Consumer Health Data Privacy Notice
Last updated: May 27, 2026
This notice describes how ClutchDay (operated by Kelsey Poulter LLC) handles "consumer health data" as defined by Washington State's My Health My Data Act and Nevada SB 370. It supplements, and is read together with, our Privacy Policy. If you are a Washington or Nevada resident, the rights below apply to you.
Who this applies to
This notice applies to Washington and Nevada residents who use the ClutchDay app and clutchday.com. Residents of other states have additional rights described in our main Privacy Policy.
Consumer health data we collect
To generate personalized nutrition plans, ClutchDay collects health and fitness data that you provide:
- Body weight, height, age, and biological sex
- Sport, training load, season, and competitive goals (used to estimate energy needs)
- Food and meal logging, weekly check-ins, and hydration intake
- Schedule data (practices, games, events) used to time fueling
ClutchDay does not collect or process:
- Medical diagnoses, clinical records, or genetic information
- Data from wearable devices or third-party health apps
- Precise location data (we use approximate location only from IP for security and analytics)
How we use consumer health data
Consumer health data is used only to power the Service for you: generating meal plans, calculating fueling targets, tracking progress, and providing support. We do not:
- Sell consumer health data to any party
- Use consumer health data for advertising, marketing profiling, or third-party tracking
- Share consumer health data with data brokers or non-affiliated commercial parties
Service providers who process this data
We share consumer health data only with the vendors required to run ClutchDay, each bound by contract to keep it confidential and use it only on our instructions:
- Supabase — secure database and authentication
- Vercel — application hosting
- Stripe — billing (does not receive health data, only subscription state)
- Resend — transactional email
- Sentry — error monitoring (de-identified)
- PostHog — product analytics (de-identified where possible)
We may also disclose data when required by law, to respond to lawful requests from public authorities, or to protect the rights and safety of users.
Your rights
As a Washington or Nevada resident, you have the right to:
- Confirm whether we are processing your consumer health data and access a copy of it
- Request that we delete your consumer health data
- Withdraw consent for processing (note that this may end your ability to use the Service)
- Appeal a denial of any of the above by contacting us; if your appeal is denied, you may file a complaint with the Washington Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov).
To exercise any of these rights, email support@clutchday.com from the email on your account. We typically respond within 45 days.
Retention & security
We keep consumer health data only as long as your account is active. When you delete your account, we delete or de-identify your consumer health data within 30 days, except where retention is required by law (e.g. billing records).
We protect consumer health data with encryption in transit, row-level access controls on our database, and limited human access to production systems.
Changes
We may update this notice. Material changes will be communicated to the email on your account.
Contact
For questions about this notice or to exercise your rights, email support@clutchday.com.