Consumer Health Data Privacy Policy

TODO: self-drafted standalone policy per the launch plan (required standalone by Washington MHMDA; also covers Nevada SB 370 and Connecticut CTDPA). Must name: what health data is collected (the intake health screen, injury history), why (building and managing training), where it is stored (intervals.icu, Notion), retention and deletion (30 to 90 days after cancellation per the deletion runbook), and how to request deletion. Keep this page linked from its own footer slot, separate from the general privacy policy.