Consumer Health Data Privacy Policy
Last updated 2026-08-16.2
This policy covers consumer health data that TrainerCue collects, as defined by Washington's My Health My Data Act and similar laws. It is separate from our general Privacy Policy on purpose.
Categories of consumer health data we collect, and why
- Information identifying a person as seeking health-related services: being a lead, inquiry, or client of a fitness or health coach who uses TrainerCue, and, for coaches, being a provider and consumer of coaching services yourself. Collected to run the coach's CRM: pipeline, follow-ups, and scheduling.
- Health-related details a coach or an intake form records about a person: fitness goals, injuries or conditions mentioned in notes, intake question answers, and custom fields. Collected so the coach can deliver the coaching that was asked for.
- Messages that may contain health information: Instagram direct messages, including the audio of voice messages, and comments received by a connected coach account, which may include health details the sender chose to share. Collected solely to display the conversation to the coach, with voice messages playable, and let them reply; voice recordings are not analyzed or transcribed.
- Each category is used only to provide the service described, is not used for advertising, and is not sold.
Sources of consumer health data
- The coach who manages the workspace (typing in leads, notes, and custom fields, or importing a CSV).
- The person themselves, through a connected intake form, a Calendly booking, or an Instagram message or comment they sent.
- Meta Platforms, Inc., which delivers Instagram messages and comments for a connected account.
Categories of consumer health data we share
We share consumer health data only with the service providers that run the product's infrastructure, listed below, and with no one else. We do not sell consumer health data, and no data is shared with advertising platforms. TrainerCue has no affiliates.
- All workspace data, with Supabase Pte. Ltd. (database, authentication, and storage) and Vercel Inc. (application hosting).
- Email notification content (a lead's name and intake answers, delivered to the coach's own inbox), with Resend.
- Instagram replies a coach sends, with Meta Platforms, Inc., an independent company under its own policies.
- Calendar event titles and booking details, with Google LLC and Calendly, only for workspaces that connect those integrations.
- The full recipient list with contact mechanisms: Subprocessors.
How to exercise your rights
You can ask what consumer health data we hold about you, ask for a copy, withdraw consent, or ask us to delete it, whether or not you have a TrainerCue account. Submit a request at trainercue.com/privacy/request or email privacy@trainercue.com. We respond within 45 days. If we deny your request, you may appeal; if your appeal is denied, we provide a way to contact your state Attorney General.
Instagram message and comment content, voice-message audio included, is also deleted automatically after 90 days (the conversation's sender, timing, and reply-count record lasts until the coach disconnects Instagram, which deletes everything), without any request needed.