This Consumer Health Data Privacy Policy is required by the Washington My Health My Data Act (RCW chapter 19.373). It applies to consumer health data we collect from Washington residents and consumer health data we collect in Washington, regardless of where the consumer is located.
This Policy is in addition to our general Privacy Policy. The general Privacy Policy applies to all our users; this Policy adds specific information required by Washington law.
ShotTrack is operated by Nauman Khan, located at Islamabad, Pakistan. You can reach us at privacy@shottrack.app.
Under Washington law, consumer health data is information that identifies your past, present, or future physical or mental health. For ShotTrack, this includes:
| Category | Examples | Purposes |
|---|---|---|
| Medication information | Which GLP-1 medications you track, doses, schedules | Provide app's core tracking features |
| Dose logs | Times, amounts, sites, notes | Provide adherence calculations, medication-level chart, site rotation recommendations |
| Body measurements | Current weight, goal weight, pace | Provide progress tracking |
| Health-related preferences | Persona type, schedule type | Personalize app behavior |
We do not infer mental health conditions, sexual or reproductive health information, gender-affirming care information, or genetic data. ShotTrack does not collect biometric identifiers (no fingerprints, no facial recognition, no retina scans).
We do not collect precise geolocation data of any kind.
We collect consumer health data only from you, directly. We do not buy consumer health data from data brokers. We do not infer it from non-health data. The data in your ShotTrack account is the data you've entered.
We share consumer health data only with our service providers (processors) who help operate the app. These providers process data on our behalf and are contractually bound to use it only for the purposes we specify.
Our processors:
We do not share consumer health data with affiliates, advertisers, advertising networks, data brokers, marketing companies, AI training services, or any party not listed above.
We do not sell consumer health data. Under Washington law, we are not authorized to sell your consumer health data, and we have never done so. Under section 7 of the Act, your separate written authorization would be required to do so, and we would not seek such authorization.
We may share consumer health data if compelled by valid legal process (subpoena, court order). We will challenge overbroad requests and notify you when legally permitted.
We retain consumer health data for as long as your account is active. When you delete your account, we delete all your consumer health data immediately. We retain a small audit record (a hash of your account, timestamp, no personal information or health data) for 90 days for security and abuse-prevention purposes.
If you have not used ShotTrack for two years, we may delete your account and all consumer health data after notice to your registered email.
If you are a Washington resident or your consumer health data was collected in Washington, you have the following rights:
Right to confirm. You can confirm whether we are collecting, sharing, or selling your consumer health data, and access that data.
Right to withdraw consent. You can withdraw your consent for our collection and processing of your consumer health data at any time.
Right to delete. You can request deletion of your consumer health data.
Right to appeal. If we deny your request, you can appeal that decision and receive an explanation.
How to exercise these rights:
We respond to requests within 45 days. We may extend by an additional 45 days for complex cases, with notice to you. There is no fee for these requests.
We may need to verify your identity by replying from the email address on your account.
We do not discriminate against you for exercising these rights.
ShotTrack does not sell consumer health data. We have never sold consumer health data. We do not authorize any third party to sell consumer health data on our behalf.
If we ever wanted to sell consumer health data, Washington law requires us to obtain your separate written authorization first. We do not currently seek such authorization and have no plans to.
ShotTrack does not implement any geofencing feature. We do not establish virtual boundaries around healthcare facilities or any other locations. We do not collect or use precise geolocation data for any purpose.
We protect consumer health data using:
We do not use AI or machine learning models on your consumer health data for purposes beyond providing the app's features.
We may update this Policy. When we do, we will:
You can always see the current version at https://shottrack.app/consumer-health-data-privacy.
For questions about this Policy or to exercise your rights:
Email: privacy@shottrack.app
By postal mail:
Nauman Khan
Islamabad
Pakistan
If you'd like an authorized agent to make a request on your behalf, email privacy@shottrack.app with documentation showing the agent's authority to act for you.