Consumer Health Data Privacy Policy

Version 2026-11-03 · Effective November 3, 2026

Consumer health data we collect, and why

This policy is for consumers in Washington State, under Washington's My Health My Data Act (RCW 19.373). Beacon Digital, LLC ("we", "us") collects the consumer health data below through the CYA Running app, for the purposes shown. We collect runs because showing your running history is the service you ask for. We keep heart rate and sleep only if you consent; without your consent, any that reaches us is discarded as it arrives. We will ask for your consent before we collect a new kind of consumer health data or use it for a new purpose.

• Runs from your watch (required): type, time, duration, distance, speed and pace, elevation, climb and descent, GPS route, cadence, laps and pauses, recorded through the run, as your watch provides them. We use them to show and keep your running history: your calendar, run details, the map of your route, charts, splits and grade-adjusted pace; to fill in plan setup with your last four weeks of running and the days you usually run, which you can change; and to work out your weekly running totals for the last 12 weeks, which our software uses with your plan setup answers to write your plan, as it does the runs you've recorded so far that week when your plan starts partway through one, and, for the plan after a race, your longest run from the 12 weeks before that race, with its time.
• Heart rate during runs (optional, with your consent): the readings through each run, and each run's and lap's average and maximum. We use it to show heart rate on your runs.
• Daily heart rate, resting heart rate, sleep (duration, stages and naps) and heart rate variability (optional, with your consent), as your watch provides them. We keep them so a later version of the app can use recovery signals in your coaching. Today we do not use them for anything else.
• Profile details you choose to give: age, known maximum heart rate, weight, sex and race times. We use your race times to work out pace targets, and your maximum heart rate, or your age if you gave no maximum, to work out heart-rate targets. We keep weight and sex so a later version of the app can use them to size the load of your training and to read effort from your heart rate; today we do not use them for anything else.
• Plan setup answers about your running: your last four weeks of running, the days you run, your races, their courses, whether each is a main race or a tune-up, what you want from each, and the days you tell us you can't run (time off; we never ask why). The app can fill in the first two from your runs, and what you keep is your answer. We use them to write your training plan.
• What the app works out: grade-adjusted pace and splits, from your runs; your last four weeks of running and the days you usually run, from your runs, to fill in plan setup; your running distance and time for each of the last 12 weeks, from your runs, one total a week, to write your plan with your plan setup answers; workout targets, from your race times, maximum heart rate or age; and your training plans, from your plan setup answers and those weekly totals. We use them to show your runs and to coach you.
• Records of your consent choices. We use them to carry out your choices and to show what you agreed to.

Where it comes from

• From you, in the app: your profile details, plan setup answers and consent choices.
• From your watch, through Stridee: your runs, including the heart rate recorded in each run's file, and notices of your daily health summaries, from your Garmin or COROS account or from Apple Health on your iPhone. If you have not consented to heart rate and sleep, we discard the heart rate and the summaries as they arrive and keep none of them.
• If you connect Apple Watch, from Apple Health on your iPhone, through Stridee's software in the app: your workouts, as you allow on iOS's Apple Health screen. Only if you have consented to heart rate and sleep, also what you allow there of resting heart rate, heart rate, heart rate variability, sleep, steps, distance, energy, flights climbed, exercise minutes, VO2 max, breathing rate, blood oxygen, weight, body fat, BMI, blood pressure and wrist temperature; without that consent, none of these leave your phone. It goes from your phone to Stridee, which holds it for us. We keep only what this policy lists above. Stridee's notices of the other kinds, which include their values, also reach our servers; we discard them as they arrive and keep only a note of each one's type and date. You choose each kind on that screen and can turn any off in iOS Settings.
• From our own software, which works out the values described above.

Consumer health data we share, and with whom

We do not sell consumer health data. We have no affiliates.

We share consumer health data with two categories of third party, only as needed to provide what you ask for:

• The company of the watch you connect, at your direction. While your watch is connected and Send workouts to my watch is on, we send the next 7 days of your plan, and race days when they fall in them, to your own Garmin or COROS account, or to your Apple Watch through the app on your iPhone, with pace ranges worked out from your race times. No heart rate, age, weight or sex is sent. You can turn this off in the app at any time.
• Google, which draws the map of your route when you open a run's details, because the map cannot be shown without it. Your phone asks Google for the map of the area on your screen, which is the area around your route. Google handles those requests under its own privacy policy.

Service providers that process it for us

These service providers process consumer health data for us, only to run CYA Running:

• Supabase, our database and file storage, in Northern Virginia, USA: all of the data above.
• Railway, which runs our servers in Virginia, USA: all of the data above, as it is processed.
• Cloudflare, which carries all traffic between the app and our servers: all of the data above, as it passes between them.
• Stridee, based in Zürich, Switzerland, which connects your watch: it receives whatever your Garmin, COROS or Apple Health permissions allow, holds it and passes it to us; it also passes your planned workouts to your watch.

How to use your rights

You can use each right below in the app, or by emailing AustinLHelton@gmail.com. We will not treat you differently for using any of them.

• Confirm and access: you can ask whether we collect, share or sell your consumer health data, and get a copy of it. Profile, Export my data gives you a copy, except our private records of plan attempts, which you can ask us for by email. When you ask, we will also give you a list of everyone we have shared your consumer health data with, and a way to contact each of them.
• Withdraw consent: Profile, Heart rate and sleep turns off optional collection and deletes the heart rate and sleep data we hold. With Apple Watch, your iPhone stops sending those kinds to Stridee by the next time the app starts; we discard any that arrive before then. Profile, Send workouts to my watch stops sharing your plan with your watch. With Apple Watch, iOS Settings turns off any kind of Apple Health data. Run data is required to use CYA Running; to stop it, disconnect your watch in Profile to stop new runs, or delete your account.
• Delete: Profile, Delete my account deletes your account and all your consumer health data in our systems. We also delete every workout we sent at Stridee and ask your watch to remove them: COROS keeps ones dated before today or already done, and on an Apple Watch they come off when the app stops Stridee's software. We then end your connection at Stridee, which ends our access to anything Stridee holds; what Stridee keeps after that falls under its own policies. Before this version of the policy took effect, plans could also be written by AI model providers, reached through OpenRouter, some of them outside the United States, which received plan setup answers, weekly running totals and the runs recorded so far that week, with nothing that identifies you, so there is nothing we can ask them to delete. The map requests your phone sent Google are kept under Google's own policy; we hold no copy of them and deleting your account does not reach them. Deleted data can remain in our database backups for up to 7 days, until those backups expire.
• Requests by email: we will check that a request comes from you, for example by asking you to write from your account's email address. We respond within 45 days of receiving it. If we need longer, we will tell you why within those 45 days and take at most 45 more.
• Appeal: if we turn down a request, you can appeal by replying to our answer or by emailing us with the subject "Appeal". We will answer your appeal in writing within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.