Consumer health data privacy policy
This policy is for people in the United States. It is written for Washington's My Health My Data Act, and also covers the consumer health data laws of Nevada, Connecticut and other states. It adds to our main Privacy policy, which describes everything we hold about you.
Taper is run by Rob Freshwater, a sole trader in the United Kingdom trading as Taper ("we", "us"). Contact: hello@taperrun.com.
1. The consumer health data we collect
- Measurements from your watch: heart rate, heart rate variability (HRV), resting heart rate, sleep, and skin temperature where your watch records it.
- Your workouts: pace, heart rate, cadence and altitude through each run, and summaries of other exercise. Runs also carry GPS positions, which we use only to check data quality.
- Health information you tell us: health conditions, anything else about your health you choose to mention, how often you get injured, and injury or illness reports, including symptoms, severity, any diagnosis and exercises a clinician gave you.
- How hard runs felt: your effort ratings and what you tell the coach about how you feel.
- What we work out from it: your training load, recovery compared with your own normal range, flags when a reading is outside that range, and the coach's working notes about any injury.
2. Where it comes from
- From you, in the app.
- From your Garmin, through Garmin Connect, either directly or through a connection service that links fitness devices to apps, such as Terra.
- From Apple Health on your iPhone, for an Apple Watch, read by our app after you allow it in iOS.
- From our own calculations on the data above.
3. Why we collect it and how we use it
We use consumer health data only to provide the coaching you asked for:
- to build your training plan and adjust it each day around your recovery, runs and injuries;
- to write your morning messages, run assessments and chat replies, using an AI (Claude, made by Anthropic);
- to send workouts to your watch;
- to check and improve the quality of the coaching, including re-running the coach's past work through other AI models to compare results.
We ask for your consent on its own screen in the app before we collect any of it. That consent is separate from accepting our terms. We will not collect new kinds of consumer health data, or use it for a new purpose, without telling you and asking for your consent first.
We never use it for advertising. We never sell it. We do not use geofencing around health care facilities, or anywhere else.
4. Who receives it
We do not share consumer health data with third parties or affiliates. We have no affiliates.
These companies process it on our behalf, under contracts that let them use it only to run our service:
- Anthropic PBC (AI that writes the coaching): computed figures, your health background, injury records, effort ratings and chat messages. Contact: privacy@anthropic.com.
- A watch connection service, if we use one, such as Terra Enabling Developers, Inc. (connects your watch): your watch data. Contact for Terra: through tryterra.co.
- DigitalOcean, LLC (hosts our servers and database in London): everything we store. Contact: through digitalocean.com.
We may disclose consumer health data if the law requires it, for example to answer a valid court order.
5. Your rights
You have the right to:
- Confirm and access: find out whether we collect, share or sell your consumer health data, and get a copy of it, with the list of companies that have received it and how to contact them.
- Withdraw consent to our collecting and using it. Disconnecting a watch stops new data from it at once. Because the coaching cannot work without health data, withdrawing consent completely means closing your account.
- Delete it. Delete your account in the app (Account › Delete account), or email us. We delete it from our systems straight away and from our backups within 7 days, and we tell the companies in section 4 to delete it too. Any watch connection service we use deletes its copy when we disconnect you. Anthropic deletes AI requests within 30 days, except that it may keep a request its safety systems flag for up to 2 years.
How to ask. Email hello@taperrun.com from the address on your account, saying which right you want to use. If you write from another address, we will ask you to confirm the request from your account address, so that we know it is you. You can ask someone to act for you if you give them written permission.
When we reply. Within 45 days. If we need longer, we will tell you within those 45 days and why, and we will reply within 45 more. Requests are free, at least twice a year.
Appeals. If we refuse your request, you can appeal by replying to our answer, or by emailing hello@taperrun.com with "Appeal" in the subject line. We will reply in writing within 45 days, with what we decided and why. If we turn down your appeal, you can complain to your state's attorney general:
- Washington: atg.wa.gov/file-complaint
- Nevada: ag.nv.gov
- Connecticut: portal.ct.gov/ag
- Elsewhere: your state attorney general's website.
6. Tracking by others
No other company collects consumer health data about you through the app, over time or across other apps and websites.
7. Changes to this policy
If we make an important change, we will tell you in the app before it takes effect, and ask for your consent again where the law requires it. The date at the top shows when this policy last changed.
8. Contact
Rob Freshwater, trading as Taper
hello@taperrun.com