— Legal —
— Legal —
Diagofit Consumer Health Data Privacy Policy
Diagofit Consumer Health Data Privacy Policy
Diagofit Consumer Health Data Privacy Policy
Effective date: October 30, 2026 · Version: 2026-10-30
Effective date: October 30, 2026 · Version: 2026-10-30
This policy explains how Diagofit LLC (“Diagofit”, “we”, “us”) collects, uses, shares and protects consumer health data through the Diagofit iPhone app and app.diagofit.com (the “Service”), and how you can exercise your rights over it. It is written to meet state consumer health data laws such as Washington’s and Nevada’s, and we apply it to every Diagofit user, wherever they live.
This policy explains how Diagofit LLC (“Diagofit”, “we”, “us”) collects, uses, shares and protects consumer health data through the Diagofit iPhone app and app.diagofit.com (the “Service”), and how you can exercise your rights over it. It is written to meet state consumer health data laws such as Washington’s and Nevada’s, and we apply it to every Diagofit user, wherever they live.
It adds to our Privacy Policy (diagofit.com/privacy), which covers all personal information. If the two differ on health data, this policy applies.
It adds to our Privacy Policy (diagofit.com/privacy), which covers all personal information. If the two differ on health data, this policy applies.
“Consumer health data” (or “health data”) means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status.
“Consumer health data” (or “health data”) means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status.
1.
1.
Health data we collect
Health data we collect
Category
Category
What it includes
What it includes
Protocol and medication information
Protocol and medication information
The protocol your coach sets for you: compounds or medications, doses, routes, schedules and phases. Doses you log or skip, injection sites, post-injection pain scores, and the supplies you track.
The protocol your coach sets for you: compounds or medications, doses, routes, schedules and phases. Doses you log or skip, injection sites, post-injection pain scores, and the supplies you track.
Symptoms
Symptoms
Symptoms you report, the days they happened, how much they affected you and any compound you think caused them.
Symptoms you report, the days they happened, how much they affected you and any compound you think caused them.
Vital signs and body measurements
Vital signs and body measurements
Blood pressure, pulse, resting heart rate, weight, body fat percentage and circumference measurements.
Blood pressure, pulse, resting heart rate, weight, body fat percentage and circumference measurements.
Bloodwork
Bloodwork
Lab requests, uploaded lab reports and the biomarker results entered from them (for example hormones, blood counts, lipids, liver and kidney markers).
Lab requests, uploaded lab reports and the biomarker results entered from them (for example hormones, blood counts, lipids, liver and kidney markers).
Images
Images
Progress photos, and meal photos you choose to take.
Progress photos, and meal photos you choose to take.
Nutrition
Nutrition
Foods and meals you log, your daily calorie and macronutrient totals (including totals imported from Apple Health), and the targets and plans your coach sets.
Foods and meals you log, your daily calorie and macronutrient totals (including totals imported from Apple Health), and the targets and plans your coach sets.
Forms and check-ins
Forms and check-ins
Answers to onboarding, weekly check-in and daily habit forms, such as mood, energy, sleep, stress and side effects, and your coach's feedback on them.
Answers to onboarding, weekly check-in and daily habit forms, such as mood, energy, sleep, stress and side effects, and your coach's feedback on them.
Sleep and activity data
Sleep and activity data
From Apple Health, if you connect it: steps, active energy, resting heart rate, heart rate variability and sleep.
From Apple Health, if you connect it: steps, active energy, resting heart rate, heart rate variability and sleep.
Training data that can reflect health
Training data that can reflect health
Workouts and sets you log, and notes about pain or injury.
Workouts and sets you log, and notes about pain or injury.
Alerts
Alerts
Automatic flags created for your coaching team when a reading, result or symptom crosses a threshold the team has set.
Automatic flags created for your coaching team when a reading, result or symptom crosses a threshold the team has set.
Health data in messages and posts
Health data in messages and posts
Anything about your health that you write in a message, voice note, post or comment.
Anything about your health that you write in a message, voice note, post or comment.
Inferences
Inferences
Notes and assessments your coaching team records about your progress and health while coaching you.
Notes and assessments your coaching team records about your progress and health while coaching you.
We do not collect precise location data, genetic data or biometric identifiers (such as face or fingerprint templates). We remove location and other hidden metadata from every image you upload, and we don't use your health data to infer anything for advertising.
