Privacy Policy

RTK Health — A product operated by RealTime Kinetics, LLC
Effective Date: April 2026 · Last Updated: August 11, 2026

Overview

RTK Health, a product operated by RealTime Kinetics, LLC, is a pseudonymous health tracking service. Your identity within the service is a cryptographic hash — we never ask for your name, phone number, or physical address. You can sign in with a cryptocurrency wallet, Google account, Apple account, or email magic link; regardless of which method you choose, the user record attached to your data is identified by a hash, not your email or real-world identity.

Email is optional profile data. If you sign in with Google, Apple, or an email link, we store your email in a profile field used exclusively for weekly summary delivery and sign-in. Email is stored separately from your health data, never sold, never shared with advertisers, and clearing the field opts you out instantly without affecting any other part of your record.

What We Collect

What We Do NOT Collect

How We Use Your Data

Primary: To provide the RTK Health service — storing logs, generating AI analyses, displaying dashboards.

AI Processing: When you use an AI feature (health analysis, the AI coach chat, meal-photo estimation, or AI document parsing), the health data relevant to that request is sent to Anthropic (the Claude AI service), our third-party AI provider, to generate your result. We ask for your permission in the app — naming Anthropic and describing what is sent — before any health data is sent for AI processing the first time, and you can withdraw that permission at any time in Profile → Data & Privacy. Data is sent under your pseudonymous identifier, never your name or contact information. Anthropic does not use data submitted through its API to train its models and retains it only for a limited period for abuse monitoring; it is contractually bound to protect this data at a level comparable to the protections described in this policy. If you do not grant permission, AI features remain off and the rest of the app continues to work.

Research & licensing — only if you opt in: RTK Health includes two optional, separate, default-OFF opt-ins. Nothing in the app is conditioned on them, you can withdraw either at any time in Profile → Privacy & Data, and each expires after 12 months. If you opt in: (1) Research & study matching — we may include your de-identified data in research datasets and match you to (often paid) studies you may qualify for (you separately decide whether to enroll, under that study's own IRB-approved consent); and (2) Commercial licensing — we may license or sell de-identified, aggregated data (group statistics, never identifiable records) to research and commercial partners for a fee. We license aggregated group statistics only; we do not currently license individual-level records, and any future individual-level licensing would require its own separate opt-in.

De-identification: Before any research or licensing disclosure, we will strip your identity hash, email, and other identifiers and de-identify the relevant dataset using the HIPAA Expert Determination method, meaning a qualified expert determines the risk of re-identifying anyone is very small — which we use rather than identifier-stripping alone because movement-capture and biometric data can be individually distinctive. Every recipient is contractually barred from re-identifying or re-disclosing the data.

Excluded sensitive categories: Certain highly sensitive categories — including cycle, intimacy, fertility, pregnancy, postpartum, menopause, and mental-health data, as well as free-text entries — are excluded by design from research and commercial licensing and are not included even if you opt in. Data received from Google APIs (see "Google User Data" below), body-scan data, and legacy Strava data are likewise excluded by hard-coded, source-level rules.

Optional reimbursement: If you opt into commercial licensing, you may provide a wallet to receive optional reimbursement in USDC (Base network) if your aggregated data is included in a paid license. It is optional and not guaranteed; no reimbursement has been paid to date. USDC is a digital asset; transfers occur on the Base network to the wallet address you provide, and RTK is not responsible for wallet loss, private-key compromise, unsupported wallets, network issues, or transfer errors caused by an incorrect address. USDC is a stablecoin pegged to the U.S. dollar but is not FDIC-insured and carries smart-contract and de-pegging risk, and you are solely responsible for the security of your wallet. Reimbursements may be taxable, and RTK does not provide investment, financial, or tax advice.

Email (only if you opt in or sign in with it): When an email is associated with your account we use it solely for (a) sign-in and account messages (magic links, verification, and a one-time welcome note), and (b) weekly summary delivery — all via our transactional email provider (Resend). Your email is not added to any marketing list, not shared with any third party beyond the delivery provider, and is removed the moment you clear it from your profile.

We will never sell or share data that identifies you — your identity hash, email, or any field that could reasonably link a record to your real-world identity. We will never share records with advertisers, use your email for marketing, or use your data to train our own AI models; our data-license agreements also prohibit licensees from using the licensed data to train AI models on data attributable to you.

Business transfers: In connection with any merger, acquisition, financing, reorganization, or sale of all or part of our assets, your data — including your health data — may be transferred to a successor or acquiring entity, which will remain bound by the commitments in this policy. This transfer is not a "sale" or "share" of your data for advertising or commercial-licensing purposes and does not change the protections described above.

Google User Data (Limited Use)

Some users connect Google services to RTK Health — Google sign-in, or a Google Health & Fitness connection that syncs wearable data (workouts, heart rate, sleep, and related metrics). RTK Health's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• App features only: data received from Google APIs is used solely to provide and improve the user-facing features you see in the app — displaying your own workouts, heart rate, sleep, and trends, and generating your own analyses. It is never used for advertising and never sold.
• Excluded from research & licensing: data received from Google APIs is excluded from the optional research and commercial-licensing programs described in this policy by a hard-coded, source-level rule. It is not included even if you opt in to those programs.
• No AI/ML training: we do not use Google user data — raw, aggregated, anonymized, or derived — to create, train, or improve any machine-learning or artificial-intelligence model (including foundational or generalized models), and we do not transfer it to any third party for that purpose. If you separately enable AI features (see AI Processing above), the data needed for your request — which may include wearable data received via Google APIs — is sent to Anthropic's Claude API solely to generate your own result; under Anthropic's commercial API terms, Anthropic does not use data submitted through its API to train its models.
• Human access: no person at RTK reads your Google user data except with your explicit permission (for example, categories you choose to share with your coach), when necessary for security or abuse investigation, or where required by applicable law.
• Transfers: we do not transfer Google user data to any third party except as necessary to provide the features above (our hosting provider and, only with your separate AI permission, our AI provider), for security purposes, or to comply with applicable law.

