EFFECTIVE 11 OCTOBER 2026
What consumer health data Duckin collects, why, who processes it, and how to use your rights over it.
This policy is for people in Washington State and Nevada. It is required by the Washington My Health My Data Act and by Nevada law, and it applies alongside our Privacy Policy. "Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Duckin is run by Harry Howarth, an individual trading as Duckin. Contact: duckinapp1@gmail.com.
We collect consumer health data only to provide the features you use, or with your consent. The categories, and what each is used for, are: • Body measurements you choose to enter: sex, height, body weight, and age. These are optional. We use them only to estimate the calories you burn, and your sex also chooses the body figure shown in your monthly report. • Training activity: the sessions you run or log, with their type, date, duration, rounds, difficulty, strike counts, the combinations called, and how you rated a session. We use this to keep your training log, to work out your streak, XP, records, and monthly report, and to back your progress up to your account. • Fitness estimates the app works out from the two categories above: calories burned, training load, strike rate, stamina, and your training score. We use these to show you your progress. • Training goals and background you give when you set up the app: your discipline, your goal, how long you have trained, and how often you train. We use them to choose the combinations, difficulty, and targets the app gives you. We also use this data to keep the app working and secure, and, keyed to a random install identifier and not to your name, email, or account, to understand which features are used. We do not use consumer health data for advertising.
• You: what you type or choose in the app. • The app: what it records while you run a session, and the estimates it works out from that. We do not collect consumer health data from other companies, from wearables, or from other apps on your phone.
We do not share consumer health data with third parties, and we do not sell it. Duckin has no affiliates. No third party collects consumer health data about you over time and across other websites or apps through Duckin. One category is shown to other people, and only if you take part: where the Arena is open and you join it, your username, tier, streak, and weekly scores are visible to other Duckin users on leaderboards and in your league.
Two service providers handle consumer health data on our instructions so the app can run. They are processors, not third parties we share with, and they may not use the data for their own purposes: • Supabase, Inc. stores your account, the cloud backup of your training activity, and your setup answers, including any body measurements you entered. • PostHog, Inc. receives usage events about sessions, such as the type of session, the number of rounds, and the duration, together with your discipline and goal. These are keyed to a random install identifier, not to your account. Both store data in the United States and may process it in other countries.
You have the right to: • confirm whether we are collecting, sharing, or selling your consumer health data, and to access it, including a list of any third parties and affiliates it has been shared with or sold to; • withdraw your consent to our collecting and sharing it; and • have it deleted. To use any of these rights, email duckinapp1@gmail.com from the address on your Duckin account and say which right you are using. You can also act in the app without asking us. Change or clear your height, weight, and age in Settings, then Profile. Turn off usage analytics in Settings, then Preferences. Delete your account and everything in it in Settings, then Delete account. We confirm a request comes from the account holder, usually by replying to the account email. We answer within 45 days. If a request is complex we may take up to 45 days more, and we will tell you so, and why, within the first 45 days. Requests are free, up to twice a year.
If we decline to act on a request we will tell you why. You can appeal by replying to that email and asking for a review. We answer an appeal in writing within 45 days, with our reasons. If your appeal is refused, you can complain to your state Attorney General. In Washington: www.atg.wa.gov/file-complaint. In Nevada: ag.nv.gov.
Before we collect, use, or share a new category of consumer health data, or use it for a new purpose, we will update this policy and ask for your consent where the law requires it. The effective date at the top shows when it last changed.