Consumer Health Data

This is a separate document from our general Privacy page because several states require it to be. It describes health data specifically: what we collect, why, where it goes, and how to make us delete it.

What counts as health data here

Everything you answer in the intake. What you want to be able to do, how many days a week you can train, where you are starting from, your frame and age range, the symptoms and conditions safety screen, the questions about food, anything you type about allergies or how you eat, and any medicines you name. If you use the scan, the observations it produces count too.

Why we collect it

To build your plan, and to refuse to build one when your answers say a clinician should be involved first. That is the whole purpose. It is not used to decide what to put in front of you in the shop, what to charge you, or who to advertise to. Those are not policies, they are automated tests that stop a release.

Where it comes from

You, directly, typed or tapped into this site. We do not buy health data, receive it from data brokers, infer it from your browsing, or obtain it from any third party.

How it is stored

Your health answers are stored separately from your name and email, under different keys, so that neither record identifies you on its own. Nothing you answer reaches our servers at all until you agree at the end of the questions: until then it lives in your own browser and is wiped when a plan is built.

Who we share it with

Nobody, for any purpose of theirs. It is never sold, never shared for advertising, never used to train a model, and never disclosed to a data broker. Four service providers process data on our instructions and may not use it for anything else:

• Cloudflare hosts this site and stores its data.
• Anthropic processes a scan photograph, if you choose to take one, to produce the observations you see. The image is sent, read, and not retained by us.
• Resend sends your plan to your email address. It receives your name, your address and the document, and no answer from the safety screen.
• Stripe handles payment if you subscribe. It receives no health data of any kind.

The scan, specifically

If you use the live outline, the pose model runs entirely inside your browser and no frame from your camera is ever sent anywhere. That is enforced by this site's content security policy rather than promised: the model's own vendor telemetry is blocked by it, and every network request a scan makes goes to mdrnvitality.com and nowhere else.

The photograph you take for observations is sent to the model provider we use, read once, and never written to storage here: MDRN does not keep it, log it, or hold it in any form. The provider deletes it within thirty days and does not train on it. We would rather tell you that than say it vanishes, because the honest boundary is that we control what we keep and they publish what they keep. What survives here is four to seven lines of text describing what was visible, and those change your movement pages only. Nothing derived from any image is ever used to identify anyone, and no facial or hand geometry is captured at any point: those landmarks are discarded before anything is drawn or sent. If you turn on a progress timeline as a member, your photographs are stored, you can see every one, deleting one deletes it for good, and deleting your account deletes all of them.

How long we keep it

Your plan and the answers behind it stay until you delete them. Observations from a scan are kept no longer than 24 months from your last interaction. A plan built but never claimed is deleted after six hours.

Your rights

You can see everything we hold, take a copy of it, and delete all of it, from the app, at any time, without asking us and without explaining why. Deletion is real deletion, not a flag on a row. If you have not made a plan and want to be sure we hold nothing, email hello@mdrnvitality.com and we will confirm. We do not charge for any of this, we do not require an account to ask, and we will never treat you differently for asking.

Withdrawing consent. You can withdraw your consent to us collecting and sharing your consumer health data at any time, and you do not have to delete your account to do it. Turning the scan off in the app withdraws it for images. Deleting your plan withdraws it for everything else. Either way you can also just email hello@mdrnvitality.com and say so in one line. Withdrawing consent stops collection and sharing from that moment; it does not by itself erase what we already hold, so if you want that gone too, use delete, which is one press and takes everything.

If we say no. We answer any request about your health data within 45 days. If we refuse one, we will tell you why in writing, and you can appeal by replying to that message or writing to hello@mdrnvitality.com with the word appeal in the subject. An appeal is read by a person, not a filter. We will tell you in writing what we decided and why, within 45 days of receiving it. If we turn the appeal down you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

What we will not do

We will not use a geofence around any health facility. We will not sell health data, which several of these laws prohibit outright regardless of consent. We will not let anything you tell us about your body change what we try to sell you.

Last updated 3 September 2026. This page describes what the software actually does. If you find a sentence here that the product does not keep, that is a defect and we want to hear about it.