Your Choices & Rights

The research and commercial-licensing programs above are strictly optional, off by default, and require your affirmative opt-in. You can withdraw either choice at any time in Profile → Privacy & Data, and each opt-in expires after 12 months. Nothing in the app is ever conditioned on these choices, and we will not deny you any feature or charge you differently for opting out.

Subject to applicable law — including the California Consumer Privacy Act (CCPA/CPRA) and Washington's My Health My Data Act — you may request to access, correct, delete, or port your data, and you may withdraw consent to its collection and sharing. Because we identify you only by a cryptographic identifier, you exercise these rights by demonstrating control of that identifier (and your email, if you provided one). To make a request, contact rtkmotion.io/contact.

California residents: You may opt out of the sale or sharing of personal information and limit the use of sensitive personal information. Leaving the research and commercial-licensing toggles off means RTK Health will not use your data for these optional programs.

Washington residents: Because Washington's My Health My Data Act requires a separate and distinct authorization to sell consumer health data, we will not sell your consumer health data unless you complete a Washington-specific authorization identifying the categories of data sold, the purchaser, the purpose, and an expiration date. You may revoke that authorization at any time, though revocation will not affect transactions completed before revocation.

Third-Party Integrations

Body Scans & Biometric Data

The optional Body Scan feature (Premium) processes a 360° video of your body — which necessarily includes your face — to compute your body measurements and a 3D body model ("avatar"). This is our written policy for that data.

Consent before collection: a scan is collected and processed only after your explicit in-app consent at the point of capture, describing what is collected, why, and for how long. Use of your scan to improve our body-scan model is a separate, optional, default-off consent.

Purpose limitation: scan data is used only to build your avatar, compute your measurements, and track changes over time (plus model development only under that separate consent). We never perform facial recognition; your face appears only because a full-body capture necessarily includes it, and once processing completes we automatically blur faces in the stored video so the retained copy carries no recoverable facial imagery.

Retention & destruction schedule: your scan video, body model, and measurement records are kept while the scan exists in your account, and are permanently destroyed — including the underlying stored files — when you delete the scan or your account, and in any event no later than three (3) years after your last interaction with the Service, whichever comes first.

No sale — ever: we will never sell, lease, trade, or otherwise profit from your scan video, body model, or body measurements, in identifiable, de-identified, or aggregated form. Scan data is excluded from the research/licensing opt-ins by a hard-coded rule; no consent setting can include it.

Disclosure: the scan video is never shared with anyone. Your avatar and measurements are visible only to you unless you enable coach sharing for body scans (avatar + measurements only — never the video) or grant per-scan support access; both default-off and revocable.

How We Protect Your Data

All user data — and your health data in particular — is protected by the following mechanisms:

• Encryption in transit: every connection to RTK Health uses TLS (HTTPS) — between your device and our servers, and between our servers and every integrated service.
• Encryption at rest: your data is stored on Cloudflare's platform (D1 database and R2 object storage), which encrypts all stored data at rest.
• Pseudonymous storage: health records are keyed to a cryptographic identifier, not your name or email; your email (if any) is held in a separate table used only for sign-in and message delivery.
• Connection-token protection: OAuth tokens for connected services (Google, Fitbit, Whoop, Oura) are held server-side only and are never exposed to your browser or device; all tracker connections are read-only, and disconnecting removes the stored tokens.
• Access controls & audit: your data is reachable only through your authenticated session. Coach access is opt-in per data category, revocable at any time, and every coach view of your data is logged and visible to you.
• Minimum-necessary AI requests: when AI features are enabled, requests carry only the health data relevant to the request under your pseudonymous identifier — never your name, email, or wallet address.
• Deletion: account deletion runs a full cascade across our database, file storage, and payment records; biometric scan data is additionally purged no later than three years after your last interaction with the Service.

Data Retention & Deletion

Active accounts: data retained for life of account. Deletion: within 30 days of request. Body-scan data follows the stricter schedule above. Contact rtkmotion.io/contact.

GDPR & International Users

Your internal identity hash is pseudonymous personal data under GDPR. You have the right to access, rectify, erase, restrict, and port your data. Contact us to exercise these rights.

HIPAA Considerations

RTK Health is not a HIPAA-covered entity. We voluntarily follow HIPAA principles where applicable: minimum-necessary access, secure transmission, and — for any research or licensing use — we will de-identify records using the HIPAA Expert Determination method (45 CFR §164.514), under which a qualified expert determines the risk of re-identifying anyone is very small, before records leave the operational service. We use Expert Determination rather than identifier-stripping alone because movement-capture and biometric data can be individually distinctive, and we additionally aggregate data into group statistics before licensing.

Children's Privacy

RTK Health is intended only for individuals 18 years of age or older. We do not knowingly collect, use, sell, or share data from anyone under 18, and we do not direct the service to children. At account creation, every user must affirm that they are at least 18 years old, and we record that attestation.

If we learn that a user is under 18, we will suspend the account, block all research and commercial-licensing opt-ins for that account, and delete the associated data consistent with this policy and applicable law. If you believe someone under 18 has created an account or provided us data, contact us at rtkmotion.io/contact so we can promptly investigate and take action.

Contact

Questions? rtkmotion.io/contact