Consumer Health Data Privacy Policy
Version: 1.0 Effective date: 29 September 2026 Language: English
This notice explains Sledge's handling of consumer health data, including where Washington's My Health My Data Act or Nevada's consumer-health-data law applies. It supplements our Privacy Policy.
Who is responsible
Burlis Management GmbH, Philippstraße 27, 52349 Düren, Germany, operates Sledge. Contact support@sledge.fit with “Sledge privacy” in the subject, or write to that address. The Managing Director is Alexander Burlis; commercial register HRB 7595, Local Court of Düren.
Data, sources and purposes
Consumer health data can include information linked to you that reveals or supports an inference about physical or mental health. Sledge handles these categories when you use the corresponding feature:
| Category and source | Purpose and location |
|---|---|
| Exercises, workouts, repetitions, loads, plans, goals, food, nutrition and body weight you enter | Your fitness log, planning and progress on your device. Selected summaries also reach OpenAI through our relay when you permit Coach and send a request. |
| Steps, body mass, workout information and workout-period heart rate from Apple Health or Health Connect, with permission | Optional local Health views and workout matching. Selected completed workouts can be written to the Health service you enable. Health-derived Coach context is unavailable in this release. |
| Messages, eligible recent chat, the current photo you attach, and fitness or health information you choose to describe | Optional OpenAI Coach analysis and automated safety checks through our relay. Responses and proposed changes are derived from this input; chat is stored locally. |
| A meal photo and optional clarification you provide, and inferred foods, portions and nutrition | Optional OpenAI meal estimation and safety checks. A photo saved with a meal remains on this device. |
| Dates of completed workouts derived from your local log | Optional sharing of the last seven calendar days with accepted Friends, through the account service. Detailed workouts are not uploaded for Friends. |
| Packaged-food searches and barcodes you request | Retrieval from Open Food Facts, which receives the query or code and connection information. Generic food search is on-device. |
| Health information you choose to include in a support or privacy request | Handling that request through our correspondence providers. Please start with the issue and app version, without medical records or another person's information. |
| Health information in an AI response excerpt you review or edit and an optional explanation you submit | Optional safety-report review and content-filtering improvements by Burlis, in an encrypted account-linked report on our German server. No photo, surrounding chat, Health records or workout database is attached. |
Sources are you, your use of Sledge, the Health service you connect, and the inferences produced for your requested AI features. We do not obtain health profiles from data brokers. The general Privacy Policy separately describes account identifiers, consent records, subscription and service metadata, and technical diagnostics that may identify your use of a fitness app.
Collection, use and disclosure choices
Health access, Coach, meal-photo estimation and Friends training-day sharing have separate permission flows. Accepting Terms or reading this notice does not grant those permissions. Coach still sends your message and eligible recent chat when all optional context switches are off. Selecting a photo alone does not upload it. Each AI report shows a separate notice: selecting Send report explicitly consents to processing that report, including any health information in its excerpt or optional comment. Opening or cancelling sends no report. Reporting does not authorize ongoing collection. Review each feature's data summary before enabling it.
We collect or disclose consumer health data with the required permission, or where the applicable law permits processing necessary to provide a product or service you requested. We obtain distinct sharing consent where required; a processor providing the requested service is not automatically a separate third-party sharing purpose. The permission applies only to the disclosed data, purpose and recipients. Additional categories, recipients or purposes are disclosed and any required new permission is obtained before the change.
Turn off Coach, food-photo or Friends sharing in Data & privacy; Health permission can be withdrawn in Sledge's Health settings and the operating system. Withdrawing stops new optional processing. It cannot retract a request already processed or automatically remove information previously saved to a Health service. Optional permissions are separate from Sledge Pro: refusing them leaves the subscribed manual logging features available.
Recipients
Depending on your choices, the categories disclosed are the corresponding rows above. Recipients are:
- AI service providers: OpenAI receives selected Coach content or a meal photo and clarification for the analysis and safety checks you request.
