AxialConsumer health data privacy policy
The short version. Axial collects health information you enter, only to build and adjust your training. We don’t sell it and we don’t share it with any third party. You can see it, delete it or withdraw your consent in the app at any time.
This policy explains how Axial collects, uses and discloses consumer health data. It is written to meet Washington’s My Health My Data Act and applies in the same way to Nevada, Connecticut and every other place where this kind of information is regulated. It is part of our privacy policy, which has the full detail.
1. What we collect and why
| Category | What it includes | Why we collect it |
|---|---|---|
| Reproductive health information | Whether you are pregnant or gave birth in the last 12 months, week of pregnancy or weeks since birth, type of delivery, pregnancy complications you tick, whether your provider has cleared you to exercise, and warning signs you report. | To choose safer exercises and intensity, and to pause training when warning signs appear. |
| Injury and pain information | Injuries or areas to work around, and pain you report, with its area and severity. | To swap exercises, lower the load and tell you when to get checked. |
| Body measurements and vital signs | Bodyweight, HRV, resting heart rate, sleep time and sleep scores, and heart rate and power from activity files you import. | To work out your readiness, adjust loads and show your progress. |
| How you feel | Energy, soreness and stress ratings, and how hard each workout felt. | To work out your readiness and adjust your next sessions. |
| Inferences | The readiness score and zone Axial calculates from the information above. | To decide whether you train as planned, trim the day or recover. |
We use this information only to provide Axial to you, to keep it secure, and as the law requires. We don’t use it for advertising and we don’t use it for anything unrelated to your training.
2. Where it comes from
From you, when you type it in, and from activity files you choose to import. We don’t collect consumer health data from anyone else.
3. Who receives it
We don’t sell consumer health data, and we don’t share it with any third party or affiliate. We have no affiliates that receive it. We disclose it to the processors that run Axial for us, only so they can do that work: Supabase (database and sign-in) and Vercel (hosting). The person who runs Axial can see it in the beta owner view, described in section 6 of the privacy policy. We disclose it when the law requires and only after valid legal process, as described there.
4. Your consent
We collect consumer health data with your consent, or because it is necessary to provide Axial, which you asked for. You give consent by choosing to enter the information. Axial doesn’t share consumer health data, so there is no separate sharing consent to give. If we ever want to share it, or to sell it, we will ask you separately first, and you can say no. We won’t sell it without a valid signed authorization from you.
To withdraw consent for collection, delete the entries in the app, delete your account, or email us. Withdrawing doesn’t affect what we did before.
5. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data;
- access it, and get a list of all third parties and affiliates we have shared it with, and their contact information (there are none);
- withdraw consent for collection;
- have it deleted. We will also tell the processors that hold it to delete it.
You won’t be treated differently for using these rights. In the app, go to Profile, then Your data, to export or delete it. Or email hello@getaxial.training with “Health data request” in the subject line. We will check that the request comes from the email address on the account.
We will respond within 45 days. If we need more time, we may take up to 45 more days and will tell you why. Backups held by our database provider are overwritten on its normal schedule, and the law allows up to six months for archived data.
Appeals. If we decline your request, reply with “Appeal” in the subject line. We will answer in writing within 45 days, with our reasons. If we still decline, you can contact the Washington Attorney General through its complaint page, or the attorney general of your state.
6. Security and access
We limit access to consumer health data to the people and processors who need it to run Axial for you. Our providers encrypt it in transit and at rest, and database rules mean each athlete’s records can be read only by that athlete and the beta administrator. We protect administrator accounts with strong authentication. Our written terms with processors limit what they can do with it.
7. Location and geofencing
Axial doesn’t collect your location and doesn’t use geofences.
8. Changes
If we want to collect another category of consumer health data, or use it for another purpose, we will ask for your consent first. We will update the date above when this policy changes.
9. Contact
Questions or requests: hello@getaxial.training.