Consumer Health Data Privacy Policy

Saturday Inc. ("Saturday," "we," "us") provides this Consumer Health Data Privacy Policy pursuant to the Washington My Health My Data Act (RCW 19.373, "MHMDA"). This policy is separate from our general App Privacy Policy and applies specifically to consumer health data as defined under the MHMDA.

Saturday is a sport nutrition platform that delivers personalized fuel and hydration prescriptions for endurance athletes. We collect health-related data to provide and improve your fuel, hydration, and electrolyte recommendations. We also use what you enter and record in the app to train Saturday's shared models, except data from athletes under 18 and the health data of athletes Saturday's records do not place outside the EU or EEA, the UK, Switzerland, Washington, and Nevada, unless they say yes in the app (Activity-Platform Integration Disclosure, Section 6). We also use a few profile details to make the product emails we send you relevant (Section 3).

Saturday does not sell consumer health data. Saturday does not use consumer health data for advertising. Saturday does not share consumer health data with data brokers.

1. Categories of Consumer Health Data Collected and Purpose

We collect the following categories of consumer health data. Most are used to personalize your nutrition and hydration prescriptions. Symptoms and sleep you log, wellness data from Intervals.icu, and workout routes and starting points from connected platforms are kept with your account and do not change your prescriptions. Some categories are also used as described below and in Section 3.

Body Composition and Biometric Data

• Biological sex — Used to calculate sweat rate and sodium loss, which differ meaningfully between sexes.
• Year of birth — Used to estimate basal metabolic rate and age-adjusted physiological parameters. We also use it to apply our age rules: athletes under 18 do not get AI features, get marketing emails and win-back offers only if they opt in, and do not get our cancellation or free-trial offers.
• Body weight — Core input for all fluid volume, electrolyte, and caloric calculations. Prescriptions are weight-dependent.

Physiological Self-Assessments

• Sweat level (1–9 scale) — Personalizes fluid volume recommendations based on your perceived sweat output.
• Saltiness of sweat (1–9 scale) — Personalizes sodium concentration recommendations based on your perceived sweat sodium content.
• Fitness level (1–9 scale) — Affects metabolic rate estimates and exercise capacity assumptions used in prescriptions.
• Satiety level (1–9 scale) — Adjusts intake timing and volume recommendations to match your fullness patterns.
• Craving level (1–9 scale) — Adjusts intake recommendations to account for appetite-related factors during exercise.
• Weight loss preference (1–9 scale) — Adjusts caloric recommendations to align with your body composition goals.

Sensitive Health Data

• Eating disorder flag (yes/no) — When indicated, this adjusts how recommendations are presented to avoid triggering content and applies a modified recommendation approach. This data is stored with the same security as all other health data and is never shared with third parties beyond our infrastructure provider (Google Cloud) and any coach you share your account with, who can see your profile.

Fueling Concerns and Symptoms

• Fueling concerns (gut distress, muscle cramps, faintness, heat tolerance, hunger, thirst, drinking resistance, performance) — Each concern adjusts specific aspects of your prescription. For example, gut distress triggers more conservative carbohydrate loading; muscle cramps increases sodium recommendations.

Nutritional Parameters

• Maximum carbohydrate intake range — Sets a safety ceiling to prevent recommendations that exceed your gut tolerance.
• Usual carbohydrate consumption — Establishes your baseline so recommendations progress gradually rather than causing gastrointestinal distress.

Activity and Performance Data

• Activity type, duration, intensity, and thermal stress — Required inputs for calculating fluid loss, electrolyte depletion, and caloric expenditure during exercise.
• Nutrition consumed during activity (carbohydrates, sodium, fluid): used to evaluate how closely you followed your prescriptions.
• User ratings and notes on activities: kept with the activity; if you share your account with a coach, your ratings are shown to your coach.
• Symptoms and sleep you log with an activity: kept with the activity and, if you share your account with a coach, shown in your coach's reports and alerts.
• Swim PR (personal record) — Used for performance calibration to scale exercise intensity estimates.

