Consumer Health Data Privacy Policy

Last updated: September 25, 2026

This policy explains how Amby Health Inc. ("Amby", "we", "us") collects, uses, and shares consumer health data, and how you can exercise your rights over it. It is provided under Washington's My Health My Data Act and similar state consumer health data laws.

Consumer health data we collect, and why

We collect the following categories of consumer health data:

Workouts and activity from the services you connect: workout type, duration, distance, pace, power, heart rate, and elevation, and daily steps and calories.
Vital signs and body measurements from the services you connect: heart rate, resting heart rate, heart rate variability, respiration, stress, Body Battery™, and VO2 max and related fitness metrics.
Sleep from the services you connect: sleep duration, sleep stages, and sleep scores.
Body information you give us, if you choose to: your height, weight, and sex.
Health information you tell your coach in messages, such as injuries, pain, symptoms, illness, medical conditions, and how you feel or slept, including in photos, audio, or other files you send.
Inferences we make from the data above, such as your recovery, readiness, fitness, and training load.

We use this data only to provide the coaching you ask for: to review your workouts, assess your recovery and readiness, build and adjust your training plan, estimate figures such as calories burned, and write the coaching messages we send you and the replies to yours. Authorized members of the Amby team may review it to support you and to check the quality and safety of your coaching. We also use it to keep the service secure and to comply with the law.

We do not sell consumer health data, and we do not use it for advertising.

Where it comes from

From you, when you set up Amby and when you message your coach.
From the services and devices you connect: Apple Health, Garmin Connect™, Strava, WHOOP, Oura, Fitbit, Google, COROS, Ultrahuman, and Hevy.
From our own analysis of the data above.

Consumer health data we share, and with whom

We share consumer health data with third parties only in these cases:

Your calendar provider (Google), if you connect Google Calendar: the workout sessions you approve adding to your calendar, such as the type and time of a workout.
Government authorities, courts, and law enforcement, any category of consumer health data, when we are required to by law.
A buyer or successor, if Amby is merged, acquired, or sells its assets: any category of consumer health data, only with your consent where the law requires it.
Anyone else you ask us to share it with, with your consent.

We have no affiliates with which we share consumer health data.

To run the service, we also disclose consumer health data to processors that handle it on our behalf, under contract, and only to provide the coaching you ask for: our health data integration provider, our cloud hosting and database providers, our AI provider (OpenAI), and our messaging providers.

Your rights, and how to use them

You have the right to:

Confirm and access whether we collect, share, or sell your consumer health data, see that data, and get a list of every third party and affiliate we have shared or sold it to, with an active email address or other way to contact each of them.
Withdraw consent you have given us to collect or share your consumer health data.
Delete your consumer health data.

To make any of these requests, email us at contact@amby.health. You can also:

delete your whole account, and with it your consumer health data, at any time from Settings in the Amby app or web app;
withdraw your permission for us to send your data to our AI provider, from Settings in the Amby app or web app. Because Amby cannot coach without it, this turns coaching off;
disconnect any connected service from the Amby app or web app. This stops new data from that service. The data we already received from it is kept unless you ask us to delete it. For data we received from Garmin, we delete it within 30 days of your request.

We may ask for information to confirm that a request comes from you. We respond without undue delay, and in all cases within 45 days of receiving your request. If we need more time, we may extend that once by up to 45 more days, and we will tell you within the first 45 days. Requests are free of charge.

Appealing our decision

If we decline to act on your request, you can appeal by replying to our decision, or by emailing contact@amby.health with "Appeal" in the subject line. We will tell you in writing what we decided, and why, within 45 days of receiving your appeal. If we deny your appeal, you can submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.

Contact us

Email Amby Health Inc. at contact@amby.health.

Our full Privacy Policy describes how we handle all personal information.