Consumer Health Data Privacy Policy

This policy covers consumer health data that Byway Technologies LLC (“Byway”, “we”) handles through Travel Memory in the Byway app. Washington’s My Health My Data Act, Nevada’s consumer health data law and Connecticut’s data privacy act count as health data not only readings such as heart rate, but also what can be inferred from everyday data, such as how far and how fast you walk. We treat all of it under this policy, wherever you live. Everything else Byway does is in our Privacy Policy.

Each kind of data below comes only from a setting you turn on, and each entry says where it stays.

Steps, distance, flights or floors climbed, elevation gained

Apple Health · Health Connect · this phone

Heart rate

Apple Health · Health Connect · this phone

Workouts and their routes

Apple Health · Health Connect · this phone

A walk’s track, steps and climb

Phone motion and location · this phone

Walk time and distance at stops

Phone motion and location · your account

Walking pace (learned)

Your walks · your account

Which of these settings you turned on, and when

Your choices · your account

“This phone” means the data stays in Byway’s encrypted journal on your phone, which on iPhone is left out of iCloud Backup; Byway’s servers never receive it. “Your account” means Byway’s servers keep it with your Travel Memory, where you can export or delete it.

Byway does not read sleep, heart rate variability, cardio fitness, walking steadiness, clinical records, or any reproductive, sexual or mental health data.

• Apple Health and Health Connect, after you turn on “Use Apple Health” or “Use Health Connect” and allow each type on the system’s own permission screen. That includes what your watch or other fitness apps saved there.
• Your phone’s motion sensors and location, while a walk at a stop is being recorded, after you turn on “Remember walks at stops”.
• Byway itself, which works out your walking pace from your walks after you turn on “Learn from my travel”.

Byway never buys health data or receives it from data brokers, other companies or other people.

• Add walks, steps, climb, heart rate and watch-recorded hikes to the stops they belong to in your Drive Log, on your phone.
• Show where you parked and how far it is back to the car.
• Time the walks in your plans to how you usually walk.
• Save a walk to Apple Health or Health Connect, only when you ask.
• With “Add to anonymous place insights”, count how long the walk in to a place usually takes. A place’s walk-in time is shown only once at least 10 travelers have walked it, from one walk per traveler per place per day, with no link back to anyone; the climb shown comes from public terrain maps, never from anyone’s walk. These statistics are de-identified: we keep them that way and never try to re-identify anyone from them. A contribution cannot be taken back once it is counted, because nothing links it to you.

We never use health data for advertising or marketing, sell it, pass it to data brokers, use it for research or to train AI models, or use it to make decisions about insurance, credit, housing or work. Byway gives no medical advice.

On iPhone, Byway asks your phone’s location service to watch at most a single area: the spot where a drive ends, so Travel Memory notices when you leave. That area is never within 2,000 feet of a health care provider, a place of worship, a shelter, a court or prison, a school or child care, a military site or a political office. Byway never starts recording a walk within 2,000 feet of a health care provider, and never records a walk to a place within 75 meters of any of the others. These distances are measured from the edge of the place’s grounds where Byway’s map has measured them, and from the mapped place otherwise. Stops at all of these places are dropped on your phone.

No one. Byway does not share or sell consumer health data, and no other company or affiliate receives it. Apple Health and Health Connect data never leaves your phone. Walk times and your walking pace are kept by the cloud hosting and database provider that runs Byway’s servers, which processes them only for Byway (see Sub-processors in our Privacy Policy). Analytics and crash reporting never receive any of it. We disclose it only when the law requires, such as under a valid court order.

• Know and access — confirm whether Byway collects, shares or sells your consumer health data, and get a copy of it, with the list of every third party and affiliate that received it.
• Withdraw consent — turn any of these settings off. Collection stops at once.
• Delete — delete a walk, a day or everything, in the app or by asking us. Turning off “Use Apple Health” or “Use Health Connect” deletes everything Byway read from it. We delete it from Byway’s servers within 30 days of confirming your request and from backups within 6 months, and tell our service providers to do the same.
• Appeal — if we turn a request down, you can ask us to look again.
• Using these rights is free, and Byway never treats you differently for using them.

• In the app — Settings → Travel Memory holds every switch, “Export my data”, and “Turn off and delete everything”. A day or a single walk can be deleted from your Drive Log.
• By email — write to legal@byway.world with “Health data request” in the subject. We confirm it is you through the email on your Byway account, and answer within 45 days. If we need longer, we tell you within those 45 days and take at most 45 more.
• To appeal — reply to our answer with “Appeal” in the subject. We answer within 45 days. If we still say no, we tell you how to file a complaint with your state’s attorney general, such as Washington’s or Nevada’s.

If we change this policy, we post the new version here and update its date. Before Byway uses health data for a new purpose, or shares it with anyone, we ask for your consent.

Byway Technologies LLC. Questions or requests: legal@byway.world.