FitMom Consumer Health Data Privacy Policy

Effective: September 8, 2026

Who this policy covers

This policy applies to consumer health data handled by FitMom Wellness, owned and operated by Melburn Brown in Kansas. Contact support@fitmomwellness.com with questions or requests.

Consumer health data FitMom collects

FitMom may collect the following information when it is linked or reasonably linkable to you: age and number of children; fitness level, workout preferences and completed workouts; nutrition preferences, meals, water and habits; weight, goal weight and waist measurements; sleep, mood, energy and stress; wellness goals; challenge progress; and health or wellness information you choose to include in community or support messages. FitMom may use these entries together to infer suitable workout lengths, content, recipes, habits, challenges, and progress summaries. FitMom does not collect precise location, biometric, genetic, medication, diagnosis, medical-record, or wearable-device information through the current service.

Sources

FitMom receives consumer health data directly from you when you complete onboarding, change preferences, log progress, join challenges, or submit community or support content. FitMom also generates activity history and recommendations from your use of the service. FitMom does not currently import data from healthcare providers, insurers, pharmacies, wearable devices, data brokers, or advertising networks.

Purposes

FitMom uses consumer health data to create and update your plan, personalize workouts and recipes, display progress and habits, operate challenges and community features, respond to support, maintain security, honor privacy choices, and comply with law. FitMom will not use a new health-data category or a new purpose without updating this policy and obtaining consent when required.

Processing and disclosure

• OpenAI Sites and Cloudflare host the application, active database, server functions, and security systems. They process consumer health data as service providers under FitMom’s instructions to deliver and secure the service.
• Other FitMom members can see health or wellness information that you voluntarily place in community posts or comments.
• Legal and safety disclosures may occur when reasonably necessary to comply with valid legal process or protect members and the service.

Supabase processes account authentication information, Resend processes transactional email, and Stripe processes subscription and billing information. FitMom does not send the wellness values listed above to Supabase, Resend, or Stripe. FitMom has no affiliates with which it shares consumer health data.

No sale or advertising use

FitMom does not sell consumer health data, use it for targeted advertising, or permit a processor to use it for independent advertising. FitMom does not use geofences around healthcare facilities to identify or collect health data.

Your rights

You may ask FitMom to confirm whether it collects, shares, or sells your consumer health data; access the data and a list of recipients; withdraw consent for future collection; or delete the data. Signed-in members may withdraw consent or delete wellness data under Settings. You may also email support@fitmomwellness.com. Deleting wellness data does not cancel a FitMom membership or delete billing records.

FitMom authenticates a request through the existing signed-in account or a secure sign-in link sent to the account email. If that is not sufficient, FitMom may request only the additional information reasonably necessary to verify the request. Requests are handled free of charge up to twice each year and without undue delay, normally within 45 days. FitMom may extend once for up to 45 additional days when reasonably necessary and will explain the extension within the first 45 days.

Deletion across systems

A verified deletion removes active consumer health data from the FitMom database, including wellness logs, preferences, activity, challenges, saved checklists, and member community content. FitMom will notify any processor, contractor, affiliate, or third party that received the data when required and direct it to honor the request. Deletion from an archived or backup system may be delayed until restoration or expiration of that system, but will be completed within six months where Washington law applies. FitMom may retain a minimal request receipt and records that must be kept for billing, fraud prevention, disputes, or law.

Appeals

If FitMom refuses all or part of a request, the written response will explain why. You may appeal by emailing support@fitmomwellness.com with “Health privacy appeal” in the subject. FitMom will respond in writing within 45 days. If an appeal is denied, you may submit a complaint to the Washington Attorney General or another regulator with jurisdiction.

Security and changes

FitMom limits access to people and processors that need the information for the disclosed purposes and uses safeguards appropriate to the nature of the data. Material changes to the categories, purposes, or disclosures described here will be posted before they take effect, and FitMom will request new affirmative consent when required.