Consumer Health Data Privacy Policy

Last updated 16 September 2026 · Effective 16 September 2026 · Ascendant is a product of Mistiq LLC.

This policy is specifically about consumer health data, and it exists because Washington's My Health My Data Act, Nevada's SB 370, and similar laws require a separate policy for it. It sits alongside our general Privacy Policy, which covers everything else.

Ascendant is a strength training app. It is not a medical device, it does not diagnose or treat anything, and it does not connect to your doctor or your insurer. Nothing here is medical advice.

The consumer health data we collect

All of it comes from you entering it, or from a device permission you granted. We collect nothing about you from data brokers, advertising networks, or public records.

Category	What it is	Why we have it
Training	Workouts, sets, loads, reps, reps-in-reserve, and any pain flag you set	To compute your next session and your rank
Body	Bodyweight, tape measurements, and body fat percentage if you enter it	To score strength relative to bodyweight and estimate calories
Progress photos	Photos you choose to take or import. They stay on your phone and are never uploaded to us	Only so you can see them. See the section below
Nutrition	Food and drink you log, including barcodes you scan, and hydration	To show intake against the day's targets
Conditioning	Cardio sessions you log	To award effort experience
Profile	Sex, height, age, and your chosen training path	Strength standards and calorie estimates depend on them
Device health data	On Android, through Health Connect, we read Exercise and Weight, and write Weight, Exercise, Active Calories Burned, Nutrition and Hydration. On iOS, through Apple Health, we read workouts and bodyweight, and write bodyweight, workouts, dietary energy and macros and water. Your step count on iOS comes from Core Motion, not Apple Health.	So your training appears in the health app you already use. Granted at runtime, and revocable at any time in your system settings
Imported history	Workouts from an export file you choose to import from another tracker: exercises, loads, reps, effort and dates	So your rank is placed from training you have actually done. We do not keep the file
Verification video	A clip of you performing a lift, recorded in the app, only when you ask to verify that lift, with the load and reps you claim	So other lifters can confirm the lift against a checklist. See the section below
Board profile	The display name and emblem you choose, and your rank, score, sex, weight class, age class and country	Shown to other lifters only after you turn boards on. Off by default
Usage events	Which screens and steps you reach, with an install identifier we generate, the app version and platform, and a small fixed set of values. Never your loads, bodyweight, rank, food names or free text. The identifier is pseudonymous rather than anonymous: it can survive a reinstall on iPhone and it is linked to your account once you sign in	To find where the app loses people. You can switch it off in Settings, and in the EEA, the UK and Switzerland it is off until you switch it on
Location, coarse	An optional country and region you type in yourself. We do not use GPS	Only to pick the group of meet results you are compared against

Progress photos

Progress photos are the most sensitive thing this app can hold, so they are treated differently. They never leave your phone. There is no sync, no upload and no backup of them to us, so we have never held one. We do not analyse them, we do not run them through any recognition or estimation system, and we never send them to any third party, including any AI provider. Deleting a photo in the app removes the file from your device, which is the only place it was.

Video you record for verification

A verification clip is a video of you, so it is treated like progress photos: as something that needs a reason to exist. It is recorded in the app, never imported from your library, and it is uploaded only when you ask to verify that lift. Other lifters who are eligible to judge can watch it alongside the load and reps you claimed, and so can our operator when a clip is reported. They reach it only through a short lived link tied to that one viewer, so the clip cannot be passed around. We do not run it through face recognition or any other identification system. We delete it one day after an abandoned upload, seven days after a rejection, thirty days after approval, and immediately when you delete your account. You never have to verify a lift to use the app or to climb the ranks you can reach without it.

What other people can see

Nothing here is public by default. Your rank, your logs and your body data are yours alone until you turn on boards in Settings, and turning them off takes you back off the boards straight away. When boards are on, other lifters see your display name, emblem, rank, score, sex, weight class, age class, the country you set, and which lifts are verified. They never see your logs, your bodyweight, your measurements, your photos, your food, or your email.

We do not sell your consumer health data

We have never sold consumer health data, we do not sell it now, and we do not share it for targeted advertising or cross-context behavioural advertising. Because we do not sell it, we do not ask you for the signed authorisation that a sale would require. If that ever changes we will ask first, in plain language, and it will be a real choice rather than a condition of using the app.