We do not collect precise location data, genetic data or biometric identifiers (such as face or fingerprint templates). We remove location and other hidden metadata from every image you upload, and we don't use your health data to infer anything for advertising.
2.
2.
Where it comes from
Where it comes from
You, when you log, upload, answer forms or send messages.
You, when you log, upload, answer forms or send messages.
Your Diagofit coaching team, when they set your plans and protocol, record results from a lab report, or write notes and feedback.
Your Diagofit coaching team, when they set your plans and protocol, record results from a lab report, or write notes and feedback.
Apple Health on your iPhone, only if you connect it.
Apple Health on your iPhone, only if you connect it.
Circle and Trainerize, if you were a client before the Service launched and we moved your history over.
Circle and Trainerize, if you were a client before the Service launched and we moved your history over.
3.
3.
Why we collect and use it
Why we collect and use it
We collect and use health data only to provide the coaching service you asked for and to run the Service safely:
We collect and use health data only to provide the coaching service you asked for and to run the Service safely:
to show you your plans and record your progress;
to show you your plans and record your progress;
for your coaching team to review your progress, adjust your training, nutrition and protocol, ask for bloodwork, and respond to check-ins and messages;
for your coaching team to review your progress, adjust your training, nutrition and protocol, ask for bloodwork, and respond to check-ins and messages;
to send you reminders and to alert your coaching team to readings that need attention;
to send you reminders and to alert your coaching team to readings that need attention;
to keep the Service safe and secure, and to keep records of who accessed your data;
to keep the Service safe and secure, and to keep records of who accessed your data;
for the optional AI meal photo analysis, if you choose to use it (see Section 5); and
for the optional AI meal photo analysis, if you choose to use it (see Section 5); and
to comply with the law.
to comply with the law.
We do not use health data for advertising or marketing, we do not sell it, and we do not use data from Apple Health for anything other than providing the Service to you.
We do not use health data for advertising or marketing, we do not sell it, and we do not use data from Apple Health for anything other than providing the Service to you.
Alerts are not emergency monitoring. Your coaching team is not watching your data around the clock, and an alert may not be seen right away. If you think you’re having a medical emergency, call 911 or your local emergency number.
Alerts are not emergency monitoring. Your coaching team is not watching your data around the clock, and an alert may not be seen right away. If you think you’re having a medical emergency, call 911 or your local emergency number.
4.
4.
Your consent
Your consent
To collect and use your health data to provide coaching, we ask for your consent when you create your account, separately from accepting our Terms. Using health data this way is necessary to provide the coaching you asked for.
To collect and use your health data to provide coaching, we ask for your consent when you create your account, separately from accepting our Terms. Using health data this way is necessary to provide the coaching you asked for.
Your coaching team sees the health data you log. We tell you this at signup. Diagofit staff are part of Diagofit, not a separate third party.
Your coaching team sees the health data you log. We tell you this at signup. Diagofit staff are part of Diagofit, not a separate third party.
Apple Health data is shown to your coaching team only if you turn on Apple Health sharing.
Apple Health data is shown to your coaching team only if you turn on Apple Health sharing.
AI meal photo analysis sends a meal photo to our AI provider only after you agree in the app.
AI meal photo analysis sends a meal photo to our AI provider only after you agree in the app.
You can withdraw any of these consents at any time in Profile → Consents in the app, on the Account page of the website, or by emailing us. If you withdraw consent to the collection of health data altogether, we can no longer provide coaching through the Service: you can still download your data or delete your account, and you can give consent again to continue.
You can withdraw any of these consents at any time in Profile → Consents in the app, on the Account page of the website, or by emailing us. If you withdraw consent to the collection of health data altogether, we can no longer provide coaching through the Service: you can still download your data or delete your account, and you can give consent again to continue.
We will ask for your consent again before we collect or share health data for any new purpose.
We will ask for your consent again before we collect or share health data for any new purpose.
5.
5.
Who we share it with
Who we share it with
We share health data only as follows.
We share health data only as follows.
Within Diagofit. Your assigned coaching team (primary coach, any secondary coach and your client success manager) and Diagofit’s head coaches, admins and owner can see your health data so they can coach you. Every time a staff member opens a client’s health records, it is recorded. Staff with moderation or oversight rights can also read messages and posts, which may contain health information you wrote.
Within Diagofit. Your assigned coaching team (primary coach, any secondary coach and your client success manager) and Diagofit’s head coaches, admins and owner can see your health data so they can coach you. Every time a staff member opens a client’s health records, it is recorded. Staff with moderation or oversight rights can also read messages and posts, which may contain health information you wrote.
