Legal · version 2026-10-26.1

Consumer Health Data

The health data we hold, why, where it comes from, who we share it with, and how to see, delete or withdraw consent for it.

This policy covers consumer health data as Washington's My Health My Data Act, Nevada and Connecticut define it. It sits beside our Privacy Policy and applies to everyone, wherever you live.

What we collect, and why

• Pain and incident reports you make during or after a class: so a reviewer can follow up and so the next class is safer. Only reviewers read them; they never appear in logs and are never used to diagnose.
• What a teacher should know, if you write it in your profile (an injury, a pregnancy, a condition): so the teaching suits you.
• Your body setup from the iPhone app: height, weight if you choose to give it, body proportions, range of movement and standing posture, as numbers worked out on your phone from a few poses (the pictures never leave it), with each completed setup kept for comparing: to fit the teaching, the props and the coach's targets to your body, and to tell you gently how your movement has changed. Kept until you delete it; deleting removes the history too.
• Words about your day and sleep, if you turn on Classes for your day in the iPhone app: a few words your phone makes from Apple Health (what your body did, the kind of workout, whether last night was short, usual or long), never the readings: to suggest one extra class. Kept 28 days, read by no one at Shvasa, deleted when you turn it off.
• How a class felt and whether you stopped it, and recordings of classes a teacher asked to see: to choose your next classes and place you in our curriculum.

We collect these only to provide what you asked for. We do not collect precise location, we do not geofence, we do not use health data for advertising, and we never sell it. Face prints for household recognition, anything written to Apple Health, and the Apple Health readings behind Classes for your day stay on your phone and never reach us.

Where it comes from

From you, and from your use of the Service on your own devices. We do not buy health data or receive it from anyone else.

Who we share it with

Our processors, under contract and only to run the Service: Google Cloud (hosting, in the United States); the AI model provider we use (OpenAI or Anthropic), which receives still frames from a class you chose to practise with your camera for a teacher and may not train on them; and Twilio SendGrid, which sends our emails and sees only what an email contains. Our teachers and reviewers see what their role needs. We have no affiliates that receive it. We disclose it otherwise only when the law requires it or to protect someone's safety.

Your rights

You may confirm whether we hold your health data and see it, get a list of everyone we shared it with, delete it, and withdraw consent at any time. Write to the support address shown in your profile; we answer within 45 days and never charge. Deletion reaches our processors and backups as their cycles allow. If we refuse, reply to our answer to appeal; we decide within 45 days and, if you still disagree, tell you how to complain to your state's attorney general.

buildteam.ai.