Consumer Health Data Privacy Policy (United States)

Stappn Bilişim Teknolojileri Sanayi ve Ticaret Anonim Şirketi, Demetevler Mah. 362. Cad. Elif Sitesi B Blok No: 21 İç Kapı No: 50, Yenimahalle/Ankara, Türkiye. Contact: support@stappn.com, +90 533 161 10 00 Effective date: August 28, 2026

We may collect GLP-1 medication and injection-cycle information; side-effect, symptom, energy and well-being responses; weight, height and body measurements; joint or movement limitations; exercise capacity and history; sleep and stress responses; activity and workout records; hydration/protein logs; health-related coach messages; and optional step/activity data from a connected health service when enabled.

We obtain consumer health data directly from you, from your use of Stappn, from information you choose to enter in coach messages, and from device health services you separately authorize.

We use consumer health data to provide the Stappn service you request: tailoring movement plans, adjusting plan intensity using information you report, displaying progress, responding to your coach requests, and maintaining service security. We do not use consumer health data for advertising, profiling unrelated to the requested service, or data brokerage.

When necessary for requested functionality or when separately authorized, we may share limited consumer health data with: • Supabase, for secure database hosting and account-linked storage • Anthropic, for the AI coach only after the AI disclosure and permission • Cloudflare, only to the extent network/content delivery metadata is processed • Processors needed for security, support, or legal compliance and identified in our main Privacy Policy We do not sell consumer health data. We do not share it with advertising networks or data brokers. We do not use geofences around health-care facilities to identify, track, collect data from, or send messages to consumers.

You may ask whether we collect, share, or sell your consumer health data; access it; receive a list of third parties with whom it was shared; withdraw consent for future collection or sharing; and request deletion. A verified deletion request is sent to relevant processors and contractors. Data in archived or backup systems is deleted within the backup cycle and no later than six months after verification where Washington law applies. Submit a request through Profile → Privacy & My Data or email support@stappn.com. We may verify identity. If we deny a request, appeal by emailing support@stappn.com with "Consumer Health Data Appeal" in the subject line. We will not discriminate against you for exercising these rights.

Before collecting or sharing a new category of consumer health data, or using existing consumer health data for a new purpose, we will update this notice and obtain affirmative consent where required.