Consumer Health Data Privacy Policy

Effective date: August 9, 2026

This Consumer Health Data Privacy Policy describes how TNT Fitness LLC, doing business as Dr. Knot ("Dr. Knot," "we," "us," or "our"), collects, uses, discloses, and protects consumer health data when adults use KnotFinder, Pain Finder, Back Pain Lab, Dr. Knot courses and communities, or another Dr. Knot service that collects pain-related or wellness information.

This notice supplements our general Privacy Policy. If there is a conflict about consumer health data, this notice controls to the extent required by applicable law.

The Services are intended only for adults age 18 or older.

Consumer Health Data We Collect

Depending on the Service you use and the information you choose to provide, we may collect:

pain location or body area;
pain rating, intensity, discomfort, or sensitivity;
muscle focus and myofascial-pattern information;
session history, progress, responses, and goals;
course, assessment, or community information that reveals or permits an inference about pain, mobility, physical condition, or wellness interests;
identifiers, such as name, email address, account ID, and related technical identifiers, when linked or reasonably capable of being linked to pain-related or wellness information; and
inferences generated from information you submit for the purpose of providing a requested educational result, recommendation, pathway, or app feature.

KnotFinder does not record, upload, or store camera images or video. Pain Finder processes pain-related answers to provide requested results but does not retain those answers. If you submit an email address through Pain Finder, the email address is stored in Klaviyo, but Klaviyo does not receive or store the pain-related answers.

Sources of Consumer Health Data

We collect consumer health data:

directly from you when you enter information, complete an assessment, use a tool, track a session or goal, contact support, or post in a course or community;
from calculations or inferences generated from the information you submit in order to provide the requested Service; and
from AWS or Circle as our hosting and platform providers when they process information on our behalf.

We do not collect consumer health data from data brokers or advertising platforms.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data only as reasonably necessary to:

provide the tool, assessment, course, community, progress feature, educational result, or support you request;
maintain your account, sessions, progress, and goals;
personalize the requested educational experience;
troubleshoot, secure, maintain, and improve the relevant Service using information handled for that operational purpose;
prevent fraud, misuse, and security incidents;
comply with law, honor privacy requests, and establish, exercise, or defend legal claims; and
carry out another purpose that we clearly disclose and for which we obtain consent when required.

Dr. Knot's Services provide general educational information and are not medical advice, diagnosis, or treatment.

How Consumer Health Data Is Processed

Consumer health data may be received through an adult user's direct entries, stored with a KnotFinder account on AWS, used to display progress or requested results, or processed within a Circle-hosted course or community when the user chooses to submit or post it. Pain Finder processes answers transiently to generate a result and does not retain the answers.

We limit access to people and service providers who reasonably need the information to provide, support, secure, or maintain the requested Service or comply with law. We do not use consumer health data for targeted advertising, profiling unrelated to a requested Dr. Knot Service, or determining eligibility for employment, credit, insurance, housing, or health care.

Consumer Health Data We Share

We may share the consumer health data categories described above only as reasonably necessary to provide a Service you request, protect security, comply with law, or as otherwise permitted with your consent.

Categories of recipients are:

Amazon Web Services (AWS), which hosts KnotFinder and Pain Finder and processes information as our infrastructure provider;
Circle, which hosts Back Pain Lab, courses, and community features and processes information that you submit there;
other authorized community participants, when you voluntarily post information in a Circle space visible to those participants;
Klaviyo, which receives an email address submitted through Pain Finder but does not receive or store the pain-related answers;
professional advisers, security providers, and government or legal authorities, when disclosure is reasonably necessary to protect rights and security, investigate misuse, comply with law, or handle a legal claim; and
a successor or transaction party, subject to applicable law and appropriate protections, in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business.

We do not share consumer health data with Meta, Google, Google Analytics, Google Tag Manager, or other advertising platforms. The AWS-hosted tools do not contain their advertising or analytics trackers.

Sale of Consumer Health Data

We do not sell consumer health data. If this practice changes, we will update this notice and obtain the separate authorization required by applicable law before any sale.

Third-Party Collection Over Time and Across Services

We do not permit advertising or analytics third parties to collect consumer health data over time and across websites or online services through KnotFinder or Pain Finder. AWS processes information to host those tools. Circle processes information within its platform when you use Back Pain Lab, courses, or communities, subject to its role as a platform provider and its own privacy terms.

The separate Shopify storefront uses advertising and analytics technologies as described in our general Privacy Policy, but those technologies are not installed in the AWS-hosted KnotFinder or Pain Finder tools and do not receive the pain-related answers stored or processed there.

Your Consumer Health Data Rights

Depending on applicable law, you may have the right to:

confirm whether we collect, use, share, or sell consumer health data about you;
access consumer health data about you;
receive a list of third parties or affiliates with whom we shared or sold your consumer health data, including available contact information where required;
request correction of consumer health data;
request deletion of consumer health data, including notice to relevant processors and other recipients where required;
withdraw consent and ask us to stop future collection or sharing; and
appeal our refusal to act on a request.

You will not be discriminated against for exercising a consumer health data right.

How to Submit a Request

Email info@thedrknot.com with the subject line Consumer Health Data Privacy Request, or use our Contact Dr. Knot page. State the right you want to exercise and identify the account or Service involved.

We will use reasonable steps to authenticate your identity and the request. We will not require you to create a new account to submit a request, although we may ask you to use an existing account or provide information reasonably necessary for verification. If we cannot authenticate a request using commercially reasonable efforts, we may ask for additional information or may be unable to act.

We will respond within the period required by applicable law. Washington requests are generally handled within 45 days, subject to one permitted 45-day extension when reasonably necessary and with notice. Deletion from archived or backup systems may be delayed where permitted by law, including for up to six months under Washington law.

Requests are free up to the frequency required by law. We may charge a reasonable fee or decline a request only when permitted for requests that are manifestly unfounded, excessive, or repetitive.

Appeals

If we deny or decline to act on a request, you may appeal by emailing info@thedrknot.com with the subject line Consumer Health Data Privacy Appeal. Include the original request and the reason you believe the decision should be reconsidered. We will respond within the period required by applicable law and, if an appeal is denied, will provide information about how to contact the appropriate state attorney general where required.

Withdrawing Consent

You may withdraw consent for future collection or sharing by following the request procedure above. Withdrawal does not affect processing that occurred before withdrawal. If information is necessary to provide a requested Service, withdrawing consent or requesting deletion may prevent some or all of that Service from operating for you.

Security and Retention

We use reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of consumer health data. Access is limited to personnel and processors who reasonably need it for the purposes described in this notice.

We retain consumer health data only as long as reasonably necessary to provide the requested Service, maintain account and progress features, protect security, comply with law, resolve disputes, and honor privacy requests. Retention varies by the Service and information involved. Pain Finder answers are not retained.

Changes to This Notice

We may update this notice to reflect changes to the Services, our practices, or legal obligations. We will post the updated notice with a revised effective date and provide additional notice or obtain consent before collecting, using, or sharing additional categories of consumer health data or using the data for additional purposes when required by law.

Contact

For questions or requests about consumer health data, email info@thedrknot.com or use our Contact Dr. Knot page.