Legal

Privacy Policy

Effective date: January 1, 2026 · Applies to healthyfittrack.com and all Healthy Fit Track services

Healthy Fit Track LLC ("Healthy Fit Track," "we," "us," or "our") is committed to protecting the privacy of every visitor and member. This policy explains what information we collect, why we collect it, how we protect it, and the rights you have over it. The short version: we never sell your data — ever.

1.Information We Collect

• Information you provide: name, email address, phone number, mailing address, date of birth, and — when you become a member — health history, lab results, biometrics, insurance details, and information shared during care.
• Information from forms: consultation requests, contact messages, and newsletter subscriptions submitted through our website.
• Health data from devices: with your explicit permission, data synced from wearables such as Apple Health, Fitbit, Garmin, Oura, and Whoop.
• Technical data: IP address, browser type, device information, and pages visited, collected through cookies and similar technologies.

2.How We Use Your Information

• To provide, coordinate, and manage your healthcare and wellness services;
• To respond to inquiries, schedule appointments, and process membership billing;
• To personalize care plans, track outcomes, and communicate recommendations from your care team;
• To send service communications and — only with your consent — our newsletter, The Sunday Reset;
• To improve our website, services, and security;
• To comply with legal, regulatory, and professional obligations.

3.Protected Health Information (HIPAA)

When you become a member, much of your information constitutes Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). PHI is used and disclosed only as described in our Notice of Privacy Practices, as required by law, or with your written authorization. Access to PHI is restricted to your care team and essential administrative personnel bound by confidentiality obligations.

4.Cookies & Tracking

We use essential cookies to operate the site, plus privacy-respecting analytics to understand aggregate usage. We do not use cookies for cross-site advertising, and we do not participate in ad networks that build behavioral profiles. You may disable cookies in your browser; core pages will still function.

5.How We Share Information

We share information only in these limited circumstances:

• With your care team — providers involved in your treatment;
• With service providers — vetted vendors (lab partners, secure hosting, billing) under signed Business Associate Agreements and strict data-processing terms;
• As required by law — court orders, public health reporting, or to prevent serious harm;
• Never — to advertisers, data brokers, or for commercial sale in any form.

6.Data Security

We apply HIPAA-aligned administrative, physical, and technical safeguards: encryption of data in transit (TLS) and at rest (AES-256), role-based access controls, multi-factor authentication for staff, continuous monitoring, and annual third-party security assessments. No system is perfectly secure, but we treat your data with the same care we'd demand for our own families.

7.Data Retention

Clinical records are retained for the period required by Hawaii state law and HIPAA (generally at least seven years after the last patient contact). Website inquiry data is kept for up to 24 months. Newsletter data is deleted promptly upon unsubscribe. When retention periods expire, data is securely destroyed or irreversibly anonymized.

8.Your Rights

Depending on your state of residence (including rights under laws such as the California Consumer Privacy Act and the Hawaii UIPA), you may have the right to:

• Access and receive a copy of your personal information;
• Request correction of inaccurate information;
• Request deletion, subject to medical-record retention laws;
• Opt out of marketing communications at any time (see our unsubscribe page);
• Receive a copy of your PHI in electronic form and direct it to another provider;
• File a complaint without retaliation.

To exercise any right, email info@healthyfittrack.com or write to us at the address below. We respond within 30 days.

9.Third-Party Links

Our website may link to third-party sites (e.g., wearable makers or lab partners). We are not responsible for their privacy practices and encourage you to review their policies.

10.Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect their data online. Members ages 12–17 are served only with verifiable parental or guardian consent in accordance with applicable law.

11.Changes to This Policy

We may update this policy to reflect changes in law or practice. Material changes will be announced on this page with a revised effective date, and members will be notified by email where required.