Restore Your Core® Consumer Health Data Privacy Notice
Effective date: November 1, 2026
This notice explains how Exercise For All LLC, doing business as Restore Your Core® ("RYC®," "we," "us"), collects, uses, and shares consumer health data. It applies to residents of Washington and Nevada, to anyone whose consumer health data is collected in Washington, and to anyone else who wants to read it. It supplements our Privacy Policy, which covers all other personal information.
"Consumer health data" means personal information that is linked or reasonably linkable to you and identifies your past, present, or future physical or mental health. It can include information we infer, such as from a program you buy.
1. Consumer health data we collect
| Category | Examples |
|---|---|
| Health screening answers | Answers to pre-exercise screening questions, such as heart conditions, high blood pressure, chest pain, dizziness or fainting, and whether a doctor has advised only supervised activity |
| Medical conditions, medications, and care | Diagnosed or chronic conditions, medications you take, and other healthcare providers you see, such as a physical therapist or gynecologist |
| Symptoms, pain, and injury history | Core and pelvic floor symptoms, diastasis recti, joint, muscle, or tendon problems, mobility, past injuries and surgeries, and pain |
| Reproductive and sexual health | Pregnancy and birth history, postpartum status, menstrual cycle and perimenopause or menopause stage, and pelvic or sexual health symptoms. This includes what can be inferred if you buy a program such as RYC® Bump & Birth. |
| Stress and wellbeing | What you share about stress, your nervous system, and lifestyle factors that affect your health |
| Movement and body images | Assessment videos, body or posture photos you upload or send, and coaching or training session recordings |
| Information shared with a coach or teacher | Symptoms, goals, and health details you discuss in coaching sessions, assessments, or training |
| Health self-screening | Declarations you sign before Professional Training about medical conditions that may affect participation |
| Health-related program activity | Which health-focused programs you buy and use, and your progress in them |
| Health details in community posts | Anything health-related you choose to post in a member community or coaching |
2. Where it comes from
- From you: forms, uploads, sessions, messages, and posts.
- From your activity: purchases and progress in our Services.
- From our coaches and teachers: notes they make while delivering your coaching, assessment, or training.
We don't buy consumer health data from anyone, and we don't use geofencing around healthcare facilities.
3. Why we collect and use it
- To deliver the coaching, assessment, program, or training you asked for, and to tailor guidance to you.
- To keep movement as safe as possible, including pre-participation screening.
- To answer your questions and provide support.
- To meet legal obligations and protect our rights.
We collect consumer health data only with your consent, or as necessary to provide a product or service you have requested. We don't use it for advertising.
4. Who we share it with
| Category of recipient | Why |
|---|---|
| Your assigned RYC® coach, assessor, or teacher (independent contractors bound by confidentiality) | To deliver your session or program |
| Service providers that host, store, and transmit data for us under contract: Supabase and Google Cloud (accounts and app data), Cloudflare R2 and Google Cloud Storage (file storage), Vimeo (video), Zoom (live sessions), Brevo (service emails), Jotform (intake forms) | To run our Services, only on our instructions |
| Other members | Only what you choose to post in a community |
| Authorities or others when required by law | To comply with law or protect safety |
We have no affiliates that receive consumer health data. We do not sell consumer health data, and we do not share it with advertising partners. If we ever want to share it for any other purpose, we will ask for your separate consent first.
5. Your rights
You have the right to:
- Confirm and access: find out whether we collect, share, or sell your consumer health data, and get a copy of it.
- See who received it: get a list of all third parties and affiliates we shared it with, with their contact details.
- Withdraw consent: stop our further collection and sharing. We may then be unable to continue a personalized Service.
- Delete: have your consumer health data deleted, including from our service providers and backups.
- Appeal: challenge our decision if we deny your request.
How to make a request. Email [email protected] with the subject "Health Data Request." We will confirm your identity, usually by reply from your account email, and respond within 45 days. If we need more time, we'll tell you why and may extend by up to 45 more days. Requests are free, up to twice a year.
Appeals. If we deny your request, reply to our decision with the subject "Health Data Appeal." We'll respond within 45 days. If you're still not satisfied, you can contact the Washington State Attorney General or the Nevada Attorney General.
6. Security and retention
Only the staff and contractors who need consumer health data can access it. It's encrypted in transit and at rest. We keep it only as long as described in Section 10 of our Privacy Policy, for example 5 months for assessment videos and 12 months after a Service ends for intake forms.
7. Changes and contact
If we change this notice, we'll post the new version here with a new effective date, and we'll ask for your consent again before using consumer health data in a materially different way.
Questions: [email protected]