Location Data

• GPS coordinates: Your location, rounded to about 1 km, is sent to a weather service to obtain temperature, humidity, and heat index for your location; older versions of the app send it your precise coordinates. These environmental conditions directly affect sweat rate calculations. Your device's precise coordinates are not stored with your activity; we retain an approximate location (your city/region, rounded to roughly a one-kilometer area) with each activity so your weather-based fueling improves over time.
• Workout locations from connected platforms: If you connect TrainingPeaks, COROS, Polar, Suunto or Wahoo, we keep a copy of the workouts the platform sends us, which includes your route when your device recorded GPS, and for COROS, Polar, Suunto and Wahoo workouts we save the exact starting point with the activity (see our App Privacy Policy). If you are under 18, we keep neither your route nor the exact starting point, only a starting point rounded to about 1 km.

Third-Party Fitness Data (User-Initiated)

• TrainingPeaks data: Planned and completed workouts and profile information (name, email, weight, sex, birth month, time zone, preferred units, whether your account is Premium, and your TrainingPeaks coach's ID if you have a coach), synced when you connect your TrainingPeaks account via OAuth.
• Intervals.icu data: Planned and completed workouts with their data streams, and wellness data (heart rate variability, resting and sleeping heart rate, sleep, readiness, VO2 max, weight), synced when you connect your Intervals.icu account via OAuth.

Any activity platform you connect is covered in full by the Activity-Platform Integration Disclosure, which lists each platform, what we read, what we write back, and what disconnecting does.

Learning From Your Workouts (With Your Permission)

If you allow it in the app for TrainingPeaks, Polar, or Ride with GPS, we use that app's completed workouts (sport, date, duration, distance, climbing, effort, and heart rate) and what you log about them (what you ate and drank, how it felt, and any symptoms), keyed to an internal ID number rather than your name or email address, to train the models that predict how long workouts take and how much fuel they need. We ask only athletes 18 and over. You can turn it off for each app at any time in My Profile > Preferences; we then leave that app's workouts out of any training from then on. Models already trained stay in use. Details: Activity-Platform Integration Disclosure.

AI-Processed Data

• Nutrition label photos: When you photograph a nutrition label for scanning, the image is sent to an AI service to read the nutrition information. The extracted information is used to populate product data for your activity fuel planning. We keep the photo and the details read from it in our product database, with your account ID for up to 90 days and, after that, a random code that only a separate record links to your account.
• TrainingPeaks workout details: When the type and keywords of a connected TrainingPeaks workout do not tell us what kind of session it is, or how hard a strength session is, its title, description, pre-activity comment, tags, TSS calculation method, number of structured steps, whether it has power data, and, for strength and cross-training sessions, its workout type are sent to an AI service to identify the session.
• Saturday AI: When you use Saturday AI, the in-app assistant, your messages, the notes you wrote on your activities, and, as it needs them, your profile and weight, activities, symptoms, sleep, and fueling plans are sent to an AI service so it can answer you. When a coach you share your account with asks Saturday AI about you in the app, the coach's messages and, as it needs them, the same details about you that the coach can see are sent to it.
• Session summaries for coach reports: If you are on a coach's roster and your coach requests an AI-written fueling report or roster summary, a summary of your recent sessions (date, sport, duration, how closely you followed your fluid, carbohydrate, and sodium plan, your rating, sleep hours, and symptoms you reported) is sent to an AI service to write it. A roster summary also includes your name, or your email address when no name is set, if you are flagged as needing attention.

If we know you are in the European Economic Area, the United Kingdom, Switzerland, or Connecticut, we do not send your TrainingPeaks workout details or your session summaries to the AI service unless you give your permission in the app.

2. Categories of Sources of Consumer Health Data

• Directly from you — Profile setup, onboarding questionnaires, activity logging, in-app data entry, and photo scans you initiate.
• From your device — GPS coordinates (with your permission) for weather-based sweat calculations.
• From activity platforms you connect: TrainingPeaks, Intervals.icu, and the other platforms listed in the Activity-Platform Integration Disclosure, when you authorize the connection.

