Lift Steady Consumer Health Data Privacy Notice

Effective date: October 30, 2026

Applies to: residents of Washington (My Health My Data Act), Nevada (SB 370), and Connecticut (consumer health data provisions of the CTDPA).

Who we are: Foxion Inc — support@liftsteady.com

This notice adds to our Privacy Policy. It covers "consumer health data," meaning information that could reveal something about your physical health.

Health data we collect

• Injuries, joints, and limitations you tell us about during setup or in Settings.
• GLP-1 dose day, if you turn on that feature (we don't ask for the drug name or dose), plus protein targets and reminder settings.
• Heart rate you choose to enter for a cardio workout.
• Apple Health data, only with your permission: we read body weight and steps, and we save your Lift Steady workouts to Apple Health.
• Body weight and sex you enter in your profile, and workout results that may suggest your fitness level.

Where it comes from

From you, from the app as you train, and from Apple Health if you allow it.

Why we use it

Only to provide the features you ask for: building and adjusting your plan around your joints and limitations, timing reminders around your dose day, tracking progress, and keeping your account working. We do not use it for advertising, sell it, or send it to our analytics or crash-reporting tools.

Who we share it with

Only Supabase, the service provider that stores it for us under contract. Apple Health data stays under Apple's protections, and we write to Apple Health only when you allow it. We do not share health data with advertisers, data brokers, or any other third party, and we do not sell it. We may disclose it if the law requires.

Your consent

We collect and use health data only with your consent, for example when you enter an injury or turn on Apple Health or the dose-day feature. You can withdraw consent at any time: remove the information, turn the feature off (Settings > Joints or Settings > Apple Health), or delete your account.

Your rights

Depending on your state, you can:

• find out whether we collect, use, or share your health data, and get a copy;
• get a list of everyone we have shared it with (only the provider named above);
• withdraw your consent;
• have your health data deleted, including copies held by our service provider (backups are cleared within 30 days); and
• appeal if we deny your request.

We will not treat you differently for using these rights.

How to use your rights

Email support@liftsteady.com with the subject "Health data request," or delete your account in Settings > Delete account. We will confirm your identity, usually through the email on your account, and respond within 45 days. If we need more time, we can extend that once by 45 days and will tell you. To appeal, reply to our response with "Appeal." If we deny your appeal, you can contact your state's Attorney General.

Retention

We keep health data while your account is open, and delete it when you delete the information or your account.