Consumer health data
Your health data in Dfive Health.
This is the notice that Washington's My Health My Data Act, and the similar laws in Nevada and Connecticut, ask for. It covers Dfive Health on the web and on iPhone. The privacy page covers everything else we run.
- Effective
- October 29, 2026
- Applies to
- Dfive Health, iOS and web
- Requests
- info@dfive.us
What we collect
Only what you put in, or tell the app to bring in:
- Workouts and training: what you did, weights, times, your notes, and the plans you follow.
- Body measurements: weight, and blood pressure readings with their time and your notes.
- Lab results you enter or import, and the medications you list.
- From a watch, when you connect one: workouts, with their heart rate and calories.
- From the Health app on your iPhone, for the kinds you allow there: workouts, weigh-ins and blood pressure readings; and one number per day for activity (steps, distance, flights, calories, exercise and stand time, time in daylight), cardio fitness (VO₂ max, heart rate recovery, walking heart rate), sleep and recovery (sleep and its stages, heart rate variability, resting heart rate, breathing rate, blood oxygen, wrist temperature), body composition (body fat, lean mass, BMI, waist, height), walking (speed, step length, steadiness, double support, asymmetry, stair speed, the six-minute walk estimate) and, if another app logs them, food and drink (calories, protein, carbohydrates, fat, water, caffeine). Daily totals and averages only, never the raw readings.
- Your answers to the start questions, including whether a doctor has told you to take care with exercise.
- Photos and documents you upload for the app to read: a workout board, a lab report.
Why
To show it back to you, to shape your workouts and plans around it, to compare a day or a week with your usual, and to make the reports and exports you ask for. Nothing else. We don't use it for advertising, we don't sell it, and we don't build a profile of you for anyone.
Where it comes from
From you, typed, photographed or emailed in. From the Health app on your iPhone, for exactly the kinds of data you allow there. From COROS, or from Garmin through Intervals.icu, if you link one in Settings.
Who it goes to
Amazon Web Services stores it, encrypted, in our own account in Oregon, and runs the app. Anthropic's Claude, running inside that same AWS account, reads a photo, a lab report, a typed workout or your comments when you use a Pro feature, and only after you have allowed it in the app; it doesn't keep what it reads or train on it. Both work for us under contract and use your data for nothing of their own.
COROS and Intervals.icu receive a workout only when you send one to your watch. Nobody else receives your health data, unless the law compels us, in which case we tell you if we are allowed to.
Your consent
The app asks before it keeps anything, the first time you sign in, and separately before anything is read by AI. You can switch AI reading off in Settings → Pro at any time; everything you do by hand keeps working.
Your rights, and how to use them
- See it. Settings → Download your data gives you everything the app keeps, as a file.
- Delete it. Settings → Delete account removes all of it at once, for good. Backups age out within 35 days.
- Withdraw consent. Turn AI reading off in Settings, unlink a watch, turn off Health app syncing in the Health app, or delete your account.
- Ask us. Email info@dfive.us from the address on your account for anything above, or to ask which processors have received your data. We answer within 45 days.
- Appeal. If we turn a request down, reply to say so and someone who wasn't involved looks at it again and answers within 45 days. If you're still not satisfied, you can contact your state's attorney general.
Changes
If this notice changes in a way that matters, the date above moves and the app tells you before the change applies to data already collected.