Legal
Consumer Health Data Privacy Policy
Version 2026-08-26 · effective 26/08/2026
Nymiva Consumer Health Data Privacy Policy
Effective date: 25 July 2026 Last updated: 26 August 2026
This Consumer Health Data Privacy Policy describes how Nymiva collects and shares consumer health data covered by the Washington My Health My Data Act and similar laws. It applies to a natural person acting in an individual or household context who is a Washington resident or whose consumer health data is collected in Washington. Rights provided by another applicable consumer-health law are also honoured as required by that law.
Nymiva is operated by:
Sole proprietorship / entreprise individuelle / eenmanszaak trading as Nymiva Zottegem, Belgium Email: [email protected]
1. Categories of consumer health data collected and purposes
Nymiva collects only the categories relevant to features you request or information you choose to provide.
| Category of consumer health data | Purposes for collection and use |
|---|---|
| Fitness profile and training goals, such as sport, experience, events, availability, equipment, preferred training schedule, and stated physical constraints | Create and administer your fitness profile; provide requested planning, calendar, tracking, and personalisation features |
| Workout and activity data, such as exercises, duration, distance, pace, speed, power, cadence, repetitions, load, rest, perceived effort, completed or skipped sessions, routes, elevation, and equipment usage | Record and display workouts; measure progress; calculate training metrics; adapt calendars and plans; provide requested analysis |
| Physiological and bodily-function information, such as heart rate, heart-rate variability, resting heart rate, respiration, oxygen saturation, temperature, sleep, recovery, energy expenditure, and similar sensor or user-provided measurements | Display and analyse metrics you choose to provide; calculate training zones, load, recovery, and readiness; personalise requested plans |
| Health-status information you choose to provide, such as injury, pain, illness, symptoms, disability, physical limitation, pregnancy-related constraints, menstrual-cycle information, medication-related exercise constraints, nutrition, hydration, stress, mood, and recovery information | Apply constraints you request; avoid or flag incompatible training suggestions; personalise the requested Service |
| Body and fitness measurements, such as age, sex where voluntarily provided, height, weight, fitness assessments, threshold values, training zones, and estimated fitness level | Configure metrics; calculate estimates; personalise training and progress information |
| Precise or approximate location and route information where you activate location features | Record or map an activity; calculate distance, pace, elevation, or route-related metrics; provide the location feature you request |
| Data imported from a wearable, sensor, health platform, calendar, fitness application, coach, or other connection you activate | Synchronise the connection; populate your account; provide the feature or disclosure you requested |
| AI Inputs and Outputs containing or revealing health information | Generate, explain, summarise, or adapt a plan or calendar at your request; investigate feedback or a reported safety issue |
| Inferences generated from other data, such as training load, fatigue, readiness, recovery needs, predicted performance, and plan suitability | Provide requested analysis, personalisation, and AI-assisted planning |
Nymiva may also process the minimum consumer health data necessary to protect account and system security, detect fraud or illegal activity, comply with a valid legal requirement, or establish or defend legal rights, to the extent permitted by applicable law.
Nymiva will not collect or use an additional category of consumer health data, or use consumer health data for an additional purpose, without first updating the required disclosure and obtaining affirmative consent where required.
2. Categories of sources
Nymiva collects consumer health data from:
- you, when you configure your profile, log a workout, enter a note, answer a planning question, submit an AI Input, communicate with support, or otherwise provide information;
- devices and integrations you activate, such as wearables, sensors, health platforms, fitness applications, calendars, or mapping services;
When you connect an application or devices, such as Strava, an Apple Watch or Garmin device with our Services to capture health data, track your activity, or utilize other similar features available on your device, you will provide us with information about the device and may choose to share additional device information with us.
- a Connected Party you authorise, such as a coach or trainer permitted to add information to your account;
- your browser, device, or application, when a requested feature records location, activity, or technical information under your permissions; and
- Nymiva’s calculations and AI features, which derive or infer training, performance, readiness, recovery, or plan-suitability information from the data above.
3. Categories of consumer health data shared
Depending on the connection or disclosure you request, Nymiva may share the following categories:
- fitness profile, goals, training preferences, and stated constraints;
- workout, activity, calendar, performance, and route data;
- physiological metrics, health-status information, body and fitness measurements;
- AI Inputs, Outputs, and related inferences; and
- imported data and information identifying the source integration.
