Tididi Consumer Health Data Privacy Policy

Effective date: November 6, 2026

This Consumer Health Data Privacy Policy explains how Tididi handles "consumer health data" as defined in the Washington My Health My Data Act, Nevada Senate Bill 370, the Connecticut Data Privacy Act, and similar laws. It applies to users who live in the United States and supplements the Tididi Privacy Policy (https://tididi-db733.web.app/privacy-en.html).

1. Who We Are

The Service is operated by LEE SEUNGHWAN, an individual doing business as "Tididi," located in Nowon-gu, Seoul, Republic of Korea. Contact: tididiapp@gmail.com.

2. Consumer Health Data We Collect

• Running records you save in the Service: date and time, distance, duration, pace, average heart rate, cadence, calories, and elevation
• Data read from a health app you connect (Health Connect on Android or Apple Health on iPhone), only after you agree on the "Health data consent" screen and allow it in your phone's permission screen: start and end time of running workouts (including treadmill), distance, calories burned, average heart rate during the run, and the name of the app that recorded the workout. On Android, steps are read together with workouts because the permission is required to read workouts, but steps are not stored.
• Running records shown in posts you choose to publish

We do not collect precise location or running routes, sleep, weight, or other health information, and we do not create inferences about your health status.

3. Sources

• You, when you enter or edit a running record or create a post
• The health app you connect (Health Connect or Apple Health), with your consent

4. How We Use Consumer Health Data

• To create running cards and show your runs in I Did It (your running calendar and statistics)
• To show running records in posts you choose to publish
• To keep the Service secure and to comply with law

We do not use consumer health data for advertising or marketing, and we do not use it to make decisions about credit, insurance, employment, or similar matters.

5. Sharing

• We do not sell consumer health data, and we do not share it with third parties or affiliates.
• Google LLC (Firebase / Google Cloud Platform) stores and processes the data on our behalf as our processor (service provider), only to provide the Service.
• Running records in posts you publish are visible to other users as you choose. Imported records are visible only to you until you post them.
• We may disclose consumer health data if required by law, such as in response to a valid legal order.

6. Consent and Withdrawing Consent

We ask for your consent on the "Health data consent" screen before reading any data from a health app. You can withdraw consent at any time in the app (Settings › Health app sync › unlink) and by turning off Tididi's permission in your phone (Android: Health Connect › App permissions › Tididi; iPhone: Health app › Sharing › Apps › Tididi). After you withdraw consent, we stop reading data from the health app. Records already imported stay in your account until you delete them in I Did It or delete your account.

7. Your Rights

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it and their contact information (we do not share it with any third parties or affiliates other than our processor described in Section 5)
• Withdraw your consent
• Delete your consumer health data. You can delete records in I Did It, delete posts, or delete your account in Settings. When you ask us to delete data, we also tell our processor to delete it, and any copies in backup systems are deleted within six months.

To exercise these rights, use the app or email tididiapp@gmail.com. We will verify your request by confirming it comes from the email or phone number of your account, and respond within 45 days (we may extend this once by another 45 days when reasonably necessary and will tell you if we do). There is no charge for up to two requests in a 12-month period.

8. Appeals

If we decline your request, you may appeal by emailing tididiapp@gmail.com with the subject line "Health Data Appeal." We will respond within 45 days and explain our decision. If your appeal is denied, you may contact the Attorney General of your state (for Washington: www.atg.wa.gov/file-complaint).

9. Reviewing and Changing Your Data

You can view and edit your running records in I Did It, or email tididiapp@gmail.com to ask us to change them. Third parties do not collect consumer health data through the Service over time or across other websites or apps.

10. Retention and Security

Consumer health data is kept until you delete the record in I Did It or delete your account, and is then deleted without delay. We protect it with the security measures described in the Privacy Policy, including access controls that let only you read your imported records before you post them.

11. Geofencing

We do not use geofences around places that provide health care services.

12. Changes

If we change this policy, we will post the new version and announce it in the app before it takes effect. If we want to use consumer health data in a new way that requires your consent, we will ask for it first.