, organize, aggregate, normalize, calculate, analyze, compare, and display consumer health data to:

• Synchronize supported health and fitness information
• Provide daily metrics, trends, progress, and insights
• Calculate calorie-related information
• Create comparisons, rankings, standings, and leaderboards
• Support profile and group health-sharing features
• Operate, secure, maintain, troubleshoot, and support Fitness Connected
• Respond to your requests and comply with applicable law

Fitness Connected does not use consumer health data for advertising, targeted advertising, or cross-company tracking.

Fitness Connected does not provide medical advice, diagnosis, or treatment.

5. How Consumer Health Data Is Shared

Fitness Connected is a connected fitness service. After separately allowing Fitness Connected to process your health data, you choose an audience for supported profile health information.

No profile audience is selected for you.

Profile Visibility

You may choose:

• Mutual Connections: Supported profile health information is visible only to people with whom you have a mutual Fitness Connected connection.
• Everyone on Fitness Connected: Supported profile health information may be visible to other Fitness Connected users.

A connection by itself does not grant access to health information. Visibility depends on the audience selected by the person whose information is being viewed.

Groups

Groups have a separate sharing relationship from Profile Visibility.

When you create or join a group, Fitness Connected explains that supported activity, sleep, heart-rate, and workout information may be used in group standings, leaderboards, comparisons, and summaries. Group members do not need to be mutually connected.

Your group choice does not change your ordinary Profile Visibility setting.

Your supported group health information remains available to the group while you are an active member. When your membership ends, whether you leave the group or are removed, your health information no longer appears or contributes to that group’s member details, comparisons, standings, leaderboards, or aggregates.

Copies Outside Fitness Connected

People who can view your shared health information may save or redistribute it outside Fitness Connected. Changing your sharing choices, withdrawing consent, or deleting your data or account does not automatically erase those external copies. Fitness Connected cannot remotely erase copies independently saved or shared by other users. This does not change our obligations under applicable law to delete information we control or notify applicable recipients of a deletion request.

Acknowledging this risk does not expand the permissions you give Fitness Connected or authorize misuse of another person's health information.

Service Providers

Fitness Connected may provide consumer health data to service providers that process information on our behalf, such as providers of:

• Cloud hosting and infrastructure
• Database and data storage
• Authentication
• Server-side processing
• Security and operational support

These providers may process consumer health data only as needed to perform services for Fitness Connected and subject to applicable contractual restrictions. Fitness Connected does not provide consumer health data to every vendor it uses.

Our product analytics, crash-reporting, transactional email, image-moderation, website-hosting, and payment providers are not intended to receive Fitness Connected health values through their ordinary integrations.

If you voluntarily include health information in a support or privacy email, the communication provider that carries that mailbox may process the information contained in your message. Please do not include health values or other sensitive details unless they are necessary for your request.

Legal Requirements and Business Transactions

We may disclose consumer health data when required or authorized by law, or when reasonably necessary to protect users, prevent fraud or abuse, respond to security incidents, or protect legal rights.

Consumer health data may also be transferred as part of a merger, acquisition, restructuring, bankruptcy, asset sale, or similar business transaction. Any recipient remains subject to applicable legal obligations concerning the data.

Affiliates

Fitness Connected does not currently share consumer health data with a separate Zungl affiliate.

No Sale

Fitness Connected does not sell consumer health data.

Fitness Connected does not permit a third party to collect consumer health data over time and across unrelated websites or online services when you use Fitness Connected.

6. Your Consent and Choices

Fitness Connected requires a separate affirmative decision before it begins processing your health data.

This decision is separate from:

• Agreeing to the Terms of Service
• Acknowledging the general Privacy Policy
• Choosing your profile-sharing audience
• Creating or joining a group, or granting group sharing
• Granting Apple Health or Health Connect permissions

Apple Health and Health Connect permissions control what Fitness Connected can read from those platforms. Changing or revoking an operating-system permission may stop future imports, but it does not by itself record Fitness Connected withdrawal or remove health data already stored by Fitness Connected.

7. Withdrawing Consent

You may withdraw your permission for Fitness Connected to process and share your consumer health data through the available Settings controls.

When you complete that withdrawal:

• Fitness Connected records the withdrawal
• Fitness Connected stops later imports and processing of your consumer health data
• Fitness Connected removes your live health metrics, profile biometric data, and related health-dependent information from the Service
• Your health information is no longer used in profile, group, or similar shared views
• Your ordinary health-dependent Fitness Connected features become unavailable
• Your account, connections, group ownership, and group memberships remain
• You retain access to the limited account, legal, support, reactivation, and account-deletion options made available while health features are inactive

We act on a withdrawal as soon as practicable and within the period required by applicable law.

Withdrawing consent is different from asking Fitness Connected to delete particular health data while your processing permission remains in place. That scoped deletion is described in Section 12.

To use Fitness Connected’s health-dependent features again, you must provide fresh processing consent, make a new Mutual Connections or Everyone on Fitness Connected audience choice, and, if you remain an active member of any groups, provide a new group-sharing permission for those current memberships, plus any required Apple Health or Health Connect permissions. Prior processing, audience, or group-sharing permissions are not restored automatically.

The limits concerning copies independently saved or shared by other users are explained in Section 5.

Withdrawing consent does not delete information from Apple Health, Health Connect, or an upstream wearable service. Fitness Connected does not control the information stored by those services.

