Consumer health data notice
Last updated: July 8, 2026
This notice describes how Asperia handles consumer health data in the paid public product where a state consumer health privacy law applies. It supplements the Privacy Notice and does not limit additional rights available under applicable law. Mexico users must give express consent before sensitive personal data is processed for the stated coaching purpose. ARCO requests for access, rectification, cancellation, and opposition can be made through the privacy channel.
Categories collected
Training plans, workouts, goals, event details, readiness, sleep or recovery metrics, nutrition preferences, injury or condition notes, medications or allergies you choose to provide, uploaded document content, imported provider records, and generated coaching context.
Purposes
Account operation, coaching drafts, safety guardrails, document processing, provider import, user export and deletion, security monitoring, support, abuse prevention, and legal obligations.
Sources
You, uploaded files, manual imports, connected providers you authorize, generated plan workflows, and service logs needed to operate and secure Asperia.
Sharing
Service providers needed for hosting, database, storage, security scanning, worker processing, alerting, email or SMS, connected providers you choose, and server-side OpenAI plan generation when enabled. We do not sell consumer health data.
Rights
You can request access, correction, deletion, consent withdrawal, opposition, and information about sharing. ARCO requests for access, rectification, cancellation, and opposition can be made through the privacy channel. Use in-product account controls where available or email privacy@asperia.app.
Retention
Active account data is kept while your account is active unless deleted sooner. Account exports expire after seven days. Account deletion removes user-prefixed objects and account rows, with restricted tombstones retained to prevent deleted data from reappearing after backup restore.
Asperia does not use geofences around in-person health care facilities to identify or track consumers, collect consumer health data, or send health-related messages.