Consumer Health Data Policy
Last updated: 9 October 2026
Base Form is coaching software. Personal trainers and studios use it to coach their clients, and some of what clients share in it is about their health. This policy explains what health data that is, why it is collected, who sees it, and how to see, delete or stop sharing it. It is written for laws such as Washington’s My Health My Data Act, Nevada’s SB 370 and Connecticut’s consumer health data law, and applies wherever you live.
The short version: your health data is shown to you and your coach. Base Form never sells it, never uses it for advertising, and only collects it after you say yes.
Who is responsible for what
- If you are a client, your trainer’s business decides what to ask you and how to use it in your coaching. Base Form stores and processes that information for them, as their service provider (a “processor”).
- For our own users and our own purposes (your account, keeping the service secure and working, and asking for your consent), Base Form is responsible for the data directly (the “controller” or “regulated entity”).
Either way, you can come to us with any request below and we will handle it or pass it on.
What health data we collect
- Health questionnaire: your answers to readiness-for-exercise questions, conditions, injuries, medication and anything else you tell your coach, plus an emergency contact.
- Body measurements: weigh-ins, body measurements and progress photos you add.
- Food and habits: meals you log, including any description or diary screenshot you ask the app to read, and water and habit tracking.
- Check-ins and workouts: weekly ratings of sleep, stress, hunger and soreness, notes, workouts you log, how hard they felt, and exercise-form videos you choose to upload.
- Phone health data, only if you connect it: daily steps, sleep, resting heart rate, active energy and weight from Apple Health or Health Connect.
- Coaching records: targets, programs and notes your coach writes about you, which can reflect your health.
- Messages: anything health-related you write to your coach.
We do not collect precise location, and we do not set up location-based fences around health care providers.
Where it comes from
- From you, when you fill in the questionnaire, log, check in, upload or message.
- From your coach, when they record notes, targets and programs for you.
- From your phone’s health app, only after you allow it in your phone’s settings and connect it in Base Form.
Why we use it
- To show you and your coach your progress, trends and plan.
- To flag answers that may need a doctor’s clearance before training.
- To work out estimates such as calorie and macro targets for your coach to review.
- To keep the service secure, fix problems, and meet legal obligations.
We do not sell health data, use it for advertising, or share it with data brokers. We do not use it for any purpose you have not agreed to.
Who we share it with
- Your coach and the staff of their business who coach you. People in a class never see each other’s health data.
- Companies that run parts of the service for us, under contract and only to provide it: Vercel (hosting), Neon (database), Cloudflare (exercise-form video), Anthropic (reading a meal description or diary screenshot, only when you use that feature), and Apple and Google (delivering phone notifications). Notifications about a new message can include its first lines.
- Payments and email: Stripe processes payments and Resend and Twilio deliver emails and texts. They handle payment and contact details, not your questionnaire answers, measurements or photos.
- When the law requires it, for example a valid court order. We share no more than we must.
Your consent
Before your first health question, Base Form asks for your permission, separately from our Terms, to collect your health data and share it with your coach. The box is never ticked for you. Connecting your phone’s health app asks again, through your phone. You can say no: messages, your program and payments still work, and anything you choose to log yourself is shown to your coach because that is the service you asked for.
You can withdraw at any time on the health questionnaire page, or by disconnecting your phone’s health app on the Phone health page. Withdrawing stops new collection; to have what was already collected deleted, use the steps below.
Your rights
- To know whether we collect or share your health data, and to get a copy of it.
- To get a list of every company we have shared it with, and how to contact them.
- To have it deleted, including from the companies we shared it with.
- To withdraw your consent.
- To not be treated differently for using these rights.
How to ask: delete your account in the app (More, then Delete my account), or email support@baseform.coach from the address you sign in with. We may ask you to confirm it is you. We reply within 45 days, and if we need longer (up to 45 more days) we will tell you why. Requests are free.
If we say no to a request, we will explain why. You can appeal by replying to that email with the word “Appeal”, and we will answer within 45 days. If you are still not satisfied, you can contact your state attorney general (in Washington, at atg.wa.gov).
Keeping it safe, and if something goes wrong
Health data is encrypted in transit, limited to you and your coach’s business, and access is restricted to the people who need it. If health data is ever accessed or disclosed without permission, we will tell the people affected, and regulators where the law requires, as set out in the Privacy Policy.
Children
Base Form is not for anyone under 16, and we do not knowingly collect their health data.
Changes
If we change what health data we collect or who we share it with, we will update this page and ask for your consent again before collecting more.
Contact
Health data questions and requests: support@baseform.coach. See also our Privacy Policy.