Consumer health data policy

This policy describes the health information Steelset Performance ("Steelset") collects, why, who receives it, and your rights over it. It adds to our Privacy policy, which covers everything else. Some states, such as Washington, call this information "consumer health data" and give you specific rights over it; we give these rights to everyone.

Steelset is made by QuestLabs LLC ("Quest Labs", "we", "us").

Who is responsible

• If you train with a gym, or work at one, your gym is responsible for your information (it is the "controller") and decides what it records about you in Steelset; Quest Labs processes the information for your gym, following its instructions (we are its "processor"). Steelset asks for any consent on your gym's behalf and keeps the record. Your gym answers your requests, using Steelset's tools, and decides any appeal. If you send a request to us, we pass it to your gym within 3 business days and help your gym answer it.
• If you train on your own (an "independent athlete") or visit our public website, Quest Labs is responsible for your information (the "controller"): we decide what is collected, ask for and record any consent, answer your requests, and decide appeals.

Quest Labs is also responsible, for everyone, for what it decides on its own: securing Steelset, keeping it running, and its own business records.

What health information we collect

• Your body weight and target weight.
• Injury notes.
• Pain you report during a workout, and where it hurts.
• Notes you type when you finish a workout, which may mention how you feel.
• Training goals that relate to your health, such as losing weight or recovering from an injury.
• Alerts your trainer receives when a workout was missed or hard, which are worked out from your logs.
• For independent athletes: the answers you give for an AI training plan (including injuries and how your last plan went), and the plans and weekly changes written from them.

We don't collect diagnoses, medications, or medical records, and we never use your location.

Where it comes from

• From you, when you fill in your profile, answer questions for an AI plan, or log a workout.
• From your trainer or gym, when they record your weight, goals, or injuries in your profile or program.
• From your workout logs, when Steelset works out an alert for your trainer.

Why we collect and use it

Only to provide Steelset to you:

• so your trainer can write and adjust your programs and see how training is going;
• to alert your trainer about missed or hard workouts;
• for independent athletes, to write and adjust your AI training plans;
• to show you your own history.

We never sell it, never use it for advertising, and never use it for any other purpose without asking you first.

No one at Quest Labs reviews it medically. Pain reports and alerts go to your trainer automatically and aren't watched for emergencies. If you're hurt, get medical help.

Your consent

We ask for your consent before collecting your health information: when you create an independent account, or when you accept your gym's invitation. This consent is separate from agreeing to our Terms of use and Privacy policy. For a gym athlete, Steelset asks on your gym's behalf and keeps the record of your answer, and your gym is responsible for the consent. For an athlete under 18, the parent or guardian consents, and the record names them; when the athlete turns 18, we ask the athlete. If you joined before we asked, we ask the next time you sign in (for an athlete under 18, we ask the parent or guardian), and again if you move from a gym to training on your own.

You can withdraw your consent at any time in the app (Account, then Your data), by emailing us, or, if you train with a gym, by asking your gym. We then stop collecting it. Because Steelset can't record workouts without it, your account can't be used for training until you consent again, but you can still see, download, and delete your information.

Withdrawing your consent doesn't cancel your membership or subscription, and doesn't stop its charges. To stop them, cancel in the app (Account, then "Cancel membership"), or delete your account.

Who receives it

• Your gym: its administrators, and your trainer, as described in our Privacy policy. Other gyms and other athletes never see it.

• Companies that process it for us, only to provide Steelset, under their terms with us, which limit their use of it:

  • Google Cloud and PlanetScale, which host our service and database in the United States;
  • Google Workspace, our email, only if you email us about your health.
  • Anthropic, which writes AI plans for independent athletes only. It receives your answers and training history without your name, contact details, date of birth, or calendar dates, and deletes them within 30 days, except where it must keep them longer to enforce its usage policy or by law. A gym athlete's health information is never sent to an AI service.

• Quest Labs staff, only to run, support, and secure Steelset.

• Others, only in the cases our Privacy policy describes: when the law requires it or to protect someone's safety, and a new owner if our business is sold, merged, or transferred.

We have no affiliates that receive it. Our Privacy policy lists every company that receives any of your information and what each receives; the ones above are those that can receive your health information. We never sell it.

Health information never appears in our server logs or in the notices sent to phones and browsers; our software checks both.

Your rights

You can:

• Confirm whether we collect or share your health information, and see it. Everyone we share it with is listed under "Who receives it" above. In the app, go to Account and then "Everything stored about you". On the website, go to Account and then "Your data". Or email us.
• Delete it: in the app, go to Account and then "Delete my account", or email us. It's deleted from Steelset's active systems at once. Copies then remain only where they can't be removed at once, for these periods and reasons: in our backups for up to 14 days, kept to recover from a failure; and at Anthropic, for independent athletes, for up to 30 days, except where Anthropic must keep it longer to enforce its usage policy or by law.
• Withdraw your consent, as described above.

We confirm we received a request within 7 days and complete it within 30 days. We'll need to confirm the request comes from you. There's no charge.

Appeals. If we decline your request, you can appeal by emailing us with "Appeal" in the subject line; if you train with a gym, appeal to your gym, which decides it. We'll answer in writing within 45 days and explain our decision. If you disagree with our answer to your appeal, you can contact your state's attorney general: in Virginia, at oag.state.va.us; in Washington, at atg.wa.gov.

Changes to this policy

Each time we change this policy, we update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect if we can, and otherwise when it takes effect. We'll ask for your consent again before using your health information in a new way.

Contact us

QuestLabs LLC
5913 Harbour Park Drive, Midlothian, VA 23112
Telephone: 804-601-0180
Email: support@steelsetperformance.com