Washington Consumer Health Data Privacy Policy

Last updated November 12, 2026

This Consumer Health Data Privacy Policy applies to Washington residents and to any individual whose consumer health data is collected in Washington, in accordance with Washington's My Health My Data Act (RCW 19.373).

It covers the only data YoPak collects that may qualify as "consumer health data" under the Act: the optional body fields you choose to provide. All other personal data YoPak processes is governed by our general Privacy Policy.

The YoPak developer team jointly determine the purposes and means of processing this data ("we," "us," or "our"). A Discord server running YoPak is referred to as a Pak.

Categories of consumer health data we collect

Under RCW 19.373, consumer health data is categorized by specific statutory types. YoPak collects only the following category—and only if you voluntarily enter it:

• Bodily functions, vital signs, symptoms, or measurements:
  • Your sex
  • Your height
  • Your body weight

We also record your affirmative declaration that you are 16 years of age or older, along with the timestamp of when you gave consent.

Each body field is optional and timestamped, meaning YoPak retains a historical log of the values you enter so your workouts can be scored accurately over time. If you do not enter body fields, YoPak collects no consumer health data about you.

Purposes for collection and use

We collect and use your consumer health data strictly for one purpose: to calculate relative strength scores for your workout sets against people of similar size.

We do not use your consumer health data for advertising, profiling, marketing, or any secondary purpose.

Sources of consumer health data

We collect consumer health data directly and exclusively from you when you manually enter it into your private profile panel (/profile) on Discord. We do not collect consumer health data from third parties, data brokers, or connected devices, nor do we infer health data from other information.

Who we share consumer health data with

Under Washington's My Health My Data Act, "sharing" means releasing or disclosing consumer health data to a third party or affiliate.

• Categories of third parties with whom we share data: None. We do not share your consumer health data with any third parties. Your body fields are never displayed to other users in any Pak; only you can view them in your private profile panel. (Your calculated workout points are displayed in your Pak, but your underlying body measurements are never revealed.)
• Specific affiliates with whom we share data: None. YoPak has no corporate affiliates.
• No sale of data: We do not sell your consumer health data, and we do not permit third parties to collect consumer health data over time and across different websites or online services.

Service providers (Processors)

To operate YoPak, your data passes through or is stored by infrastructure providers acting strictly as processors on our behalf under binding obligations to use the data only to provide services to us:

• Discord: The platform interface where you enter your data.
• Oracle: Cloud infrastructure hosting YoPak and its database.
• Backblaze B2: Cloud storage holding YoPak's encrypted nightly backups.

How to withdraw your consent

YoPak does not collect or store any body fields until you give separate, affirmative opt-in consent via our dedicated prompt ("I'm 16 or older and I agree"), which is never bundled with other terms or consents.

You have the right to withdraw your consent at any time, through a mechanism as easy as the one you used to provide it:

1. Open your private profile panel (/profile) on Discord and withdraw consent directly, or
2. Email us at the address listed in the Contact section below.

Withdrawing consent immediately and permanently deletes your body fields, your historical measurement log, and your consent record (including your 16+ declaration). Once deleted, YoPak will score future workout sets without body-size adjustments. Finalized leaderboards for seasons that closed prior to your withdrawal remain unchanged.

Your rights and how to exercise them

Under the My Health My Data Act, you have the following rights regarding your consumer health data:

• Right to Confirm: You have the right to confirm whether YoPak is collecting, sharing, or selling your consumer health data.
• Right to Access: You can view all current body fields stored for your account at any time in your private profile panel (/profile). To request a complete copy of all consumer health data and historical logs YoPak holds about you, contact us at the email address below.
• Right to Withdraw Consent: You may withdraw your consent to our collection and use of your consumer health data at any time via /profile or by email.
• Right to Delete: Withdrawing consent deletes all consumer health data. You may also click Delete my data in your profile panel—or email us—to delete all data YoPak holds about you across every Pak.

Verification and timelines

• Deletion timeline: Deleted data is removed from YoPak's live database immediately and purged from our Backblaze B2 backups within 30 days as backup archives rotate out.
• Response timeline: We respond to all consumer rights requests free of charge within 30 days of receipt (and always within the statutory maximum of 45 days under RCW 19.373.040). Before fulfilling an access or deletion request via email, we may ask you to verify your Discord user ID to ensure we do not disclose or delete data for the wrong person.

Appeals

If we decline to take action on your request, you have the right to appeal our decision within a reasonable period of time by replying directly to our refusal email or writing to the privacy email address below with the subject line "Privacy Appeal."

We will respond to your appeal in writing within 45 days explaining the action taken or not taken and the reasons for our decision. If your appeal is denied, we will provide you with a method to contact the Washington State Attorney General to submit a complaint (at www.atg.wa.gov/file-complaint).

Changes to this policy

If we make changes to this policy, we will update the updated date at the top of this page. We will never collect additional categories of consumer health data or use existing data for materially different purposes without first updating this policy and obtaining your new, affirmative consent.

Contact

To exercise your rights, submit an appeal, or ask questions about this policy, contact us at: yopaksupport@gmail.com

• Email: Privacy email: yopaksupport@gmail.com