Consumer Health Data Privacy Policy (United States)
This policy applies to people in the United States, including Washington, Nevada and Connecticut. It is part of our Privacy Notice (vadonaa.com/en/privacy). Vadonaa, S.A.S. de C.V., a Mexican company ("Vadonaa", "we"), is responsible for your data. Contact: privacidad@vadonaa.com.
1. What consumer health data we collect. (a) The body areas you mark from our closed list (knee, lower back, shoulder, neck, wrist, or "other", which has no text field). (b) Your workout records: sessions done, partial or skipped; sets, repetitions, the weight you lift and the seconds you hold timed exercises; whether you warmed up; exercises you mark as unavailable; and where you train (gym or home). (c) Your training profile: level, goal, sessions per week, minutes per session and equipment. (d) What we infer from your use of the app: which exercises you tend to complete or skip. We do not collect your body weight, height, location, biometric data, reproductive or sexual health data, or data from HealthKit or other phone sensors.
2. Where it comes from. From you, when you answer the questions and log your workouts, and from what the app infers from those records.
3. Why we use it. Only to build your weekly program, adjust it to what you did, show your progress, and keep the service secure. We never use it for advertising, we never sell it, and we never use it to build commercial profiles.
4. Who receives it. We do not share consumer health data with third parties or affiliates. Service providers (processors) handle it only on our behalf, under contract and following our instructions: cloud hosting and database (United States); our AI model provider, Anthropic, PBC (United States), which receives only labels and a summary without data that directly identifies you, never your name, email, age or anything you type; and network protection, which processes encrypted traffic in transit. Error reporting, product analytics and email do not receive health data. We give you the list of these providers by name if you ask.
5. AI and model training. Vadonaa's AI uses a third-party model to choose exercises from our catalog. We do not use your personal data to train large language models, and we do not sell or provide it to others for that purpose. Under its commercial terms, our model provider does not train its models on the data we send.
6. Your rights. You can (a) confirm whether we collect your consumer health data and access it, together with the list of third parties and affiliates that received it (today, none) and how to contact each one; (b) withdraw your consent, in the app (Profile → Privacy) or by email; (c) have it deleted. We delete it from our systems and ask our processors to delete it too; backup copies, once they exist, expire within 30 days. You can delete your account in the app at any time. We answer within 45 days. If we need more time, we tell you why within those 45 days, and we can extend only once, by up to 45 more days. Requests are free up to twice a year. We will not treat you differently for using your rights.
7. How to make a request. In the app (Profile → Privacy) or by email to privacidad@vadonaa.com from your account email. If you write from another address, we may ask for information to confirm it is you. We will not ask you to create an account.
8. Appeals. If we deny your request, you can appeal by replying to our answer or writing to privacidad@vadonaa.com with the subject "Appeal". We answer in writing within 45 days (60 days for Connecticut residents, as the law allows). If we deny your appeal, you can contact your state Attorney General: Washington (atg.wa.gov), Nevada (ag.nv.gov) or Connecticut (portal.ct.gov/ag).
9. Location. We do not use your location and do not use geofences.
10. Changes. If we want to collect a new category of consumer health data or use it for a new purpose, we will tell you first and ask for your consent.