Supplemental Privacy Notice for Health Information
This Consumer Health Data Privacy Policy supplements our Privacy Policy and provides additional information about how KPMS3 LLC, operating as Entropy Lifestyle, collects, uses, and protects your consumer health data as required by state laws including the Washington My Health My Data Act, Nevada's Consumer Health Data Privacy Law, and similar state regulations.
Under applicable state laws, "consumer health data" includes personal information that is linked or reasonably linkable to a consumer and that identifies past, present, or future physical or mental health status. This includes:
| Category | Examples | Source |
|---|---|---|
| Sleep Data | Sleep duration, sleep stages (REM, deep, light), sleep efficiency, sleep consistency, sleep start/end times | WHOOP, Oura Ring, Apple Health, Health Connect |
| Recovery Metrics | Recovery score, readiness score, wellbeing score, HRV (heart rate variability), resting heart rate | WHOOP, Oura Ring, Apple Health, Health Connect |
| Activity Data | Strain score, activity level, steps, active calories, distance, active minutes, workout type | WHOOP, Oura Ring, Apple Health, Health Connect |
| Vital Signs | Heart rate (resting, average, max, min), respiratory rate, skin temperature, blood oxygen (SpO2) estimates | WHOOP, Oura Ring, Apple Health, Health Connect |
| Heart Rate Variability | HRV RMSSD, HRV SDNN | WHOOP, Oura Ring, Apple Health, Health Connect |
| Self-Reported Wellness | Energy levels, mood, stress, wellness goals, daily check-in responses | User input in App |
| Health-Related Inferences | Wellness recommendations, protocol suggestions, recovery predictions, energy curve forecasts | Generated by Entropy Lifestyle |
We only collect health data after you explicitly authorize the connection. You can revoke access at any time through your device settings (for Apple Health/Health Connect) or app settings (for WHOOP/Oura).
We collect and use consumer health data for the following purposes:
| Purpose | Description |
|---|---|
| Service Delivery | To provide personalized wellness protocols and recommendations based on your health status |
| Display Health Metrics | To show you your health data, trends, and progress in the App |
| Schedule Optimization | To recommend optimal times for wellness activities based on your recovery and energy levels |
| Personalization | To adapt recommendations based on your feedback and historical patterns |
| Service Improvement | To improve our protocols and features using aggregated, de-identified data |
We share consumer health data only with the following categories of third parties:
| Category | Purpose | Data Shared |
|---|---|---|
| Database Provider (Supabase) | Secure storage of your data | All user data (encrypted) |
| Health Data Processor (Sahha) | Process Apple Health / Health Connect data | Health metrics from device health stores, user identifier |
| AI Service Providers (Anthropic, Google) | Generate personalized recommendations | Anonymized health indicators only (e.g., "recovery: high" not exact values) |
| Push Notification Provider (OneSignal) | Deliver protocol reminders | User ID, device token (no health data) |
| Legal Authorities | Compliance with legal obligations | As required by law |
We do NOT sell consumer health data to any third party.
Under the Washington My Health My Data Act, you have the right to:
Under Nevada's Consumer Health Data Privacy Law, you have similar rights including:
Under the Connecticut Data Privacy Act, you have the right to:
You can exercise your consumer health data rights through the following methods:
You may also submit requests by contacting us:
Email: hello@entropylifestyle.com
Subject Line: Consumer Health Data Request - [Your Request Type]
Response Time: We will respond within 45 days of receiving your verified request
To protect your privacy, we will verify your identity before processing requests. We may ask you to:
We obtain your consent to collect and process consumer health data when:
You may withdraw your consent at any time by:
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
We implement robust security measures to protect your consumer health data:
We retain consumer health data as follows:
| Data Type | Retention Period |
|---|---|
| Active Account Health Data | Retained while your account is active (up to 2 years of history) |
| Wearable Data | Retained while wearable is connected; deleted upon disconnection request |
| AI-Generated Recommendations | 90 days rolling retention |
| Deleted Account Data | Purged within 30 days of deletion request |
We do not use geofencing technology to collect consumer health data or to identify consumers for the collection of consumer health data.
We may update this Consumer Health Data Privacy Policy to reflect changes in our practices or applicable law. When we make material changes, we will:
We encourage you to review this policy periodically.
If you have questions about this Consumer Health Data Privacy Policy or wish to exercise your rights, please contact us:
Consumer Health Data Requests: hello@entropylifestyle.com
Privacy Questions: hello@entropylifestyle.com
Mailing Address:
KPMS3 LLC (Entropy Lifestyle)
Attn: Privacy Team
Glen Allen, Virginia
United States