Washington Consumer Health Data Privacy Policy

Effective: October 5, 2026

This policy is provided under Washington's My Health My Data Act (RCW 19.373) by Pink Lumenade LLC, 3130 Balfour Rd, Suite D #1023, Brentwood, CA 94513, USA, the maker of Upscore. It contains only what the Act requires. Our full explanation is at upscore.dance/health-data.

Consumer health data we collect, and why

• Heart rate during Upscore sessions, as a timeline of readings, and values derived from it (session average and peak, per-song average and heart rate zone, time in zones, one-minute recovery, heart rate by difficulty level). Purpose: to show you your session recap and heart rate trends in the app, on any device you sign in to. Collected only with your consent.
• Calories burned during Upscore sessions. Purpose: to show you in your session recap and trends. Collected only with your consent.
• Step counts for Upscore sessions. This is a game statistic (arrows stepped, calculated from the songs you played, not a pedometer reading) that we also write to your health app as steps, so it is listed here out of caution. Purpose: to show you in your session recap and trends, and to write the session to your health app at your request.
• Session times and durations. Purpose: to record the session itself.

The following consumer health data is read on your device by the Upscore app and is not collected, stored or transmitted by us: sleep, resting heart rate, heart rate variability, respiratory rate, blood oxygen, wrist temperature, daily step count, weight, body fat, lean body mass, VO2 max, exercise minutes, active energy, nutrition, hydration, caffeine, alcohol, mindful minutes, time in daylight, menstrual cycle, and workouts recorded by other apps.

Sources of consumer health data

• Your Apple Watch, Wear OS watch or Bluetooth heart rate monitor, during an Upscore session you start.
• Apple Health (iOS) or Health Connect (Android) on your device, with your permission.
• Upscore's own calculation from the songs you played.

Consumer health data we share

• Categories shared: the session heart rate, calories, step counts and session times listed above are stored with our data processor (below). No consumer health data is shared with any other third party.
• Third parties and affiliates with whom consumer health data is shared: Supabase, Inc. (database hosting, United States). We have no affiliates. We do not sell consumer health data.

How to exercise your rights

You may confirm whether we are collecting, sharing or selling your consumer health data and access it; withdraw consent; and have your consumer health data deleted.

• In the app: Profile > Settings > About and Privacy > Heart Rate Data (withdraw consent to collect heart rate and calories); delete any session from its recap; Profile > Settings > Delete Account.
• By email: rinon@edi.dance to access, obtain a copy of, or delete your consumer health data, or to withdraw consent. We respond within 45 days.
• Appeal: if we decline a request, reply to the same email address within 45 days of our response and say you are appealing. We respond to appeals within 45 days with a written explanation. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.