Consumer Health Data Privacy Notice

Depending on what you enter, upload, connect, or ask Buffro to do, consumer health data may include:

• workouts, activity, strength, recovery, goals, and fitness progress;
• height, weight, body measurements, body composition, and related trends;
• nutrition, hydration, fasting, meal, and calorie information;
• injury or sensitivity selections and fitness-related AI interactions;
• progress or body-scan photos and results; and
• data you authorize Buffro to read from Apple Health or Health Connect.

We collect this data directly from you, from your use of Buffro, from a device health store you choose to connect, or from another user when you deliberately use an optional social feature.

We use it only to:

• provide the workout, nutrition, measurement, progress, AI, backup, and social features you request;
• calculate personal estimates and display trends;
• sync records across your devices and with a health store when enabled;
• protect accounts, prevent abuse, provide support, and comply with law; and
• maintain and improve the reliability of those features using de-identified or minimized information where practical.

We request consent where required before collecting or sharing consumer health data for a new purpose. We do not sell consumer health data or use it for advertising.

The categories of consumer health data disclosed are limited to what is needed for the feature you request: relevant account and fitness records for cloud operations, prompts or photos for requested AI analysis, food entries for nutrition lookups, authorized records for device health platforms, and content you choose to send for support. A diagnostics processor may receive minimized technical records, but we do not intentionally send health content in crash reports.

We do not share consumer health data with affiliates or third parties for their independent purposes, so there are currently no such affiliates or third-party categories to list. At your direction, an accepted Workout Buddy sees only the workout or profile summary allowed by your settings, not your underlying health records. We may also disclose data when legally required or necessary to protect a person, our rights, or Buffro's security.

Subject to applicable law, you may ask us to confirm whether we collect, share, or sell your consumer health data; access or correct that data; receive a list of third parties or affiliates with which it was shared; delete it; or withdraw consent for future collection or sharing. You may disconnect Apple Health or Health Connect in Buffro and revoke permissions in device settings at any time. Disconnecting stops future access but does not automatically delete records already imported into your Buffro account.

Submit a request to support@buffro.app. We may verify your identity. If we deny a request, you may appeal by replying with “Health Data Appeal”; a different reviewer will evaluate the appeal where law requires. You may also contact your state attorney general or other applicable regulator.

You can delete your Buffro account in the app. We delete or de-identify consumer health data from active account systems within 30 days, subject to limited legal, security, and transaction retention described in our Privacy Policy. Deletion from archived or backup systems may take up to six months after we authenticate the request where applicable law permits.

We will update this notice before materially changing the categories of consumer health data we collect or the purposes for which we use it, and will obtain new consent where required.

The controller is PT DUO DIGITAL INTERNASIONAL, Indonesia. Contact us at support@buffro.app with questions or requests.