Consumer Health Data Notice

WITHit Privacy Policy - Apps

WITHit Consumer Health Data Notice

Washington My Health My Data Act • Nevada SB 370 • Similar State Health-Data Laws

Effective and Last Updated: September 10, 2026

This Consumer Health Data Notice is the standalone notice required by the Washington My Health My Data Act (RCW Chapter 19.373), Nevada Senate Bill 370 (NRS Chapter 603A), and comparable state statutes. A regulated entity must post a conspicuous homepage link to this Notice. This Notice is also Section 5 of the WITHit Privacy Policy. If this Notice and the rest of the Privacy Policy conflict on Consumer Health Data, this Notice controls.

Sol-Light, LLC dba WITHit ("WITHit," "we," "us," or "our") provides consumer wellness smartwatches and a companion mobile application (the "Services"). This Notice describes how we collect, use, disclose, and delete Consumer Health Data of U.S. consumers through the Devices and App. It does not govern our Shopify storefront, which has a separate privacy policy.

What is Consumer Health Data

"Consumer Health Data" means personal information that identifies or is reasonably capable of being associated with a consumer and that identifies the consumer's past, present, or future physical or mental health status, including the categories listed below.

Categories Collected and How We Use Them

  • Bodily function telemetry (heart rate and heart-rate variability): to display current and historical heart-rate tracking you enable.
  • Sleep telemetry (duration, awakenings, stage estimates): to display sleep history you enable.
  • Physical activity records (workout type, cadence, active minutes, estimated energy expenditure): to display activity history you enable.
  • Physiological profile metrics you enter (height, weight, age, sex/gender): to calibrate calorie and dashboard estimates.
  • Precise workout geolocation combined with heart-rate and cadence: to map outdoor routes you start and to calculate pace.

We do not collect, use, or share Consumer Health Data for marketing, advertising, or sale. We do not sell Consumer Health Data.

Sources

  • You (profile entries, workouts you start, support submissions);
  • Your paired WITHit Device when you enable a feature;
  • The companion App and operating-system permissions you grant;
  • Account identifiers from a sign-in provider, only to associate data with your account.

Categories Shared and Recipients

We disclose Consumer Health Data to processors under written contracts. That is processing on our behalf, not a "share" or "sale" to a third party. We do not share or sell Consumer Health Data to third parties except at your direction (for example, an export you enable). We do not share Consumer Health Data with affiliates for an affiliate's own purposes. Categories of processors: U.S. cloud hosting and database providers; customer-support and diagnostic tools (when a ticket or authorized support session includes telemetry); security, logging, and crash-analysis vendors; and professional legal or accounting advisors when necessary for claims, audits, or tax obligations. Mapping providers may receive transient coordinates solely to render a route you requested.

We do not authorize third parties to collect Consumer Health Data across other websites or services for those third parties' own purposes when you use our Services. If you export data to Apple Health, Google Health Connect, or a similar platform, that recipient is a third party you directed, not our processor, and that party's privacy policy applies to the exported copy.

Consent

We obtain unbundled, affirmative in-App consent before first collection of Consumer Health Data from a paired Device. Separate consent is required before export to a non-processor third-party health platform. You may withdraw consent in App Settings > Health Data Permissions or by emailing support@withitgear.com. Withdrawal stops new collection and new sharing for the withdrawn feature and does not require a fee. Withdrawal does not by itself delete data already stored; request deletion as described below. Clock, alarm, and stopwatch functions can continue.

Geofencing

We do not implement or use a geofence around any in-person healthcare facility to identify, track, collect health data from, or target consumers.

Your Rights

You may request confirmation of collection, sharing, or sale; access a copy of your Consumer Health Data; obtain a list of third parties and affiliates that received it and a contact mechanism where we have one; withdraw consent; stop collection or sharing; and request deletion. Email support@withitgear.com with the subject line "Consumer Health Data Request." We will verify your identity as described in the Privacy Policy. Appeals follow Privacy Policy Section 14.6.

Authenticated deletion requests are completed in active production systems and processor systems within 45 days. Inactive archive or backup copies are put beyond use within six months after authentication, unless law or a legal hold requires longer. We will notify processors, contractors, and other recipients as required. We cannot delete copies you already exported to a platform you control.

Material Changes

If we add categories of Consumer Health Data, purposes, or recipient categories not described here, we will update this Notice, give prominent notice, and obtain any additional consent required before applying the change to historical Consumer Health Data.

Contact

Sol-Light, LLC dba WITHit 

© 2026 Sol-Light, LLC dba WITHit. All rights reserved.