Who we share it with, and exactly what they get

Google (Firebase Authentication) gets your sign-in identity only. No training or body data.
Apple, Google Play and Stripe handle billing and get subscription status only, never health data. We never see your card.
OpenAI (OpenAI, L.L.C., United States) or Google Cloud Vertex AI (Google LLC, United States), whichever the server is configured to use. Two features call it:
- Coaching text. It receives your training path, your stated goal, a short summary of recent training, the names of the exercises the engine chose for today and whether each is a warmup or a working set, your tier and whether you were just promoted, how far you have climbed, the equipment you said you have, and any pain flag you set, with the lift it was on, so the reply can suggest a gentler movement instead of pushing through. The prescribed loads, reps and effort targets are not sent.
- Food estimates. If you photograph a meal, that photo is sent to the AI provider to estimate what is in it. If you describe a meal in words instead, that description is sent. The estimate comes back for you to confirm or change before anything is logged. Your nutrition history, your saved meals and your daily totals are not sent, and a food photo is never kept by us after the estimate comes back.
It does not receive your bodyweight, your measurements, your body fat, your progress photos, your verification clips, or your logged nutrition history.
Open Food Facts and USDA FoodData Central receive a barcode you scan or the words you type into the food search, to look the product up. Nothing identifying you is sent with it.
OVH is our hosting provider, in France, where the database and any verification clips are stored.
Other lifters see your board profile when you turn boards on, and a verification clip when you submit one, as described above. This is the only sharing that happens between people, and both are your choice.

That is the complete list. We use no advertising SDK, no third party analytics SDK, and no third party tracker in this app. The usage events described above are recorded by us, sent only to our own server, and never passed to anyone else.

How long we keep it

Verification clips, shared rank up videos and usage events have their own shorter windows, listed in the privacy policy. We keep your training history for as long as your account exists, because the app's whole purpose is showing you change over time. When you delete your account we delete your data from our live systems immediately and from our encrypted backups within 30 days, after which the backups containing it have rotated out. We keep no separate archive.

Your rights

Confirm. Ask whether we collect, share or sell your consumer health data, and we will tell you plainly, one way or the other. You do not have to ask for a copy first.
See it. Ask and we will send you everything we hold about you, together with a list of every third party and affiliate we have shared or sold it to. The list of who receives what is in "Who we share it with" above, and it is the same list a request returns.
Affiliates. Mistiq LLC has no parent, no subsidiary and no affiliated company that receives your consumer health data. If that ever changes, this sentence changes with it and the affiliate is named here.
Delete it. Use Delete account in the app or on the web. This deletes your consumer health data, including from backups as described above. We also tell every processor holding a copy on our behalf to delete it, and we ask third parties we have shared it with to do the same.
Withdraw consent. You can withdraw your consent to our collection of your consumer health data and to any sharing of it, not only to a device permission. Email us and say so, and we stop. In the app you can also turn off usage events in Settings under Privacy, leave the boards, and revoke Health Connect, Apple Health or Motion access in your system settings at any time. Withdrawing consent is not retroactive to a share that already happened, and it does not delete what we hold; ask for deletion for that.
Appeal. If we refuse a request, you may appeal by replying to our answer. We will respond to an appeal in writing within 45 days, with our reasons. If we still refuse, you can complain to the Washington Attorney General: atg.wa.gov/file-complaint.

We do not charge for these, we do not require an account to make a request, and we will not treat you differently for making one.

Nevada

If you are in Nevada, this section is for you and it is part of this policy.

How we process it. Your consumer health data is processed by us on our own servers, hosted at OVH in France, to run the features you asked for: computing your next session, placing and updating your rank, showing your intake against your targets, and writing your training back to the health app you connected. The AI provider named above processes the coaching inputs and the meal photo or description at the moment you use those features. Processing is automated, and no decision made this way has a legal effect on you.
How to submit a request. Email privacy@mistiq.org from the address on your account, or from any address if you tell us which account you mean. We verify that a request came from the account holder before we act on it. If we cannot verify it, we say so rather than acting.
How to review and change it. Everything you entered can be viewed and edited in the app, and Settings can export your full training, nutrition, bodyweight and measurement history as files you keep. For anything you cannot reach in the app, email us and we will send it to you or correct it.
Deletion, within 30 days. On a verified deletion request we delete your consumer health data from our live systems and tell our processors and any third party we shared it with to delete their copies, within 30 days, with no extension. Encrypted backups rotate out within the same 30 days.
Third parties collecting over time and across services. No. We run no advertising network, no third party analytics SDK and no tracker in this app, so no third party collects consumer health data about you over time or across different services through Ascendant.
Material changes. If we change this policy in a way that materially affects what we collect, how we use it or who receives it, we will change the date at the top, post the new version at this address, and tell you in the app before the change takes effect.
Effective date. 16 September 2026.

Who to contact

Email privacy@mistiq.org. A person answers. We respond to a request within 45 days, and usually far sooner. Where a law sets a shorter deadline we meet the shorter one: a Nevada deletion request is 30 days with no extension, as set out above.

Mistiq LLC · This policy is published under Washington RCW 19.373 and is linked from the homepage of every surface that collects the data described above.