8. Your Consumer Health Data Rights

Depending on where you live and subject to applicable law, you may have the right to:

• Confirm whether Fitness Connected is collecting, processing, sharing, or selling consumer health data about you
• Access consumer health data associated with your account
• Request a list of third parties or affiliates with whom your consumer health data has been shared
• Correct inaccurate information
• Obtain a portable copy of eligible information where required and technically feasible
• Withdraw consent and ask Fitness Connected to stop collecting or sharing consumer health data
• Request deletion of some or all consumer health data associated with you
• Appeal a refusal to act on a request

Fitness Connected does not sell consumer health data, so there is no consumer health data sale to opt out of.

If you request a list of third parties or affiliates with whom your consumer health data has been shared, we will prepare a request-specific response based on the sharing that actually occurred for your account. The service-provider categories in this policy are a general description. They do not, by themselves, satisfy that request-specific list.

9. How to Exercise Your Rights

You may exercise available rights through Fitness Connected’s in-app Settings where the applicable option is available, or by emailing:

fitnessconnected@zungl.com

Please describe the right you wish to exercise and the consumer health data involved. If you are appealing a decision, use the subject line “Consumer Health Data Appeal” and identify the request or decision being appealed.

We use secure and reliable methods appropriate to the request. We may ask you to contact us through the email address associated with your Fitness Connected account or provide additional information reasonably necessary to verify your identity and request.

We will never ask for your password, account credentials, or health values to verify your identity.

You are not required to create a new account to exercise your rights. We may require you to use an existing account when reasonably necessary to authenticate your request.

We generally provide responses without charge as required by applicable law. Manifestly unfounded, excessive, or repetitive requests may be handled as permitted by law.

10. Response and Appeal Timing

Fitness Connected responds to verified consumer health requests without undue delay and within the time required by applicable law.

Generally:

• We respond to eligible consumer health data requests within 45 days, measured from receipt or authentication as applicable
• For Washington requests, the 45-day response period starts when we receive your request; identity verification does not extend that period
• We may extend the response period once by up to 45 additional days when legally permitted and reasonably necessary
• We will notify you of an extension and explain the reason
• We complete applicable Nevada live-data deletion requests within 30 days after authentication
• We respond to eligible appeals within 45 days

If we deny an appeal, our response will explain the decision and provide information about contacting the appropriate state attorney general where required.

11. Correction and Portable Copies

You may correct profile information that you entered directly, including date of birth, sex, height, and weight, through available Fitness Connected settings. Stored basal metabolic rate is then recalculated from those inputs.

Information originating in Apple Health or Health Connect should generally be corrected in the source platform. Fitness Connected can then use the corrected information when it next synchronizes.

You may request access to or a copy of eligible information by emailing us. Fitness Connected does not currently offer an automatic downloadable health-history export. After verifying your request, we will provide information in a portable and readily usable format where required, applicable, and technically feasible.

12. Deletion

You may request deletion of particular consumer health data or all consumer health data associated with you without deleting your entire Fitness Connected account. You may also delete your Fitness Connected account through the app or request support-assisted account deletion.

Complete withdrawal, described in Section 7, records withdrawal, stops later Fitness Connected processing, and removes live Fitness Connected health data. A request to delete particular health data while your processing permission remains in place is different. In that case, we work with you to identify the covered data, delete it from our live systems, and recalculate or remove related information as reasonably necessary so the deleted health data is no longer represented through related metrics, comparisons, or summaries. If you remain opted in and the source platform still contains the information, some data may be imported again later. We do not promise a permanent mechanism that prevents later import.

When an authenticated deletion request applies, Fitness Connected deletes the covered consumer health data from its live systems. Live deletion is separate from any contractual instruction to a service provider and from any additional notice that applicable law may require. Fitness Connected notifies applicable processors or other recipients as required by law.

Fitness Connected’s database backups and related operational logs generally age out within about seven days. Deletion from a backup may be delayed until that backup expires or is restored, as permitted by law. Fitness Connected does not rewrite backups immediately when live data is deleted. If a backup is restored, applicable deletion controls must be reapplied before the restored data is returned to ordinary use.

Deleting Fitness Connected data does not delete source information from Apple Health, Health Connect, a wearable provider, or another service that Fitness Connected does not control. Fitness Connected cannot directly erase independently controlled copies in a correspondent’s mailbox or directly rewrite a communication provider’s backups. These practical limits do not remove applicable deletion or recipient-notification obligations. Section 5 explains the limits concerning copies independently saved or shared by other users.

Fitness Connected may retain limited records of consent, withdrawal, requests, responses, or other compliance actions when reasonably necessary to demonstrate compliance, resolve disputes, protect legal rights, or meet applicable legal obligations. These limited records are not used to continue Fitness Connected’s ordinary health features.

Additional account-deletion information is available on the Fitness Connected Account Deletion page.

13. Security

Fitness Connected uses administrative, technical, and organizational safeguards designed to protect consumer health data.

Access to consumer health data is limited to authorized personnel and service providers who need the information for a permitted purpose.

No storage, processing, or transmission method can be guaranteed to be completely secure.

14. Changes to This Policy

We may update this policy as Fitness Connected, applicable law, or our data practices change.

The effective date at the top identifies the current version.

We may provide notice of material changes through Fitness Connected, by email, on our website, or through another legally permitted method.

Before collecting, using, or sharing additional categories of consumer health data, using consumer health data for materially different purposes, or sharing it with additional categories of recipients, Fitness Connected will provide additional disclosure and obtain affirmative consent where required by law.

Where affirmative consent is required, continued use of Fitness Connected by itself is not consent.

15. Contact Us

For questions, consumer health data requests, deletion requests, or appeals, contact:

fitnessconnected@zungl.com

Fitness Connected
A product of Zungl LLC