Service providers (processors) that handle health data on our behalf, only to provide their service to us and under contract:
Service providers (processors) that handle health data on our behalf, only to provide their service to us and under contract:
Provider
Provider
Role
Role
Health data involved
Health data involved
Contact
Contact
Render Services, Inc.
Render Services, Inc.
Hosting and database (Virginia, US)
Hosting and database (Virginia, US)
All health data
All health data
Cloudflare, Inc. (R2)
Cloudflare, Inc. (R2)
File storage
File storage
Progress photos, meal photos, lab report files, and attachments you send
Progress photos, meal photos, lab report files, and attachments you send
OpenAI OpCo, LLC
OpenAI OpCo, LLC
Meal photo analysis, only when you use it
Meal photo analysis, only when you use it
The meal photo and your optional note about it. Not used for training; kept by OpenAI for up to 30 days for abuse monitoring, then deleted. Never Apple Health data
The meal photo and your optional note about it. Not used for training; kept by OpenAI for up to 30 days for abuse monitoring, then deleted. Never Apple Health data
Google LLC (Firebase Authentication and Cloud Messaging)
Google LLC (Firebase Authentication and Cloud Messaging)
Sign-in and push notifications
Sign-in and push notifications
None. Push messages are worded neutrally and contain no health details
None. Push messages are worded neutrally and contain no health details
Functional Software, Inc. d/b/a Sentry
Functional Software, Inc. d/b/a Sentry
Error and uptime monitoring
Error and uptime monitoring
Configured not to receive health data; IP addresses not stored
Configured not to receive health data; IP addresses not stored
PostHog Inc.
PostHog Inc.
Usage analytics
Usage analytics
Not sent health data
Not sent health data
Plus Five Five, Inc. (Resend)
Plus Five Five, Inc. (Resend)
Sends sign-in links and invitations
Sends sign-in links and invitations
None. It receives only your email address and the email, which contains no health details
None. It receives only your email address and the email, which contains no health details
Affiliates: Diagofit has no affiliates that receive health data.
Affiliates: Diagofit has no affiliates that receive health data.
When the law requires it, or to prevent serious harm. We may disclose health data to comply with a valid legal process, such as a subpoena, court order or warrant, or when we believe in good faith it’s needed to prevent death or serious physical harm. Unless the law or circumstances prevent it, we will tell you first.
When the law requires it, or to prevent serious harm. We may disclose health data to comply with a valid legal process, such as a subpoena, court order or warrant, or when we believe in good faith it’s needed to prevent death or serious physical harm. Unless the law or circumstances prevent it, we will tell you first.
We do not:
We do not:
sell health data;
sell health data;
share health data with advertisers, data brokers or social media platforms;
share health data with advertisers, data brokers or social media platforms;
let any third party collect health data about your activity across other companies’ websites or apps through the Service;
let any third party collect health data about your activity across other companies’ websites or apps through the Service;
send Apple Health data to any AI service.
send Apple Health data to any AI service.
If we ever wanted to sell health data, we would first need your separate, signed authorization, as the law requires. We have no plans to do this.
If we ever wanted to sell health data, we would first need your separate, signed authorization, as the law requires. We have no plans to do this.
6.
6.
Your rights
Your rights
You have the right to:
You have the right to:
Confirm whether we collect, share or sell your health data;
Confirm whether we collect, share or sell your health data;
Access your health data, and get a list of all third parties and affiliates we have shared it with, with their contact details;
Access your health data, and get a list of all third parties and affiliates we have shared it with, with their contact details;
Delete your health data. We will also tell our service providers to delete it. Data in backups is deleted when those backups are overwritten, within 30 days;
Delete your health data. We will also tell our service providers to delete it. Data in backups is deleted when those backups are overwritten, within 30 days;
Withdraw consent to our collection or sharing of your health data;
Withdraw consent to our collection or sharing of your health data;
Correct health data that is wrong;
Correct health data that is wrong;
Get a copy in a portable format; and
Get a copy in a portable format; and
Appeal if we turn down your request.
Appeal if we turn down your request.
How to make a request:
How to make a request:
Withdraw consent: Profile → Consents in the app, or the Account page of the website.
Withdraw consent: Profile → Consents in the app, or the Account page of the website.
Get a copy: Profile → Account → Download my data in the app, or Account → Download my data on the website.
