Consumer Health Data Privacy Policy

1. Who this covers

This policy is from Amplify Productivity LLC, a Wyoming limited liability company ("Amplify," "we"). It covers "consumer health data" as Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370) and the Connecticut Data Privacy Act define it: information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. We apply it to everyone who uses Amplify, wherever you live.

Our Privacy Policy covers everything else. Where the two differ on health data, this page governs.

2. The health data we collect, and why

• From WHOOP, only if you connect it: recovery, sleep, strain and workouts.
• From Oura, only if you connect it: readiness, sleep and workouts. Oura data never goes to any AI model (see below). We keep the last 90 days and delete older Oura data automatically.
• From Apple Health, only if you turn on Use Apple Health in the iPhone app: sleep, workouts, heart-rate variability, resting heart rate, steps and active energy. Amplify only reads Apple Health; it never writes to it.
• What you tell us: journal check-ins (mood and energy ratings and your notes), and anything health-related you put in events, habits, tasks, goals or the assistant, such as a doctor's appointment or a medication habit.
• Your voice, while you use voice: it is processed as you speak and Amplify does not keep the audio. We don't create voiceprints or use your voice to identify you.
• What Amplify works out from the above: for example a lighter plan after short sleep, whether a workout happened, and your daily score.

We use it only to:

• plan and score your day, and fit the plan to how you slept and recovered;
• answer you when you use the assistant;
• ask in a check-in only what your devices didn't already record;
• write the notifications you turn on.

Oura data never goes to any AI model. Not the assistant, the morning briefing, voice, notification text or apps you connect with an Amplify access token. Amplify uses it only to show it to you and to plan and score your day on your own screens; the assistant only knows that Oura is connected.

We never use it for advertising or marketing, and we never sell it.

3. Where it comes from

From you (what you type, say or mark), from WHOOP, Oura and Apple Health when you connect them, and from Amplify's own calculations on that data.

4. Who receives it

Only these companies, only for the purposes above. No affiliate receives it. Apps you connect yourself with an Amplify access token (for example Claude through Amplify's connector) can read what that token allows; you create and revoke those tokens in Account settings.

• Supabase, stores your Amplify account (database). Receives: everything below that Amplify keeps. Contact / privacy
• Vercel, runs Amplify's servers. Receives: the data in each request as it passes through; it isn't written to our logs. Contact / privacy
• Google (Gemini), AI provider for the assistant, text and voice. Receives: a summary of your recent sleep, heart rate, steps and workouts, and what you type or say, when you use the assistant. On our account, Google's paid terms keep it from using this to improve its products. Voice runs through Deepgram under its own terms with Google, and your own Gemini key follows your own Google terms. Contact / privacy
• Anthropic (Claude), AI provider for harder planning requests. Receives: the same summary and your request, when a request goes to Claude. Anthropic doesn't train on it. Contact / privacy
• Deepgram, voice: speech to text, text to speech, and the web voice conversation. Receives: your voice and the same summary, while you use voice. We opt out of its Model Improvement Program, so it keeps nothing after processing and doesn't train on it. Contact / privacy
• OpenAI, live voice mode, only if it is turned on for your account. Receives: your voice and a short summary of today's schedule while a live voice session is open. OpenAI doesn't train on it. Contact / privacy
• Your browser's push service (Apple, Google or Mozilla), delivers notifications you turn on. Receives: a notification's text, when it mentions your recovery (for example a low-recovery heads-up). Contact / privacy
• Google Calendar, two-way calendar sync, only if you connect it. Receives: events you create in Amplify, including health-related ones such as a doctor's appointment. Contact / privacy

Oura data goes only to Supabase (storage) and Vercel (our servers). None of the AI, voice or notification providers above ever receives it.

We may also disclose it when the law requires us to (for example a valid court order). Only the people who run Amplify can access it, and only when they need to operate or support the service.

5. Your consent

We ask before we collect health data from a device or app, on its own screen and not as part of the sign-up agreement: the WHOOP and Oura connect sheets on the web, and the Apple Health sheet in the iPhone app. Each names what is read, what it's for and who receives it. To withdraw your consent, disconnect WHOOP or Oura in Account settings (disconnecting Oura also deletes its data from Amplify right away), turn off Use Apple Health in the iPhone app's Account tab, or email us. Withdrawing stops new collection; to erase what we already hold, delete it as described below.

6. Your rights

• Know and access: ask whether we collect, share or sell your health data, get a copy of it, and get the list of everyone we shared it with (section 4, with their contact links). Download My Data in Account → Your data gives you a copy right away.
• Delete: Account → Your data → Delete account deletes your account and its health data immediately and revokes WHOOP and Oura access. Our database provider's daily backups roll off within 7 days, and the encrypted copies we keep ourselves are deleted after 28 days. You can also ask us by email to delete health data without closing your account.
• Oura and backups: disconnecting Oura or deleting your account deletes your Oura data from Amplify's database at once, well inside Oura's 72 hours. Backups can't be edited row by row, so a copy of it can sit in the backups above until they expire (7 days at our database provider, 28 days in our own encrypted copies). Nobody reads those copies, and we never restore Oura data from them into an account.
• Withdraw consent: see section 5.
• No sale: we don't sell health data.
• No penalty: using these rights never changes your price or the service you get.

How to ask: email privacy@amplifyproductivity.com from the email address on your account (that is how we confirm it's you). We answer within 45 days. If we need longer we'll tell you why within those 45 days, and take at most 45 more. Requests are free, up to twice a year.

Appeal: if we turn down a request, reply to our answer with "appeal." We'll decide within 45 days and tell you in writing why. If we still say no, you can complain to the Washington Attorney General or your own state's attorney general.

7. Changes

If we change this policy we'll update the date above. If we want to collect health data for a new purpose or share it with someone new, we'll ask you first.

8. Contact

privacy@amplifyproductivity.com. Amplify Productivity LLC, Wyoming, United States.