Consumer Health Data Privacy Policy

Effective: October 5, 2026 · Last updated: October 5, 2026

iVenza helps athletes log training, recovery, nutrition and injuries, so some of what you give us is consumer health data. This policy explains, in one place, what that is, why we collect it, where it comes from, who receives it, and how you can use the rights that Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's consumer health data provisions give you. It supplements our Privacy Policy, which covers everything else. Show Up Show Out LLC ("we," "us") operates iVenza.

Who this applies to

Anyone in Washington, or whose consumer health data we collect in Washington, and residents of Nevada and Connecticut. We apply the same protections to everyone else who uses iVenza, under the same controls described in the Privacy Policy. If you use iVenza through a school and the school directs how we handle your information, the school's agreement with us governs it.

What we collect, why, and where it comes from

We do not collect biometric identifiers such as faceprints or fingerprints, we do not track visits to health care facilities, and we do not set up a geofence around any place that provides health services.

Who receives it

We share consumer health data only in these ways:

• Gyms, teams and coaches you authorize. When you join a gym or team, the categories you can control under More → My gyms & teams (training, body, sleep, and "how you feel & injuries," among others) start switched on for that gym, so its coaches can coach you, and nothing is shared with a gym you have not joined. You can switch any category off for any gym at any time. Coaches can read these entries but cannot change them. Medical clearances and tax forms submitted to a fight promotion are visible to that promotion's staff.
• Service providers that process it for us. These are not recipients for their own purposes: they act only on our instructions and under contract. They include our database and hosting providers and, only when you tap to run an AI feature on your data (such as the weekly briefing), our AI provider, which does not use it to train its models. The categories of provider, and each one by name, are on our sub-processor register.
• Other people, only if you publish it. If you opt in to a fighter-marketplace resume or a recruiting profile, the statistics you choose to include become visible to the matchmakers, scouts and recruiters those features serve, and a minor's profile never shows health statistics.
• Legal and safety. To comply with a valid legal process or to protect a person's safety, and to a successor if we are sold, subject to this policy.

We do not sell consumer health data, and we do not share it for advertising. The Meta Pixel on our marketing website receives no consumer health data, and it does not run in the iVenza app or the web app. We have no corporate affiliates with which we share consumer health data.

Your consent

We collect consumer health data to provide the features you ask for. You choose what to log, whether to connect Apple Health or Health Connect (your phone asks first), whether to run an AI feature (it runs only when you tap it), whether to share a category with a gym, and whether to publish a profile. You can take back any of those choices at any time, as the section below explains, and withdrawing does not undo what happened before you did.

Your rights

You can ask us to:

• Confirm whether we are collecting, sharing or selling your consumer health data, and access it, together with a list of all the third parties and affiliates with which we have shared it and a way to contact them;
• Withdraw consent you gave us to collect or share it. You can do most of this yourself: delete the entries, disconnect Apple Health or Health Connect in your phone's settings, switch a sharing category off, or delete your account;
• Delete it. We delete it from our active systems, tell the processors holding it to delete it, and remove it from archived or backup systems when those are next restored or accessed, and in any case within six months of confirming your request; and
• Appeal if we refuse a request.

How to ask. Use Your Privacy Choices, which has self-serve tools and a request form for anyone who cannot sign in, or email help@susos.co. It is free. We confirm that you control the account before we release or delete anything, answer within 45 days, and may extend once by 45 more days with notice and a reason. A parent or guardian may ask for a child's data.

Appeals. If we refuse, you may appeal by choosing "Ask a privacy question" on Your Privacy Choices and starting your message with "Appeal," or by emailing help@susos.co with the subject "Appeal." We will tell you what we decided within 45 days and why. If you are still not satisfied you can contact your state's attorney general; Washington residents can use the Attorney General's complaint page.

Nevada and Connecticut

Nevada residents have the rights above and may also opt out of the sale of consumer health data; we do not sell it. Connecticut residents have the same choices, and we process consumer health data only with the consent you give by using the features described above. We apply the same protections and process to residents of every state.

Keeping it safe and how long we keep it

We protect it with encryption in transit, access controls enforced in the database, and the other measures in section 6 of the Privacy Policy. How long we keep each category, and what survives account deletion and why, is in the retention schedule.

Changes and contact

We will update this policy when what we collect or share changes, and where the law requires your consent to a new use, we will ask for it before we start. Questions go to help@susos.co.