Biometric Data Notice

This Biometric Data Notice (“Notice”) explains how Allheartz, Inc. (“Allheartz,” “we,” “us,” or “our”) collects and uses biometric data through the Allheartz athletic platform (the “Services”). It is incorporated by reference into, and should be read together with, our Terms & Conditions and Privacy Policy; you provide your informed consent to the practices described here by accepting those documents during registration. This Notice provides the specific detail regarding biometric data.

1. What biometric data we collect

To provide movement analysis and performance insights, the Services collect and analyze biometric identifiers and biometric information, including video of your body and the movement, gait, posture, and biomechanical patterns derived from it. These are treated as biometric data under laws such as the Illinois Biometric Information Privacy Act (“BIPA”) and similar state laws.

2. Why we collect it

We use your biometric data to: capture and measure your movement; generate performance metrics and insights; and make those results available to you and to the coaching, training, or organizational personnel you authorize. We may also use it to improve the platform and to develop, train, and refine our analytical models — which may include review of identifiable video by authorized personnel under confidentiality obligations (for example, to verify or correct movement keypoints), as well as use of a separate de-identified and aggregated dataset.

3. How we store and protect it

Your biometric data is stored on secure, industry-leading cloud infrastructure and protected by administrative, technical, and physical safeguards, together with contractual security commitments from our cloud service providers. Access is limited to those who need it to provide the Services.

4. How long we keep it, and when we destroy it

We retain your biometric data only as long as needed to provide the Services and fulfill the purpose for which it was collected, or within three (3) years after your last interaction with the Services, whichever occurs first. After that, it is permanently destroyed in accordance with our Biometric Data Retention Schedule, except where a longer period is required by law.

5. We do not sell your biometric data

Allheartz will not sell, lease, trade, or otherwise profit from your biometric data.

6. Who we may share it with

We may share your biometric data only with the coaches, trainers, medical or specialty staff, and other organizational personnel you authorize, and with service providers that help us operate the Services. All such parties are required to maintain appropriate confidentiality and security protections. We may also disclose it where required by law.

7. Your consent is voluntary, and you can withdraw it

Providing this consent is voluntary. Some features of the Services depend on biometric data and may not function without it. You may withdraw your consent at any time by contacting hello@allheartz.com; withdrawal stops future biometric collection and, on request, leads to deletion of your biometric data as described in Section 4, except where retention is required by law.

8. Consent for minors

The Services are intended for users age 13 and older. For any user under 18, a parent or legal guardian must provide this consent on the minor’s behalf. By consenting, the parent or guardian agrees to the collection, use, storage, and sharing of the minor’s biometric data as described here.

9. Relationship to our other documents

This Consent supplements our Terms & Conditions and Privacy Policy. If there is any conflict specifically regarding biometric data, this Consent controls. For all other matters, and for the complete description of our data practices, please review the Privacy Policy.

10. Your consent

By accepting the Terms & Conditions and Privacy Policy during registration, you provide your informed, written consent to Allheartz’s collection, storage, use, and sharing of biometric data as described in this Notice. For a minor, the parent or legal guardian provides this consent on the minor’s behalf.

Consent recorded electronically at registration — the platform stores the accepting person, the document version, and the date and time of consent.

11. Contact

Allheartz, Inc., Oakland, California. Questions about biometric data may be sent to hello@allheartz.com.