Consumer Health Data Privacy Policy

Effective Date: July 3, 2026

This Consumer Health Data Privacy Policy is provided by Devtegra, LLC (“Devtegra,” “we,” “us,” or “our”) under the Washington My Health My Data Act. It applies to consumer health data handled by our FitCreature mobile application.

1. Categories of Consumer Health Data We Collect, and Why

FitCreature collects the following categories of consumer health data. Except where stated, this data is processed and stored only on your device and is never transmitted to or stored on our servers.

• Exercise and physical activity data: workouts you log in the app (exercises, sets, repetitions, weights, durations, notes) and, with your permission, exercise sessions recorded by other apps. Purpose: to provide workout tracking, history, reports, and the in-app game features that respond to your training. Processed and stored on your device only.
• Health measurements read, with your permission, from Apple Health or Google Health Connect: sleep, steps, heart rate, active calories. Purpose: to show you reports and summaries and to set your in-game creature’s mood. Processed and stored on your device only.
• Body measurements you choose to log or authorize: body weight, body-fat percentage, body measurements. Purpose: to let you track progress toward a goal you set. Processed and stored on your device only.
• Food and nutrition entries you choose to log. Purpose: to let you track nutrition. Processed and stored on your device only.
• Derived fitness scores: your device computes eight game scores from your training, each a general rating between 0 and 1, plus an indication of which scores are active. These derived scores are transmitted to and stored on our servers. Purpose: to pair you with opponents and run battles in the game. The scores cannot be turned back into your workouts, health measurements, or any other underlying health data.
• Derived progress signals: small non-descriptive values transmitted to our servers so the game can grant rewards and power social features, such as your training-streak length, whether a given day included a workout, dates bridged by a streak freeze, challenge progress counts, reward claims, and milestone events shown to your in-app friends (for example, that you set a new personal record). Purpose: to operate streaks, challenges, quests, and rewards, and to show milestone events to your friends. These signals never include workout contents, exercise names, health measurements, or body data.
• Approximate location, only if you opt in: your device converts your location into a coarse area code covering an area roughly 5 kilometers across before anything leaves the device, and only that coarse code is transmitted and stored. Purpose: to place you in a regional Gym Zone and run regional leaderboards. Your precise location is never transmitted or stored.

2. Categories of Sources

• You, when you log workouts, body measurements, or food, or submit information in the app.
• Apple Health (HealthKit) or Google Health Connect, only with your permission.
• Your device’s sensors (location), only with your permission, and only as the coarse on-device conversion described above.

3. Categories of Consumer Health Data We Share

None. We do not share consumer health data with third parties or affiliates, and we do not sell consumer health data. We use service providers that process data on our behalf under contractual restrictions (our backend hosting provider stores the derived scores and signals described above); they are not permitted to use it for their own purposes.

4. Third Parties and Affiliates With Whom We Share Consumer Health Data

None. There are no third parties and no affiliates with whom we share consumer health data.

5. Your Rights and How to Exercise Them

If you are a Washington consumer, you have the right to:

• Confirm whether we are collecting, sharing, or selling consumer health data about you, and to access that data, including a list of all third parties and affiliates with whom we have shared or to whom we have sold it and an active contact address for each (as stated above, there are none).
• Withdraw your consent to our collection and sharing of your consumer health data. You can turn off health access at any time in the app’s settings and your device’s health-permission settings, and turn off location in your device settings.
• Delete your consumer health data. Deleting your account in the app (or requesting deletion at devtegra.com/data-deletion) deletes the derived scores and signals we store. Data stored only on your device is removed by deleting your account in the app or deleting the app. Deletion requests also extend to data held in our backups and archives, which are purged on our backup rotation schedule and in any event within six months, and we will notify any applicable third party (as stated above, there are none).

To exercise any of these rights, email contact.us@devtegra.com with the subject line “Consumer Health Data Request” from the email address associated with your account, or use the in-app deletion feature. We may need to verify your identity before acting on a request. We will respond within 45 days of receiving a verifiable request; where reasonably necessary, we may extend once by an additional 45 days and will tell you if that happens.

If we decline to act on your request, you may appeal by replying to our response or emailing contact.us@devtegra.com with the subject line “Consumer Health Data Appeal.” We will respond to an appeal within 45 days. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

6. Contact

Devtegra, LLC Texas, United States Email: contact.us@devtegra.com