Consumer Health Data Privacy Policy

Policy version 2026-10-18 · Last updated: October 18, 2026

This policy applies to residents of US states with consumer health data laws, including Washington (My Health My Data Act), Nevada (SB 370) and Connecticut. It explains how Blaze Running handles "consumer health data": information linked to you that identifies your past, present or future physical health status. It supplements our general Privacy Policy, which covers all other personal data.

Blaze Running is operated by Gabriel Furnieles García, Calle Hermanos Velasco López 37, 28250 Torrelodones, Madrid, Spain. Contact: gabifurnielesgarcia@gmail.com.

Consumer health data we collect

We read these laws broadly, so we treat all of the following as consumer health data:

• Injury and recovery information: how often you get injured, how long ago you recovered from your last injury, and any note you write about injuries or physical limitations.
• Heart rate: average and maximum heart rate you enter on an activity log.
• Fitness and exercise data: your running level, weekly distance, longest run, personal-best times, and the activities you log (distance, duration, pace, speed, elevation, intervals, strength body parts, and how hard the effort felt).
• Health details you write yourself in activity-log notes or in messages to the AI coach, such as pain or symptoms.
• Inferences drawn from the above, such as the training load and plan adjustments the AI suggests for you.

We do not collect data from wearables or health platforms, precise location, biometric data, reproductive or sexual health data, or medication information.

Where it comes from

All of it comes directly from you, through the app's onboarding questions, the activities you log and your chat with the coach. Inferences are generated by our servers and the AI model from that same information.

Why we collect and use it

• To build your training plan and adapt it to your fitness, injury history and logged activities.
• To let the AI coach answer your questions with the context of your training.
• To show you your training history and end-of-plan statistics.

We don't use consumer health data for advertising, and we never sell it.

Your consent

We ask for your consent before collecting injury, recovery, limitations and heart-rate information, and before using health details from your notes and chat. The request is shown on its own, separate from our terms, and is never pre-ticked. Giving it is a condition of using the app, because the coach cannot plan your training safely without it. If you decline or later withdraw it, you can't use the app until you give it again or delete your account. Fitness data such as your logged runs is collected because it is necessary to provide the training plan you asked for.

Who we share it with

We share consumer health data only with the service providers (processors) that run the app for us, under contracts that limit their use to providing the service:

• Google LLC (Firebase): stores your data and runs our servers.
• Google LLC (Gemini API): the AI model that generates and adapts your plan and powers the coach. We use the paid tier, under which Google does not use your data to train its models.

We have no affiliates that receive consumer health data, and we do not share it with any other third party. If that ever changes, we will ask for your separate consent first.

How long we keep it

We keep consumer health data while your account exists. It is deleted when you withdraw consent (for injury, recovery, limitations and heart-rate data) or when you delete your account. Requests sent to the AI model are not stored by us outside your account; under the paid-tier terms, Google may keep them for a limited period only to detect abuse and comply with law.

Your rights

• Confirm and access: ask whether we collect, share or sell your consumer health data, get a copy of it, and get a list of the third parties and affiliates it has been shared with, with their contact details.
• Withdraw consent: at any time, in the app's Profile screen or by email. We then delete the health fields and stop using them.
• Delete: delete your account and all its data in the app (Profile → Danger zone → Delete Account) or on the web at blazerunning.app/delete-account. Deletion covers our processors; we notify them where they hold a copy.
• No discrimination: we won't treat you differently for exercising these rights.

To make a request, email gabifurnielesgarcia@gmail.com from the address linked to your account. We respond within 45 days, and may extend that once by another 45 days if necessary, telling you why.

Appeals

If we decline your request, you can appeal by replying to our decision with the subject "Appeal". We will answer within 45 days and explain the outcome. If you disagree with the result, you can contact your state Attorney General (for Washington residents: www.atg.wa.gov/file-complaint).

Changes to this policy

When this policy changes we update the version and date above. If a change affects how we collect or share consumer health data, we'll ask for your consent again in the app.