Consumer Health Data Privacy Policy

Last updated: July 2026

This policy applies to consumer health data as defined by the Washington My Health My Data Act (RCW 19.373) and the Nevada Consumer Health Data Privacy Law (SB 370). It is provided separately from our general Privacy Policy and covers only consumer health data. NextSet is operated by RavenForge Solutions LLC.

1. Consumer health data we collect, and why

We collect the following categories of consumer health data, all of which you enter yourself:

Category	Purpose, and how the data is used
Injuries and physical limitations	To generate workout plans that avoid movements likely to aggravate a reported injury, and to substitute alternative exercises. Used as input to your training plan and to our AI plan generator.
Body metrics (height, weight)	To scale training loads, calculate starting weights, and adjust exercise selection. Used as input to your training plan and to our AI plan generator.
Workout and training logs (exercises, sets, reps, weights, completion, personal records)	To track progress over time, adjust future training volume and intensity, and inform coaching responses.
Training-related profile attributes (age, gender, experience level, training goals, available equipment)	To tailor the difficulty, structure, and exercise selection of your plan. Included here because they are processed together with the data above to produce health and fitness recommendations.

We do not use consumer health data for advertising, and we do not use it to train artificial intelligence models.

2. Sources of consumer health data

We collect consumer health data from a single source: you. It is entered directly by you in the NextSet app, during account setup, in your profile and settings, or while logging workouts.

We do not collect consumer health data from wearables, connected devices, health platforms such as Apple Health or Google Fit, health care providers, data brokers, or any other outside source.

3. Consumer health data we share

We do not share any category of consumer health data with third parties for those parties' own purposes, and we do not sell consumer health data.

We disclose consumer health data only to service providers who process it solely on our behalf, only on our written instructions, and only to operate NextSet. Each is bound by a written data processing agreement that prohibits selling the data, sharing it for advertising, and using it for any purpose other than providing services to us.

4. Third parties and affiliates

Affiliates: RavenForge Solutions LLC has no affiliates. No consumer health data is shared with any affiliate.

Service providers who process consumer health data on our behalf, by category:

AI processing — Anthropic, PBC. Receives your profile, injuries, body metrics, and training history in order to generate workout plans and coaching responses. Does not use the data to train AI models.
Database and account hosting — Supabase, Inc. Stores your account, profile, and workout data.
Application server hosting — Railway Corporation. Transmits and processes requests between the app and our other service providers.

Other service providers we use — including crash reporting and subscription management — do not receive consumer health data.

5. Your rights, and how to exercise them

Under RCW 19.373.040 you have the right to:

Confirm and access whether we are collecting, sharing, or selling your consumer health data, and to receive a list of all third parties and affiliates with whom we have shared it, along with contact information for each.
Withdraw consent to our collection and to our sharing of your consumer health data.
Delete your consumer health data. Deleting your account removes it from our database immediately. Our service providers delete it under their written agreements with us; content sent to our AI provider is deleted from its systems within 30 days in the ordinary course.

To make a request:

In the app — open Settings > Account & Data, where you can download a copy of your data or delete your account and all associated data.
By email — write to privacy@nextsettrainer.com from the email address associated with your account, describing the right you wish to exercise. We use your account email address to verify that a request is yours.

We respond to requests without undue delay and within 45 days of receipt. We may extend that period once by 45 additional days where reasonably necessary, taking into account the complexity and number of your requests; if we do, we will tell you within the first 45 days and explain why.

We provide information in response to your requests free of charge, up to twice per year. If a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover administrative costs or decline to act on it.

Appeals. If we decline to act on your request, we will tell you why and explain how to appeal. To appeal, reply to our decision or write to privacy@nextsettrainer.com with "Appeal" in the subject line. We will respond in writing within 45 days of receiving your appeal, with a written explanation of our decision. If we deny your appeal, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.

6. Contact

RavenForge Solutions LLC
118 Brainard Rd, Enfield, CT 06082
Email: privacy@nextsettrainer.com