Consumer Health Data Privacy Policy

This policy covers the health questions a studio asks you before your first class, and nothing else. Everything else ClassPilot collects is described in our Privacy Policy. Where the two overlap, this document governs health information.

It exists as its own page because Washington's My Health My Data Act requires one, and because health information deserves to be explained somewhere other than paragraph forty of a longer document.

1. What we collect, and only if your studio asks

Studios choose whether to ask health questions at all, and which sections to turn on. The questions are ours, not theirs — a studio cannot write its own, which is what keeps this list short enough to describe honestly:

• Injuries or movement limits — free text, and the one answer most likely to change how a class is cued for you.
• Whether you are pregnant — yes or no.
• Medical conditions and medications — free text.
• An emergency contact — a name and a phone number.
• Your date of birth.

Answering is your choice. You can leave any question blank, and nothing refuses your booking because you did — your studio may remind you, and that is all.

We also store the liability waiver you signed: the exact wording you were shown, the name you typed, the date and time, and the IP address and device you signed from. A copy is emailed to you at the moment you sign it.

2. Who can see it

This is the part worth reading closely, because your answers are not all treated the same way.

• The instructor teaching your class sees a short safety line built from your injuries and pregnancy answers — for example "left knee, avoid full lunge". That is what those two questions are for. Withholding them from the person cueing the class would be a safety problem dressed up as privacy.
• Only for a class they are actually teaching. An instructor cannot browse your studio's clients and read safety lines; they see the people in the room in front of them.
• The studio owner or an admin can open your full answers, including your medical conditions, medications, emergency contact and date of birth. An instructor never can.
• Every full read is recorded. When someone opens your answers we log that it happened — who, and when. We do not log what they read.
• One studio never sees another's. If you go to two studios, each holds its own separate record and neither can see the other's.

3. What we do with it

We store it, we show it to the people described above, and we delete it on the schedule in section 5. That is the entire list.

We do not analyse your health answers. Not for research, not for product analytics, not for benchmarking studios against each other, not to build any kind of profile. We do not sell health data, share it with data brokers, or use it for advertising. We never will — that is a designed-in limit, not a current preference.

Your answers are encrypted, and they are stored in a way that makes them unsearchable even to us. We cannot run a query for everyone with a particular condition, because the system is built so that no such query is possible.

4. Who else receives it

Nobody. Your health answers are not sent to any third-party service — not to analytics, not to advertising, not to a notification provider. They exist in our database and are shown in the app to the people named in section 2.

Our hosting and database provider necessarily stores the encrypted data on our behalf, under contract, and does nothing else with it.

5. How long we keep it

• A screening lasts a year. After that your studio will ask you to answer again, because a health answer that never expires is not a useful one.
• Two years after your last class at a studio, we delete your answers there and keep only the fact that the studio screened you on a date. The studio can still show it asked; nobody holds stale medical information about you.
• Deleting your account deletes your health answers everywhere, at every studio, immediately.
• Your signed waiver is kept. It is a contract between you and the studio, and deleting a login cannot un-sign an agreement. It stays with the studio's records.

6. Your rights

You can delete your answers by deleting your ClassPilot account, which removes them from every studio at once, immediately.

To see or correct your answers today, email us and we will do it. We are honest about the reason: the app asks these questions once and asks again when the year is up, and there is not yet a screen that shows you what you previously wrote. Until there is, the request goes through us, and we will answer it.

If you live in Washington, Nevada, or another state with a consumer health data law, you have the right to know what health data we have collected, to withdraw your consent, and to have it deleted — and to have us tell the people we shared it with, though in practice we share it with nobody. Email us and we will do it; we will not charge you or make you create anything to ask.

We will never refuse you service, charge you a different price, or give you a worse experience because you exercised any of these rights.

7. Consent

You are asked for these answers in a screen that names both tiers — which answers your instructor will see, and which stay with the studio owner — before you type anything. Accepting our general terms is not consent to collect health data, and we do not treat it as such.

8. Changes

If we change how health data is handled, we will update this page and its effective date. A change that widens who can see your answers, or what they are used for, will be told to you directly rather than left here to be discovered.

9. Contact

Email help@classpilotapp.com with anything about this policy, including a request to see or delete your health data.