3. Categories of Consumer Health Data Shared

We share consumer health data with third parties only as necessary to operate the app and deliver your personalized prescriptions. We do not sell health data. We do not share health data for advertising purposes.

• All health data categories listed above — Shared with our cloud infrastructure provider for storage and processing (see Section 4).
• Sex, age group by decade (worked out from your year of birth), sports, fitness level, seriousness level, sweat level and saltiness, and a sample hourly fueling target (fluid, sodium, and carbohydrate) computed from your profile: Shared with our email communications provider so that the emails we send you are relevant to your sport and experience level.
• Your profile, activities, reports, and plans: Shared with a coach only when you choose to share your account with that coach, for as long as you share. With the permissions you give, your coach can also create and edit your activities and change your nutrition settings.
• Concerns from your sessions: If you share your account with a coach who turns on alerts, the alert emails our email delivery provider sends your coach can name a concern from your sessions, such as a nutrient that fell short or a symptom you reported.
• Your fuel plan: Sent to TrainingPeaks as a comment on your workout, and to Intervals.icu as a comment on your completed activity, only when you send it from an activity or turn on auto-send. On Intervals.icu, Saturday also sets the planned carbohydrates per hour on a planned workout's calendar entry when the entry has no figure or still holds the one Saturday set; it replaces a figure you or your coach entered only with your permission.
• GPS coordinates: Your location, rounded to about 1 km (precise coordinates in older versions of the app), is shared with a weather data provider to obtain local environmental conditions, and with your phone's built-in place lookup (Apple's on iPhone, Google's on Android) to find your city or region. We do not keep the coordinates we send; from this lookup, Saturday stores only an approximate (~1 km) location with the activity.
• Nutrition label photos, TrainingPeaks workout details, Saturday AI data, and session summaries for coach reports: Shared with Google's Gemini AI service, as described in Section 1, which processes them on our behalf and does not use them to train its models.

4. Third Parties and Affiliates Receiving Consumer Health Data

The following is a complete list of third parties that receive consumer health data from Saturday, identified by name and category:

Infrastructure Providers

• Google Cloud (Google LLC): Cloud infrastructure provider. All consumer health data is stored in Google Cloud Firestore and processed via Google Cloud services, including Vertex AI for the AI processing in Section 1 and Firebase for app analytics (which can include a workout's sport, duration, and intensity, and the hourly fluid, sodium, and carbohydrate targets shown when you search for a product). Google processes this data as a data processor on our behalf under a Data Processing Agreement.

Communications Providers

• Klaviyo, Inc.: Email communications platform. Receives sex, age group by decade (worked out from your year of birth), sports, fitness level, seriousness level, sweat level and saltiness, and a sample hourly fueling target (fluid, sodium, and carbohydrate) computed from your profile, so that product emails are relevant to your use of the app. The Klaviyo section of our App Privacy Policy lists everything else Klaviyo receives, such as your name and email address.
• Brevo (Sendinblue Inc.): Email delivery. If you share your account with a coach who turns on alerts, Brevo delivers the alert emails to your coach, which can name a concern from your sessions (Section 3).

Third-Party Fitness Platforms (User-Initiated Only)

• TrainingPeaks (Peaksware, LLC): Provides your planned and completed workouts and profile information; receives your fuel plan as a comment on your workout only when you send it or turn on auto-send. Only active when you connect your account.
• Intervals.icu: Provides your planned and completed workouts, their data streams, and wellness data; receives a comment with your fuel plan on your completed activity only when you send it or turn on auto-send, and the planned carbohydrates per hour on a planned workout's calendar entry, which Saturday sets when the entry has no figure or still holds the one Saturday set (replacing a figure you or your coach entered needs your permission). Only active when you connect your account.

