Consumer Health Data

Consumer Health Data Privacy Policy

Last updated: October 27, 2026

This is a separate policy, required by Washington State's My Health My Data Act, about the health-related information Cyrus Cheer LLC collects. It sits alongside our general Privacy Policy and covers the same app — it just goes into more detail about one kind of information, and about the rights Washington residents have over it. Where the two policies overlap, this one is the more specific description of health data.

Plain version: to build a training program we have to know a few things about your body — what hurts, roughly how big you are if you choose to tell us, and how hard training and practice felt, and how recovered you are on a given day. That is all we ask for, every one of those questions can be skipped, we only use it to write your training, we never sell it, and you can make us delete it.

1. Who this covers

This policy is written for Washington State residents and for anyone whose health data we collect while they are in Washington. We apply the same practices to every athlete, wherever you live — the extra rights in section 6 are the part Washington law specifically gives Washington consumers.

Cyrus Cheer is for people 13 and older. We do not knowingly collect anything from anyone under 13.

2. What health data we collect, and what we do with it

This is the complete list. If it is not here, we do not collect it.

Body areas to train around. In the onboarding questionnaire we ask whether there is anything we should train around — knees or ankles, lower back, shoulders or wrists, or nothing. Why: so the AI that writes your program picks movements that protect that area instead of poking it.
Height and weight ranges — optional. We ask for a range, never an exact number, and both questions can be skipped. If you skip them we do not store an answer. Why: to set your starting weights, because longer levers start lighter. They are never displayed back to you anywhere in the app, and they are never used to judge you.
What you want to get more flexible at. If you choose the stretching program, we ask what you are working towards — front and middle splits, bridges and scorpions, shoulders and wrists, or a bit of everything. Why: it decides which stretches your plan is built from.
How flexible you say you already are. In the same three questions we ask whether you are just starting, you stretch sometimes, or you stretch a lot. Why: it sets how deep and how long the holds start, and whether your plan can include loaded or partner-style end-range work at all. You are telling us this about your own body, so we treat it as health data even though it is a self-rating rather than a measurement.
How hard a session felt. At the end of a workout you can rate it 1 to 10, or skip the question. Why: next week's program gets harder or easier based on it.
How much you had left in a set. During a rest the app may ask how close to your limit a set was — three or more reps left, one or two, nothing left, or that you could not finish it. If you could not finish it, we ask how many you did get. Why: so next week's weights go up when a set was comfortable and hold when it was not. Answering is optional and skipping it changes nothing.
How your body feels, and how you slept. Before a session the app may ask how your body feels today (fresh, a bit flat, or wrecked) or roughly how many hours you slept (8 or more, 6 to 8, or under 6). Why: so a week that lands on top of bad sleep or a wrecked body does not also add volume.
Muscle soreness left from your last session. Asked occasionally during a rest, as a region — legs, shoulders or arms, back or core, or none. Why: so we back off that pattern specifically instead of cutting your whole week.
Whether something is hurting, and where. Asked occasionally during a rest: nothing hurts, or legs and knees, shoulders and wrists, or back. We also record which movement you were doing at the time. Why: so the app can tell you to stop pushing it there and then, and so next week's program drops or replaces that movement. This is the most sensitive thing on this list and it is the one we act on fastest.
Pain as a reason for swapping an exercise. If you swap a movement out mid-session you pick a reason from a short list, and one of the reasons is pain. We keep that against your program. Why: so the program stops prescribing a movement that hurts you, and so it does not quietly reappear next week.
Practice check-ins. If you have a practice or open gym on your schedule, the app may ask whether you went and how hard it was — light, moderate or hard. Why: so we do not stack a heavy training week on top of a brutal practice week, and so we do not cut your training for practices that never actually happened.
What the AI writes back. Your program, and the coaching notes in it, are shaped by everything above, so they can reflect it. Why: that program is the product you asked us for.
Your training log. The weights, reps and band levels you record during a session, against the movement you recorded them on — and, for the stretching program, simply which stretch session you finished and when. A stretch session records no weights at all. Why: it is how the app knows whether to add load next week. We list it here as well as in the Privacy Policy because it is sent to our AI provider alongside the answers above, and we would rather over-disclose than argue about where the line sits.

How often we ask, and how to say no. At most ONE of the check-in questions appears in a session, and never while you are mid-set — only before you start or during a rest. Every one of them has a “Not now”, and the one about how much you had left in a set simply disappears when the rest timer runs out. Skipping changes nothing about your program and nothing is recorded except that we asked.

