Skip to health data policy
CALI
COMBOS
Back to the app
Legal / Sensitive data

Consumer Health Data Privacy

This separate policy describes workout, movement, and body-analysis information that may be considered consumer health data under laws such as Washington’s My Health My Data Act.

Effective September 27, 2026Contact: [email protected]
On this pageScopeCategories and sourcesWhy we collect itSharingNo saleYour rightsContact

1. Scope

Tolbert Technologies LLC operates CaliCombos and controls the consumer health data described here. This policy supplements the Privacy Policy. “Consumer health data” here means personal information linked or reasonably linkable to you that identifies or can be used to infer your physical-health status. This may include fitness activity even though CaliCombos is not a healthcare provider and the data is not a medical record.

Local source videos and local pose-analysis results are not collected by CaliCombos merely because you open or edit a clip. We collect them only when they leave your device through a feature you request, such as publishing or submitting a battle attempt.

2. Categories and sources

CategoryExamplesSource
Workout and fitness activitySelected movements, equipment, combos, repetitions, hold times, workout history, completion and match results.You, your use of the Service, and requested automated analysis.
Movement and body-analysis dataImages or video of physical activity; estimated pose/body landmarks, joint positions or angles, movement labels, body orientation, form grades, 3D views, and inferred performance.Your uploaded or recorded media and on-device models. We do not use this information to verify your identity.
Audio/video evidencePublished workout clips, recorded battle attempts, and media submitted for scoring or review.Your camera/microphone after permission, uploaded files, and your intentional submission.
InferencesEstimated skill execution, rep count, hold duration, form quality, score, and provisional skill rating.Automated analysis, match activity, participant votes, and Service rules.

3. Why we collect and use it

We collect and use these categories only as reasonably necessary to provide a feature you request or with consent where required:

  • generate and save workouts;
  • analyze user-selected clips and present editable movement suggestions or form feedback;
  • publish workout posts using the visibility you select;
  • operate battles, score attempts, preserve participant-only evidence, prevent cheating, and resolve disputes;
  • provide livestream and real-time training features you activate;
  • secure, debug, and improve the requested features; and
  • comply with law and protect users, rights, and safety.

We do not use consumer health data for targeted advertising, determining eligibility for employment, insurance, credit, housing, or healthcare, or training general-purpose AI models without separate affirmative permission.

4. Categories shared and recipients

“Sharing” in this section uses the broad meaning given by consumer health privacy laws and does not mean that we sell the data.

  • Other users: workout details, clips, inferences, scores, and results are shared with the audience you select or the participants and spectators inherent to a feature. Public posts and streams are available to the public.
  • Infrastructure processors: submitted media and related records may be processed by Cloudflare for network delivery, security, and encrypted object storage; our hosting provider for application and database operations; and real-time media or relay providers for peer connections and livestream delivery. Legacy deployments may instead use Microsoft Azure or Supabase for hosting or storage.
  • Safety and legal recipients: limited information may be disclosed to advisers, authorities, or affected persons when reasonably necessary to comply with law, investigate abuse, or protect rights and safety.
  • Business transaction recipients: data may transfer in a merger, financing, reorganization, or sale, subject to this policy and applicable consent requirements.

We do not have affiliates with whom we share consumer health data for their own use. We do not share local clip pixels or local pose output merely because on-device analysis runs.

5. No sale of consumer health data

CaliCombos does not sell consumer health data. We will not sell it without first obtaining the separate, signed authorization required by applicable law.

6. Your rights

Subject to applicable law, you may:

  • confirm whether we collect, share, or sell consumer health data and obtain access to it;
  • receive a list of third parties and affiliates with whom it was shared or sold;
  • withdraw consent for future collection or sharing; and
  • request deletion from our systems and, where required, notification of deletion to processors and other recipients.

Email [email protected] with the subject “Health Data Request.” Include the Google email or username associated with the data and describe the request. You do not need to create a new account to make a request. We may ask for information reasonably needed to authenticate you.

We will respond within the period required by applicable law. If we deny a request, we will explain why and how to appeal. Appeal by replying with the subject “Health Data Appeal.” If the appeal is denied, you may contact your state attorney general or other applicable regulator.

Withdrawing consent may prevent us from providing features that require the data. It does not affect processing that occurred before withdrawal. Deletion may be limited where retention is required or permitted by law, including for security, fraud prevention, legal claims, and the rights of others.

7. Contact

Questions, requests, consent withdrawal, or appeals: [email protected].

© 2026 Tolbert Technologies LLC
TermsPrivacyHealth dataCommunity guidelinesRemove intimate content