Get a copy: Profile → Account → Download my data in the app, or Account → Download my data on the website.
Delete your account and health data: Profile → Account → Delete account in the app, or Account → Delete account on the website.
Delete your account and health data: Profile → Account → Delete account in the app, or Account → Delete account on the website.
Anything else: email info@diagofit.com with the subject “Health data request”. We’ll verify your identity using the email address on your account. You can use an authorized agent; we’ll ask for proof that you authorized them.
Anything else: email info@diagofit.com with the subject “Health data request”. We’ll verify your identity using the email address on your account. You can use an authorized agent; we’ll ask for proof that you authorized them.
Timing: we will answer within 45 days of receiving a verified request. If we need more time, we’ll tell you why within those 45 days, and may extend by up to another 45 days.
Timing: we will answer within 45 days of receiving a verified request. If we need more time, we’ll tell you why within those 45 days, and may extend by up to another 45 days.
Appeals: if we decline your request, we’ll tell you why and how to appeal. Reply to our decision with the subject “Health data appeal” within 45 days, and we will answer within 45 days, explaining what we did and why. If your appeal is denied, you can contact the Attorney General of your state. Washington residents can file a complaint at atg.wa.gov; Nevada residents can contact the Nevada Attorney General at ag.nv.gov.
Appeals: if we decline your request, we’ll tell you why and how to appeal. Reply to our decision with the subject “Health data appeal” within 45 days, and we will answer within 45 days, explaining what we did and why. If your appeal is denied, you can contact the Attorney General of your state. Washington residents can file a complaint at atg.wa.gov; Nevada residents can contact the Nevada Attorney General at ag.nv.gov.
We won't charge you or treat you differently for exercising these rights. We may refuse requests that are manifestly unfounded or excessive, or charge a reasonable fee where the law allows, and we'll explain why.
We won't charge you or treat you differently for exercising these rights. We may refuse requests that are manifestly unfounded or excessive, or charge a reasonable fee where the law allows, and we'll explain why.
7.
7.
How we protect it
How we protect it
Health data is stored in a separate, restricted part of our database, apart from other data.
Health data is stored in a separate, restricted part of our database, apart from other data.
It is encrypted in transit and at rest. Health files are kept in private storage and can only be opened through short-lived links.
It is encrypted in transit and at rest. Health files are kept in private storage and can only be opened through short-lived links.
Staff access is limited by role, and staff views of health records are logged.
Staff access is limited by role, and staff views of health records are logged.
Health data is kept out of push notifications, analytics and error reports.
Health data is kept out of push notifications, analytics and error reports.
Diagofit is not a healthcare provider, health plan or healthcare clearinghouse, and does not bill insurance, so HIPAA generally doesn't apply to us. We protect your health data under this policy and the laws that do apply, and we will notify you and the authorities of a breach as the law requires.
Diagofit is not a healthcare provider, health plan or healthcare clearinghouse, and does not bill insurance, so HIPAA generally doesn't apply to us. We protect your health data under this policy and the laws that do apply, and we will notify you and the authorities of a breach as the law requires.
8.
8.
How long we keep it
How long we keep it
We keep health data while your account is open and for 12 months after your coaching ends, then delete it. When your coaching ends, you keep read-only access for 30 days, after which we close your account. You can delete your health data sooner by deleting your account, which removes it within 30 days. Disconnecting Apple Health stops new syncing but keeps what was already synced; to delete that, email info@diagofit.com or delete your account. Our Privacy Policy (Section 8) lists all retention periods.
We keep health data while your account is open and for 12 months after your coaching ends, then delete it. When your coaching ends, you keep read-only access for 30 days, after which we close your account. You can delete your health data sooner by deleting your account, which removes it within 30 days. Disconnecting Apple Health stops new syncing but keeps what was already synced; to delete that, email info@diagofit.com or delete your account. Our Privacy Policy (Section 8) lists all retention periods.
9.
9.
Changes
Changes
If we change this policy in a way that affects how we collect, use or share health data, we'll tell you in the app or by email before the change takes effect and ask for your consent again where required. The date at the top shows when it was last updated.
If we change this policy in a way that affects how we collect, use or share health data, we'll tell you in the app or by email before the change takes effect and ask for your consent again where required. The date at the top shows when it was last updated.
10.
10.
Contact
Contact
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
DIAGOFIT
© 2026 Diagofit. All rights reserved.
