Splitwork

Consumer Health Data Privacy Policy

Effective: July 21, 2026 · Last updated: July 21, 2026

This policy explains how Splitwork LLC ("Splitwork," "we," "us") collects, uses, shares, and protects consumer health data. It is separate from our general Privacy Policy and is provided to comply with the Washington My Health My Data Act (MHMDA) and similar consumer-health-data laws. If anything here conflicts with our general Privacy Policy for health data specifically, this policy controls.

In plain terms: Splitwork is a running-training app. To build and adapt your plan we work with data about your runs and body — like heart rate, pace, and fitness estimates. We only use it to run the app for you, we don't sell it, and you can withdraw consent or delete everything at any time.

1. What we mean by "consumer health data"

Consumer health data is information that identifies your past, present, or future physical or mental health status. For Splitwork, this includes:

Body & performance metrics: heart rate, cadence, pace, distance, duration, elevation, calories, and effort you record or sync from a device.
Fitness inferences: the fitness/training score and race predictions our adaptive training engine calculates from your runs.
Activity-related location: transient location used to fetch weather for pace adjustments. We do not store your location.
Profile inputs you provide that relate to training, such as goal race, training history, and any physical characteristics you enter.

2. How we collect it

We collect this data (a) directly from you when you enter it or record a run, (b) from your Garmin watch via the Splitwork watch app you install and pair, and (c) — only if you choose to connect it — from third-party services like Strava that you authorize. We collect only what we need to generate and adapt your training plan.

3. How we use it

To generate, adapt, and display your individualized training plan and workouts.
To calculate your fitness score, trends, and race predictions.
To adjust recommended paces for weather conditions.
To sync and de-duplicate runs across your devices and connected services.
To provide customer support and keep the service secure and working.

We do not use your health data for advertising, and we do not sell it.

4. Consent

We ask for your consent in two separate steps, and you can give one without the other:

Consent to collect: we collect your health data to run the app for you. This is required to use Splitwork's core training features.
Consent to share: separately, we ask permission before sharing your health data with the third-party services listed in Section 5. This is optional — you can use Splitwork without it, though some integrations (like Strava sync) won't function.

You may withdraw either consent at any time in Settings. Withdrawal stops the relevant collection or sharing going forward; it does not affect processing that already occurred.

5. Who we share it with

We share consumer health data only with service providers who process it on our behalf to make the app work, and only under contracts limiting them to that purpose:

Supabase — secure database and authentication (stores your account and run data).
Netlify — hosting and the serverless functions that sync your data.
Strava — only if you connect it, to import your activities.
Open-Meteo — weather data for pace adjustments (your location is used transiently and not stored).
Stripe — payment processing (Stripe receives billing data, not your health metrics).

We do not sell consumer health data, and we do not share it with data brokers or advertisers. We may disclose data if required by law or to protect rights and safety, and in a business transfer we would require the successor to honor this policy.

6. Your rights

Regardless of where you live, you can:

Access the health data we hold about you.
Withdraw consent to collection or sharing (Settings, at any time).
Delete your account and all associated data instantly via Settings → Delete Account, or by emailing us.

To exercise any right, email t.dulaney@splitworkapp.com. We respond within 45 days. You will not be discriminated against for exercising these rights. If we deny a request, you may appeal by replying to our response.

7. How we protect it

Access to your data is restricted to you through database row-level security and authenticated requests. Administrative credentials are held only in our server environment and never exposed in the app. We limit retention to what's needed to provide the service; when you delete your account, associated health data is deleted.

8. Data location

Splitwork is operated from the United States and your data is processed on U.S.-based infrastructure through the providers named above.

9. Changes

If we make material changes to this policy we will update the date above and, where required, seek renewed consent before the change affects previously collected data.

10. Contact

Splitwork LLC
4103 N Tara Cir, Wichita, KS 67226
t.dulaney@splitworkapp.com

Washington residents: violations of the My Health My Data Act are enforceable under Washington's Consumer Protection Act. This policy is intended to meet MHMDA's requirement of a separate consumer-health-data privacy policy.