We ask for all of this for one purpose: to build and adjust the training program you asked us to build. We do not collect health data to advertise to you, to profile you, or to sell anything on.

3. Where it comes from

You. Everything in section 2 is something you typed or tapped, in the app or on our website at cyruscheer.com/join — the questionnaire, the session rating, the swap reason, the practice check-in.
Our own systems. Your program and its history are generated from those answers by us and by our AI provider.

We do not buy health data, we do not receive it from data brokers, we do not take it from other apps or wearables, and we do not collect location data of any kind.

4. What we share, and with whom

Health data goes to exactly two companies, both of them under contract, both of them acting for us and not for themselves:

Supabase Inc. — our database and file storage. This is where your account, your program, your session logs and your practice check-ins physically live. Category: hosting and data storage provider.
Anthropic PBC (the Claude API) — the AI that writes and rewrites your program. What we send it, and when, is listed item by item in section 4 of our Privacy Policy. Under our API terms Anthropic processes it to return a program and does not use it to train their models. We do not send them your name, your email, your @handle or your payment details. Category: AI processing provider.

That is the whole list. Health data is not sent to our analytics or advertising tools (Google Analytics and the Meta Pixel run on this website only, never in the app, and never on health data), not to our email providers, and not to Apple, Google or RevenueCat, who only ever see that a subscription exists.

We have no affiliates and no parent or sister companies. If that changes, this policy changes with it before any data moves.

Two things that are your choice rather than our sharing: if you post a session card to social media, you are the one publishing it; and your friends on The Roster can see your streak, your session count and your next planned workout — never your injuries, your ratings, your practice check-ins or your height and weight.

We may also disclose data if the law requires it, or where it is genuinely needed to protect someone's safety.

5. We do not sell it

We have never sold consumer health data and we do not intend to. Washington law requires your signed, specific authorization before anyone could, and we do not ask for one anywhere in the app or on this site. We also do not trade it, rent it, or hand it to advertisers.

6. Your rights, and how to use them

If you are a Washington consumer, you have the right to:

Confirm and access — ask whether we are collecting, sharing or selling your health data, get a copy of it, and get a list of the third parties it has been shared with.
Withdraw your consent — tell us to stop collecting it and stop sharing it.
Delete — have us delete it, including telling the providers in section 4 to delete their copies.

How: email privacy@cyruscheer.com from the email address on your account and say which of the three you want. If you would rather not email, you can delete your account and everything attached to it from inside the app: Member → Delete account.

What happens then: we answer without undue delay and within 45 days. If a request is genuinely complicated we may take one extra 45 days, and we will tell you before we do. Exercising any of these rights is free and never costs you the app or gets you worse service.

Two honest limits. The training program is built out of this data, so if you withdraw consent or delete it, we cannot keep writing new programs for you — there would be nothing to write them from. And if a copy of your data survives only in an encrypted backup, deleting it there may have to wait for the backup to cycle; the law allows up to six months for that, and we do not restore deleted data from backups for any other reason.

If we say no: you can appeal by replying to our answer. We will review it and write back within 45 days. If we still say no, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint or 1-800-551-4636.

7. How long we keep it, and how we protect it

We keep health data for as long as your account exists, because it is what your program is built from, and then we delete it. Deleting your account deletes your profile, programs, session logs, schedule and practice check-ins with it.

Access inside our systems is limited to what is needed to run the app: your data is fenced off at the database level so one athlete's account cannot read another's, and the AI provider is sent only the fields listed in the Privacy Policy. We use reasonable administrative and technical safeguards, but no system is perfectly secure and we will not pretend otherwise.

Some of it is also on your phone. So the app works in a gym with no signal, a copy of your current session, your training log and your weekly plan is written to your own device, along with any session you have started but not finished — which includes the check-in answers described in section 2. Your height and weight ranges are deliberately excluded from that copy. This copy stays on your phone; we cannot read it. If you answer the questionnaire on our website, your answers, including the optional height and weight ranges, are held in that browser until your program is built, you sign out, or 7 days pass, then deleted. Deleting your account deletes it from the phone as well as from our servers, and uninstalling the app removes it too. The full list is in section 8a of our Privacy Policy.

8. If you are under 18

Everything above applies to you, and your parent or guardian can email us on your behalf. If a parent asks us to delete a minor's data, we will do it.

9. Changes

If we start collecting a new kind of health data, or use it for a new purpose, we will update this policy and ask for your agreement before that new collection or use starts. We will also update the "Last updated" date here.

10. Contact

Cyrus Cheer LLC
7533 S Center View Ct, Ste N
West Jordan, UT 84084
United States
privacy@cyruscheer.com