— Legal —
Diagofit Consumer Health Data Privacy Policy
Effective date: October 30, 2026 · Version: 2026-10-30
This policy explains how Diagofit LLC (“Diagofit”, “we”, “us”) collects, uses, shares and protects consumer health data through the Diagofit iPhone app and app.diagofit.com (the “Service”), and how you can exercise your rights over it. It is written to meet state consumer health data laws such as Washington’s and Nevada’s, and we apply it to every Diagofit user, wherever they live.
It adds to our Privacy Policy (diagofit.com/privacy), which covers all personal information. If the two differ on health data, this policy applies.
“Consumer health data” (or “health data”) means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status.
1.
Health data we collect
Category
What it includes
Protocol and medication information
The protocol your coach sets for you: compounds or medications, doses, routes, schedules and phases. Doses you log or skip, injection sites, post-injection pain scores, and the supplies you track.
Symptoms
Symptoms you report, the days they happened, how much they affected you and any compound you think caused them.
Vital signs and body measurements
Blood pressure, pulse, resting heart rate, weight, body fat percentage and circumference measurements.
Bloodwork
Lab requests, uploaded lab reports and the biomarker results entered from them (for example hormones, blood counts, lipids, liver and kidney markers).
Images
Progress photos, and meal photos you choose to take.
Nutrition
Foods and meals you log, your daily calorie and macronutrient totals (including totals imported from Apple Health), and the targets and plans your coach sets.
Forms and check-ins
Answers to onboarding, weekly check-in and daily habit forms, such as mood, energy, sleep, stress and side effects, and your coach's feedback on them.
Sleep and activity data
From Apple Health, if you connect it: steps, active energy, resting heart rate, heart rate variability and sleep.
Training data that can reflect health
Workouts and sets you log, and notes about pain or injury.
Alerts
Automatic flags created for your coaching team when a reading, result or symptom crosses a threshold the team has set.
Health data in messages and posts
Anything about your health that you write in a message, voice note, post or comment.
Inferences
Notes and assessments your coaching team records about your progress and health while coaching you.
We do not collect precise location data, genetic data or biometric identifiers (such as face or fingerprint templates). We remove location and other hidden metadata from every image you upload, and we don't use your health data to infer anything for advertising.
2.
Where it comes from
You, when you log, upload, answer forms or send messages.
Your Diagofit coaching team, when they set your plans and protocol, record results from a lab report, or write notes and feedback.
Apple Health on your iPhone, only if you connect it.
Circle and Trainerize, if you were a client before the Service launched and we moved your history over.
3.
Why we collect and use it
We collect and use health data only to provide the coaching service you asked for and to run the Service safely:
to show you your plans and record your progress;
for your coaching team to review your progress, adjust your training, nutrition and protocol, ask for bloodwork, and respond to check-ins and messages;
to send you reminders and to alert your coaching team to readings that need attention;
to keep the Service safe and secure, and to keep records of who accessed your data;
for the optional AI meal photo analysis, if you choose to use it (see Section 5); and
to comply with the law.
We do not use health data for advertising or marketing, we do not sell it, and we do not use data from Apple Health for anything other than providing the Service to you.
Alerts are not emergency monitoring. Your coaching team is not watching your data around the clock, and an alert may not be seen right away. If you think you’re having a medical emergency, call 911 or your local emergency number.
4.
Your consent
To collect and use your health data to provide coaching, we ask for your consent when you create your account, separately from accepting our Terms. Using health data this way is necessary to provide the coaching you asked for.
Your coaching team sees the health data you log. We tell you this at signup. Diagofit staff are part of Diagofit, not a separate third party.
Apple Health data is shown to your coaching team only if you turn on Apple Health sharing.
AI meal photo analysis sends a meal photo to our AI provider only after you agree in the app.
You can withdraw any of these consents at any time in Profile → Consents in the app, on the Account page of the website, or by emailing us. If you withdraw consent to the collection of health data altogether, we can no longer provide coaching through the Service: you can still download your data or delete your account, and you can give consent again to continue.
We will ask for your consent again before we collect or share health data for any new purpose.
5.
Who we share it with
We share health data only as follows.
Within Diagofit. Your assigned coaching team (primary coach, any secondary coach and your client success manager) and Diagofit’s head coaches, admins and owner can see your health data so they can coach you. Every time a staff member opens a client’s health records, it is recorded. Staff with moderation or oversight rights can also read messages and posts, which may contain health information you wrote.
