Consumer Health Data Privacy Policy

Effective Date: to be set on sign-off · Last Updated: July 26, 2026

This Consumer Health Data Privacy Policy explains how FoilNexus LLC ("we," "us"), a Washington State limited liability company operating the eFoilCrew service, collects, uses, and shares consumer health data as defined by the Washington My Health My Data Act (chapter 19.373 RCW). It applies to Washington residents and to anyone whose consumer health data we collect in Washington.

This document is separate from our general Privacy Policy. It covers only consumer health data.

1. Categories of Consumer Health Data We Collect

We collect the following categories of consumer health data, only after you consent at account creation or when you upload a session:

• Heart rate measurements. If your ride file or paired Garmin watch includes heart rate, we store it point by point alongside your ride track.
• Physical activity and exertion measurements. Speed, distance, elevation gain, ride duration, run counts, time on foil, and motor power readings from your sessions, plus statistics we derive from them (for example top speed, averages, and performance scores).
• Precise location data associated with your activity. GPS tracks of your rides, the start location of a session, and the home location you optionally set on your profile. We treat ride location data as consumer health data because it is stored together with your fitness measurements.
• Board and device telemetry. If you sync a compatible eFoil board, we store its ride logs (motor, battery, and motion data). These logs describe the ride, not your body, but we treat them under this policy because they are linked to your sessions.

We do not collect biometric identifiers, genetic data, reproductive or sexual health information, or gender-affirming care information, and we do not infer health conditions or diagnoses from your data.

2. Why We Collect It and How It Is Used

We collect and use the categories above to:

• Record, analyse, display, and replay your riding sessions to you (maps, charts, statistics, playback).
• Compute your personal statistics, progress, badges, and leaderboard entries.
• Show your sessions and stats to other eFoilCrew users when you choose to share them through community features.
• Look up weather and water conditions for the time and place of your session.
• Label your sessions with a place name (reverse geocoding of the session area).
• Provide support, keep the service secure, and debug faults you report.

We do not use your consumer health data for advertising. We do not sell consumer health data, and we will not sell it without first obtaining the separate signed authorisation Washington law requires.

3. Sources of Consumer Health Data

• Files you upload (GPX, TCX, FIT).
• The eFoilCrew Garmin watch app on a watch you pair with your account.
• A compatible eFoil board you connect over Bluetooth and choose to sync.
• Information you enter yourself (for example session notes, manual sessions, home location).
• Statistics we derive from the above.

4. Categories We Share, and With Whom

We share consumer health data only with service providers that store or process it on our behalf under contract, and with other users at your direction. We share:

• All categories listed in section 1 with our infrastructure providers: Supabase (database, authentication, file storage) and Vercel (application hosting). Your data is stored in their United States data centres.
• Session location coordinates with our map and weather providers: MapTiler and OpenFreeMap (map tiles), Mapbox and OpenStreetMap (place names and static map images), and OpenWeatherMap and Open-Meteo (weather and marine conditions). Some of these requests are made by our servers and contain only a coordinate. Others are made directly by your browser, in which case the provider also receives your IP address. We never send them your name, email, or account identifier.
• Limited activity measurements (for example session duration, top speed, run count, percent of time on foil) with PostHog, our product analytics provider, only if you consent to analytics. You can decline analytics and still use eFoilCrew.
• Error context with Sentry, our error-monitoring provider, when the app hits a fault. We configure Sentry not to collect personal data by default and to mask text and media in error replays.
• Other eFoilCrew users: sessions, tracks, and stats you post or make visible through community features are shown to other users. That display happens at your direction and under your account's visibility settings.

We do not share consumer health data with advertisers, data brokers, or affiliates. We have no affiliates.

5. Your Rights

Washington's My Health My Data Act gives you the right to:

• Know and access. Confirm whether we collect, share, or sell your consumer health data, and get a copy, including a list of the third parties we have shared it with and how to contact them.
• Withdraw consent. Withdraw your consent to our collection and sharing of your consumer health data at any time.
• Delete. Have your consumer health data deleted, including from backups, and have us pass your deletion request to our processors and any third parties.

How to exercise these rights: email us at privacy@efoilcrew.com from the email address on your account, and tell us which right you want to exercise. We will confirm receipt, may ask you to verify you control the account, and will respond within 45 days. If we need more time, the law allows one 45-day extension and we will tell you why within the first 45 days.

If we refuse a request: we will explain why, and you may appeal by replying to our decision email with the word "Appeal." We will answer your appeal in writing within 45 days. If we deny your appeal, you may contact the Washington Attorney General at www.atg.wa.gov/file-complaint.

You will not be treated differently for exercising these rights.

6. Contact Us

FoilNexus LLC
Registered business address to be added on sign-off
Email: privacy@efoilcrew.com