Consumer Health Data Privacy Policy

Last updated: 10 August 2026 · Notice version: 2026-08-10.1

This policy supplements our Privacy Notice for US consumers, including people protected by Washington's My Health My Data Act. Alex Brownett, trading as The Brownett Method, controls the consumer health data described below. Contact privacy@thebrownettmethod.com.

Categories of consumer health data

The categories of consumer health data we may collect are medication, injuries, conditions, surgeries, allergies, physical activity, exercise, diet, sleep, stress, mood, recovery, goals, height, weight, body measurements, progress images, coaching notes and messages, and inferences needed to tailor coaching. We do not collect precise location data for health-service geofencing.

Sources and purposes

We collect health data directly from you through secure onboarding, check-ins, messages and uploads, and from coaching records created with you. A guardian may provide approval information for a 16- or 17-year-old. We use the data to assess suitability, tailor training and nutrition coaching, monitor progress, communicate safely, keep service records, respond to privacy requests, secure the service, and establish or defend legal claims.

Consent and requested service

Before health questions are enabled, we request a clear affirmative health-data consent describing the collection and use. We may also process health data to the extent necessary to provide coaching you requested. New categories or materially new purposes require an updated disclosure and consent where law requires it. You can withdraw consent from future collection or sharing using the methods below; personalised coaching may then have to stop.

Sharing

The categories of consumer health data shared are limited to the records necessary for secure hosting, storage, support and delivery. Categories of recipients are authorised coaches or administrators; Cloudflare as hosting, database and security processor; browser push providers if you enable push; and professional advisers, insurers or authorities where necessary or legally required. Public form health answers are not sent through Web3Forms. Stripe receives payment data, not coaching-health answers. Calendly receives only information you choose to give Calendly after opening its external site.

We have no affiliates with whom we share consumer health data. We do not sell consumer health data. We do not use it for targeted advertising or geofencing.

Your rights

You may ask whether we collect, share or sell your health data; access the data and relevant recipient information; withdraw consent; correct data; or request deletion. Logged-in clients can download their data or submit an objection, correction or deletion request under Account → Privacy. You may also email privacy@thebrownettmethod.com. We authenticate requests and respond within the period required by applicable law.

When a valid request requires deletion, we also notify relevant processors and other recipients. Data in archived or backup systems may be deleted on the lawful delayed schedule. Some information may be retained where an exemption applies. If we refuse a request, our response will explain the reason and available appeal route. To appeal, reply to the decision or email the privacy address with “Appeal” in the subject.

Security and changes

We restrict access, use encrypted transport, hashed access tokens, rate limits, audit records and contractual processor controls. We will publish material policy changes and obtain fresh consent before collecting a new category or using health data for a new purpose where required.