FIT99 Consumer Health Data Privacy Notice

# FIT99 Consumer Health Data Privacy Notice Version FIT99-2026-09-25. Effective September 25, 2026, for FIT99 use after this notice is presented. ## What FIT99 collects When you ask FIT99 to save your data, List99 stores it with your member account identifier: exercise selections and custom exercise descriptions; routines and schedules; workout dates, sets, repetitions, resistance/weight, time/distance and completion history; bodyweight entries and goals if you provide them; progress/effort information derived from these entries; and preferences needed for the tools. Free-text labels or notes may reveal information about you depending on what you type. Body display settings are interface choices, not verified demographic or medical facts. We also process the account/session, revision and consent information needed to secure your records and prevent duplicate or conflicting saves. Workout and bodyweight information can be sensitive and may constitute consumer health data under applicable law. FIT99 is not a medical-record or healthcare-provider service. This notice does not claim that all fitness information is PHI or that health privacy law cannot apply. ## Sources and purposes The information comes from you and your use of FIT99. FIT99 calculates workout/progress summaries from your entries. It uses your existing authenticated List99 account. The activated scope does not import medical records, wearable feeds, location/Map history, payment records or third-party health information. Entering bodyweight or notes is optional. We use private FIT99 data to provide the workout storage, history, progress and preferences you request; secure that service; handle your support and privacy requests; and meet applicable legal duties. We do not use these records for advertising, public discovery, automatic social sharing, sale or AI training. We do not infer a medical diagnosis or use these records to decide marketplace seller eligibility. ## Recipients and sharing Your private records are not public or shared with other members, sellers, trainers or the OpenGym author merely because their software is used. Authorized List99 personnel and hosting/service processors may handle records as necessary to operate and protect the service and carry out your requests, subject to their applicable obligations. Legally required disclosures are handled only as permitted by applicable law. No affiliate sharing, health-data sale or separate optional third-party sharing is part of this FIT99 release. Any later materially different collection/use/sharing requires the disclosures and separate consent or authorization required by law before it begins. Hosting processors may process any of the stored FIT99 data categories described above as necessary to host, secure and recover the service. Support and email processors handle request/account contact details; please omit fitness or medical details from initial requests. We disclose only what is necessary for the relevant service or lawful obligation. The private FIT99 tracker does not permit third parties to collect consumer health data about your activities over time and across different websites or online services through its pages. The privacy-request form uses a security challenge to prevent abuse, not a workout-data sharing feature. No workout records are supplied to that challenge by FIT99. ## Changes to this notice We post the current notice at https://list99.com/fit99/privacy with its effective date. Material changes affecting FIT99 collection or use are presented before further affected FIT99 use through the existing List99 notice/assent process. We obtain any separately required consent before beginning a materially different purpose or optional sharing. A changed notice does not retroactively authorize an earlier use of data. ## Retention and your choices Records stay with your account to support the requested tools until you delete them or an applicable deletion or retention process applies. The download and deletion controls let you obtain your current workout data or remove current saved records. A download is your copy to protect. Deleting current data does not automatically close your List99 account or prevent you from saving new data later. For access, correction, deletion, withdrawal or an appeal, use https://list99.com/fit99/privacy-request. You do not need a new account or renewed FIT99 agreement to make a privacy request. Identify the request type, your account contact email and any previous request reference. Do not include workout history, bodyweight, medical details, identity documents or passwords in the initial message. The existing List99 support inbox handles these requests and its email infrastructure may receive the contact message. We verify account control proportionately before releasing or changing private information; ordinary FIT99 use does not require documentary age verification. You may stop using FIT99 at any time. To stop future FIT99 storage and remove retained workout records, request withdrawal and deletion. We disable future FIT99 saves while processing that request. Simply logging out or deleting one workout does not have that effect. Any later reactivation is a new voluntary request under the then-applicable notice; it does not recreate deleted records. We handle applicable privacy rights and deadlines and explain any lawful limitation. Deletion includes relevant processors and backup/archive copies within applicable legal limits; current-data deletion is not a promise of immediate physical removal from every backup. Necessary minimal security, assent and request-handling records may be retained for independently applicable purposes without retaining the deleted workout contents. Restoration procedures prevent deleted workout records from silently becoming active again. If you disagree with a response, use the same form marked "FIT99 privacy appeal," identify the earlier request and explain the issue. We reconsider it and provide a reasoned response within applicable deadlines. If an appeal is denied, we provide the applicable regulator complaint route. Notice acknowledgment does not authorize advertising, sale, unrelated sharing or AI training.