Pocket Spotter

Consumer Health Data Privacy Policy

Effective 4 October 2026 · Tyler Hernandez · support@tyhdev.net

This policy explains how Pocket Spotter handles consumer health data — information that identifies or relates to your physical health. My main privacy policy covers everything else.

1. The consumer health data collected, why, and how it is used

DataWhy, and how it is used
Injuries you log — body part, severity, description, movements to avoidSo the AI coach can adapt your training around them. Sent only if you allow health data sharing.
Body measurements you log — body weight, body-fat and lean-mass readings, and the date and method of a scanSo recommendations reflect your body composition. Sent only if you allow health data sharing.
Apple Health readings — last night's sleep, resting heart rate, HRV, active calories, steps, body weight, and workouts other apps or your watch recordedSo recommendations account for your recovery and activity. Read only with Apple Health permission, and sent only if you allow health data sharing.
Daily check-in answers — energy, soreness and stress ratings, and any notesSo the daily recommendation fits how you feel that day. Sent when you complete a check-in, because that feature needs them.
Anything you type to the coachTo answer your question. Your messages may contain health information if you choose to include it.

This data is stored on your phone. It leaves your phone only when you use an AI feature, and only to generate that answer: it passes through my server (which stores none of it) to Google's Gemini API (which, under its paid terms, does not use it to train its models). It is never used for advertising, never sold, and never used for any purpose other than giving you training recommendations.

2. Where it comes from

3. The consumer health data shared

None. I do not share consumer health data with any third party, and I do not sell it.

To answer your requests, it is disclosed only to the two processors below, which handle it on my behalf and for no other purpose. Under the law, disclosure to a processor is not sharing.

4. Third parties and affiliates it is shared with

No third parties, and no affiliates — I have none.

The processors that handle it on my behalf are Cloudflare, Inc. (runs my server, which passes each request through and stores no content) and Google LLC (the Gemini API, which generates the answer).

5. How to exercise your rights

You have the right to:

To make a request, email support@tyhdev.net. I'll respond within 45 days, free of charge, and tell you if I need up to 45 more.

Appeals. If I decline to act on your request, you can appeal by replying to my decision with "Appeal" in the subject line. I'll respond within 45 days with a written explanation. If you're still not satisfied, you can contact your state attorney general — in Washington, at atg.wa.gov/file-complaint.

Changes

If I change how Pocket Spotter handles consumer health data, I'll update this policy and its effective date, and the app will ask for your permission again before sending any health data under the new terms.