Data Services (Transient Processing)

• OpenWeatherMap (OpenWeather Ltd): Receives your location rounded to about 1 km (precise GPS coordinates from older versions of the app) to return the weather forecasts used to calculate weather-adjusted sweat rates.
• Your phone's place lookup (Apple Inc. on iPhone, Google LLC on Android): Receives your location rounded to about 1 km (precise coordinates from older versions of the app) to name your city or region.

AI Processing

• Google Gemini on Vertex AI (Google LLC): Receives nutrition label photos when you scan a label, TrainingPeaks workout details when a workout does not tell us what kind of session it is or how hard a strength session is, the Saturday AI data described in Section 1 when you or a coach you share your account with uses Saturday AI, and session summaries when your coach requests an AI-written fueling report or roster summary. It returns the result to us. Google processes this data as our processor and does not use it to train its models. Google may keep a request and its response for up to 24 hours to speed up similar requests, and may keep a request its safety systems flag for up to 90 days, only for abuse and safety monitoring. These requests may be processed in Google data centers in any country.

Our processors handle consumer health data only on our written instructions and may not use it for their own purposes: Google Cloud (storage and computing) and Google's Gemini on Vertex AI (the AI features in Section 1). Klaviyo (Section 3) processes it for us on the same instructions, and may also use it in aggregated or de-identified form, which identifies no one, to improve its services.

Coaches You Choose

• Your coach: If you share your Saturday account with a coach, that coach can see your profile, your activities, and the reports and plans built from them for as long as you share, and, with the permissions you give, create and edit your activities and change your nutrition settings.

Affiliates

Saturday Inc. has no parent companies, subsidiaries, or corporate affiliates that receive consumer health data.

5. Your Rights Under the MHMDA

If you are a Washington state resident (or otherwise covered by the MHMDA), you have the following rights regarding your consumer health data:

Right to Confirm and Access

You have the right to confirm whether Saturday is collecting, sharing, or selling your consumer health data and to access that data.

Right to Withdraw Consent

You have the right to withdraw your consent to the collection and sharing of your consumer health data at any time. Withdrawal of consent may limit or eliminate our ability to provide personalized prescriptions.

Right to Delete

You have the right to request deletion of your consumer health data. You can delete your account in the app (My Profile, then Permanently Delete Your Account), and we delete your health data within 24 hours. Deleting your account also deletes the copy of the profile details our email provider holds (Section 3): we ask it to delete that copy within 24 hours. When you send us a verified deletion request by email, we delete your health data and instruct our processors to do the same. A fuel plan we posted to your TrainingPeaks or Intervals.icu workout stays there under your control; you can delete it on the platform at any time.

Disaster-recovery backups and dated copies: deleted data can remain for up to 84 days in our disaster-recovery backups, and for up to 100 days in our analytics warehouse, in the dated copies of our database we keep there for internal analysis and in the recovery copies Google BigQuery keeps, until they expire. We use the backups only to restore service after a failure and to carry out deletions, such as removing a platform's data from them. When we restore from one, we first list the account deletions, platform disconnections and activity deletions made since it was taken, and apply them again after the restore.

How to Exercise Your Rights

To exercise any of these rights, contact us by any of the following methods:

• Email: support@saturdaymorning.fit
• In the app: delete an activity, or delete your account from My Profile (Permanently Delete Your Account)

We will confirm receipt of your request within five (5) calendar days and respond substantively within forty-five (45) calendar days. If we need additional time, we will notify you of the reason and the expected completion date.

We will not discriminate against you for exercising any of these rights. However, withdrawal of consent for health data collection may prevent us from providing personalized fuel and hydration recommendations, as these recommendations depend on the data described in Section 1.

Right to Appeal

If we decline to take action on your request, we will inform you of the reason and provide instructions for how to appeal the decision. You also have the right to file a complaint with the Washington State Attorney General.

Changes to This Policy

If we make material changes to this Consumer Health Data Privacy Policy, we will notify you via email and/or in-app notification before the changes take effect and request renewed consent where required by law. If you are a Washington State resident or otherwise covered by the MHMDA, before we collect a new category of consumer health data or use it for a purpose this policy does not list, we will update this policy and ask for your consent.