Service providers (processors) that handle health data on our behalf, only to provide their service to us and under contract:
Provider
Role
Health data involved
Contact
Cloudflare, Inc. (R2)
File storage
Progress photos, meal photos, lab report files, and attachments you send
OpenAI OpCo, LLC
Meal photo analysis, only when you use it
The meal photo and your optional note about it. Not used for training; kept by OpenAI for up to 30 days for abuse monitoring, then deleted. Never Apple Health data
Google LLC (Firebase Authentication and Cloud Messaging)
Sign-in and push notifications
None. Push messages are worded neutrally and contain no health details
Functional Software, Inc. d/b/a Sentry
Error and uptime monitoring
Configured not to receive health data; IP addresses not stored
Plus Five Five, Inc. (Resend)
Sends sign-in links and invitations
None. It receives only your email address and the email, which contains no health details
Mux, Inc.
Hosts and streams course and coach videos
None. Videos clients send in messages are stored with Cloudflare, not Mux
Affiliates: Diagofit has no affiliates that receive health data.
When the law requires it, or to prevent serious harm. We may disclose health data to comply with a valid legal process, such as a subpoena, court order or warrant, or when we believe in good faith it’s needed to prevent death or serious physical harm. Unless the law or circumstances prevent it, we will tell you first.
We do not:
sell health data;
share health data with advertisers, data brokers or social media platforms;
let any third party collect health data about your activity across other companies’ websites or apps through the Service;
send Apple Health data to any AI service.
If we ever wanted to sell health data, we would first need your separate, signed authorization, as the law requires. We have no plans to do this.
6.
Your rights
You have the right to:
Confirm whether we collect, share or sell your health data;
Access your health data, and get a list of all third parties and affiliates we have shared it with, with their contact details;
Delete your health data. We will also tell our service providers to delete it. Data in backups is deleted when those backups are overwritten, within 30 days;
Withdraw consent to our collection or sharing of your health data;
Correct health data that is wrong;
Get a copy in a portable format; and
Appeal if we turn down your request.
How to make a request:
Withdraw consent: Profile → Consents in the app, or the Account page of the website.
Get a copy: Profile → Account → Download my data in the app, or Account → Download my data on the website.
Delete your account and health data: Profile → Account → Delete account in the app, or Account → Delete account on the website.
Anything else: email info@diagofit.com with the subject “Health data request”. We’ll verify your identity using the email address on your account. You can use an authorized agent; we’ll ask for proof that you authorized them.
Timing: we will answer within 45 days of receiving a verified request. If we need more time, we’ll tell you why within those 45 days, and may extend by up to another 45 days.
Appeals: if we decline your request, we’ll tell you why and how to appeal. Reply to our decision with the subject “Health data appeal” within 45 days, and we will answer within 45 days, explaining what we did and why. If your appeal is denied, you can contact the Attorney General of your state. Washington residents can file a complaint at atg.wa.gov; Nevada residents can contact the Nevada Attorney General at ag.nv.gov.
We won't charge you or treat you differently for exercising these rights. We may refuse requests that are manifestly unfounded or excessive, or charge a reasonable fee where the law allows, and we'll explain why.
7.
How we protect it
Health data is stored in a separate, restricted part of our database, apart from other data.
It is encrypted in transit and at rest. Health files are kept in private storage and can only be opened through short-lived links.
Staff access is limited by role, and staff views of health records are logged.
Health data is kept out of push notifications, analytics and error reports.
Diagofit is not a healthcare provider, health plan or healthcare clearinghouse, and does not bill insurance, so HIPAA generally doesn't apply to us. We protect your health data under this policy and the laws that do apply, and we will notify you and the authorities of a breach as the law requires.
8.
How long we keep it
We keep health data while your account is open and for 12 months after your coaching ends, then delete it. When your coaching ends, you keep read-only access for 30 days, after which we close your account. You can delete your health data sooner by deleting your account, which removes it within 30 days. Disconnecting Apple Health stops new syncing but keeps what was already synced; to delete that, email info@diagofit.com or delete your account. Our Privacy Policy (Section 8) lists all retention periods.
9.
Changes
If we change this policy in a way that affects how we collect, use or share health data, we'll tell you in the app or by email before the change takes effect and ask for your consent again where required. The date at the top shows when it was last updated.
10.
Contact
Diagofit LLC
Email: info@diagofit.com
Mail: 8605 Santa Monica Blvd #174069, West Hollywood, CA 90069, USA
DIAGOFIT
© 2026 Diagofit. All rights reserved.