- Hosting providers: Hetzner hosts Sledge's API and relay. The relay processes AI content transiently; the account API receives consent, authorization and usage metadata and any permitted training dates for ordinary requests. A separately submitted AI report stores your reviewed excerpt and explanation with your account and consent record for restricted review by Burlis's operators; it does not upload your other conversations.
- People you select: accepted Friends receive your display name, sharing status and seven-day training marks after separate fitness-sharing permission.
- Health and lookup services: Apple or Google receives workouts you choose to write to its Health service; Open Food Facts receives requested product queries.
- Correspondence services: Cloudflare forwards support email to Google consumer Gmail. Earlier correspondence may remain with Proton. These services receive health information only if it is included in that correspondence.
- Internal report notifications: Mailwerk and Amazon SES receive only an opaque ticket number, without your report content or account identifier. Reporting does not send the excerpt to OpenAI, analytics or diagnostic services.
- Authorities, courts or professional advisers where disclosure is legally required or otherwise permitted for the particular matter.
The health-content flows described here do not disclose data to a corporate affiliate of Burlis. Sledge does not sell consumer health data or use it for targeted advertising. We do not send workout, food, body, Health or Coach content to PostHog, Sentry or Superwall. Their separate account, subscription or technical processing is described in the general Privacy Policy. We do not use geofences to identify visits to health-care facilities.
Retention and deletion
Local records remain until you remove them or clear the app's data. Sledge cannot remotely access or erase a device-only record. We will help you identify the relevant local controls without asking you to upload your health log. In-app account deletion clears this phone's records after server confirmation; deleting the app alone does not delete the server account or cancel billing.
Server training dates cover seven calendar days and older dates are removed by daily cleanup. Withdrawal of Friends sharing removes uploaded activity. Account deletion removes account-linked consent evidence. AI requests use OpenAI's non-stored Responses setting, but provider abuse-monitoring retention may last up to 30 days, with exceptions; this is not a zero-retention promise. Correspondence is normally removed within 12 months after the final answer, subject to applicable statutory or claim retention. Protected Sledge recovery archives normally expire within about seven days; restoration must reapply deletions before service resumes.
AI reports awaiting review remain in a restricted queue; closed reports are removed after 30 days. You can withdraw report consent or request erasure through the contact above. Withdrawal stops further consent-based processing without affecting earlier processing. Account deletion removes reports without a legal hold. Where an identified legal obligation or legal claim requires restricted retention on an applicable lawful basis, we document and review that exception and explain it when handling your request. Held reports lose their direct account link but can still contain identifying health information; they are not anonymous. They are removed when the continuing retention need ends. Server recovery archives follow the window above.
We assess identifiable data held by recipients as part of your request and notify relevant recipients of required deletion. We explain any applicable retention exception or identification limit. Clearing local chat does not by itself erase a provider's earlier processing. We do not require you to contact each processor separately to exercise rights against Sledge.
Your requests and appeals
Where applicable, you can request confirmation of collection, sharing or sale, access your consumer health data, obtain recipient information and contact routes, withdraw permission, or delete the data. Email support@sledge.fit with “Sledge privacy”, or use the postal address above. No new account or paid subscription is needed to submit a request. Tell us how to locate the account; never send a password or sign-in code. We may request proportionate identity verification.
We respond without undue delay. Washington requests normally have a 45-day response period from receipt; Nevada's general period is 45 days after authentication. Nevada deletion and downstream notification have a shorter 30-day period after authentication. Any lawful extension and its reason will be explained within the initial period. Other shorter applicable deadlines, including GDPR's usual one-month period, continue to apply. We do not discriminate because you exercise these rights.
If we decline a request, reply to the decision or email the same address with “Sledge privacy appeal” and the decision reference. We reconsider the request and provide a written explanation within 45 days of receiving the appeal. If an appeal is denied, the response includes the applicable regulator's complaint route. You can contact the Washington Attorney General or the Nevada Attorney General. Other privacy rights and the German supervisory authority are described in our general Privacy Policy.