Nymiva shares these categories only when:
- you connect and direct Nymiva to provide the data to a coach, trainer, club, team, healthcare professional, family member, or another Connected Party;
- you activate an outbound integration and direct Nymiva to send data to that service; or
- another disclosure is authorised or required by applicable law.
Service providers that process consumer health data solely on Nymiva’s documented instructions to deliver the requested Service are contractually restricted to that purpose. Information about those processors appears in the general Nymiva Privacy Policy and at https://nymiva.com/legal/subprocessors.
4. Third parties and specific affiliates
The categories of third parties with whom Nymiva may share consumer health data are:
- a coach, trainer, club, team, healthcare professional, family member, or other Connected Party selected by you;
- a wearable, health platform, fitness application, calendar, mapping service, or other integration selected by you when Nymiva sends data back to that service;
- a weather data service, for the weather shown on your calendar and event pages. Nymiva sends one location, rounded to about one kilometre, together with the dates in question to OpenWeather Ltd in the United Kingdom. For an event this is the starting point of a course you added. For the calendar it is a point derived from where your recent activities began, rounded before it leaves Nymiva. Nothing identifying you is sent with the request. The United Kingdom holds a European Commission adequacy decision covering this transfer, and every training feature works without weather.
- a public map-data service, when you add a course or event route. To determine the terrain surface of a route you add, Nymiva sends up to 25 sampled coordinates from that route to the OpenStreetMap Overpass API (
overpass-api.de, andoverpass.kumi.systemsonly when the first is unavailable), both operated in the European Union. Nothing identifying you is sent with the request: the service receives points on a map and returns what is at those points. This lookup happens only for a route you choose to add, and every other feature works without it; and - a lawful recipient where disclosure is authorised or required by applicable law.
Specific affiliates with whom Nymiva shares consumer health data: None. Nymiva is operated as a Belgian sole proprietorship and has no parent, subsidiary, or commonly controlled entity of any kind, so there is no affiliate for consumer health data to reach.
Nymiva does not sell consumer health data, and nothing in how it operates amounts to a sale. Every provider named above is paid BY Nymiva to perform a service on its instructions; none receives data in exchange for money or other valuable consideration flowing to Nymiva. Nymiva runs no advertising, carries no third-party advertising or tracking technology, and has no data-sharing arrangement with any advertiser or data broker.
4a. How long consumer health data is kept
Nymiva keeps consumer health data while your membership is active, and for three months after it ends. If you have not started a membership again by then, the data is deleted permanently. Nymiva emails you 14 days before that date, naming the day it will happen.
You can delete it sooner yourself, at any time, through Settings -> Data & privacy, or by asking through the request routes in Section 5.
Deletion from archived or backup systems may be delayed where the law permits, and for a Washington request that delay will not exceed six months after authentication.
5. Your consumer health data rights
Subject to applicable law, you may:
- confirm whether Nymiva is collecting, sharing, or selling consumer health data about you;
- access that consumer health data;
- obtain a list of third parties and affiliates with whom it was shared or sold, together with an active email address or other online contact method for those recipients;
- withdraw consent to future collection or sharing; and
- request deletion of your consumer health data.
For a deletion request, Nymiva will delete covered data from its records and notify relevant affiliates, processors, contractors, and third parties as required. Deletion from archived or backup systems may be delayed where the law permits, but for Washington requests that delay will not exceed six months after authentication.
Submit a request at any time through:
You do not need to create a new account. If you already have one, Nymiva may ask you to use its secure authentication. Nymiva may request additional information reasonably necessary to authenticate you and the request.
Nymiva responds without undue delay and, for a Washington request, within 45 days after receipt. Where reasonably necessary, that period may be extended once by another 45 days after timely notice explaining the reason. Information is provided free up to twice annually, subject to the rules for manifestly unfounded, excessive, or repetitive requests.
If Nymiva refuses to act, you may appeal through [email protected]. Nymiva will respond to a Washington appeal in writing within 45 days. If the appeal is denied, the response will explain how to contact the Washington State Attorney General at <https://www.atg.wa.gov/file-complaint>.