Legal
Consumer Health Data Privacy Policy
For residents of Washington State and Nevada · Last updated: 8 September 2026
This policy explains how Ceriter B.V. collects, uses and shares consumer health data, as that term is used in Washington's My Health My Data Act and Nevada Senate Bill 370.
It sits alongside our Stride One Device and App Privacy Notice, which describes the same processing in more detail. Where the two differ for residents of Washington or Nevada, this policy applies.
Ceriter B.V., François de Veijestraat 8B, 6221 AB Maastricht, The Netherlands support@ceriter.com
1. What consumer health data we collect
We collect the following categories of consumer health data through the Stride One insoles and app:
- Measurements of how you walk — how load is distributed across each foot, how weight is shared between your left and right foot, the quality of your step from heel contact to push-off, and derived scores including the Stride One Score and the Balance, Roll and Footprint indices
- Bodily functions and vital signs relating to movement — steps taken, walking time, and periods of movement and rest
- Information you tell us about yourself during ordering or setup, such as your shoe size
- Information about the care you receive, to the extent you choose to share your data with a clinician and tell us who they are
We do not collect precise location data, biometric identifiers used to identify you, genetic data, or information about reproductive or sexual health.
2. Where it comes from
- Directly from you — what you enter when ordering, during setup, and in the app
- From the device you are using — the measurements the insoles record while you walk
- We do not buy consumer health data, and we do not obtain it from data brokers, advertising networks, or public sources.
3. Why we collect it
- To provide the product you bought: turning measurements into the scores and trends you see in the app
- To make your data available to the clinician or other person you have chosen to share it with
- To keep the app and the device working, to fix faults, and to answer your support requests
- Where you have separately agreed to it, to improve how the product measures and presents movement and to support research into recovery and mobility, using measurements from which your identifying details have been removed
- To meet legal obligations that apply to us
We do not use consumer health data for advertising, profiling for marketing, or any purpose beyond those listed here.
4. Who we share it with
People you choose. A clinician, family member or other person receives your data only where you have chosen to share it with them. You choose each recipient individually and can stop sharing at any time.
Our service provider. Amazon Web Services hosts the Stride One platform and stores your data, in the European Union, under a written agreement that prevents them from using it for their own purposes.
Nobody else. We do not share consumer health data with affiliates, advertisers, analytics companies, data brokers, or anyone else, except where we are legally required to disclose it.
5. We do not sell consumer health data
We do not sell consumer health data, and we have no plans to. Selling it would require your written authorization under a specific process set out in the My Health My Data Act, and we do not seek that authorization because we do not sell your data.
6. Your rights
If you are a resident of Washington or Nevada, you have the right to:
- Confirm whether we are collecting, sharing or selling your consumer health data, and access that data, including a list of every third party and affiliate with whom we have shared it, and contact details for each
- Withdraw your consent to our collection and sharing of your consumer health data
- Delete your consumer health data. When you ask us to delete it, we delete it from all of our systems, including backups and archives, and we notify anyone we have shared it with to do the same. We cannot delete copies a clinician has already saved into your medical record — those are held by them, under the rules that govern their profession, and you should ask them directly
We will not deny you goods or services, charge you a different price, or provide you with a different standard of service because you exercised any of these rights.
To exercise any of these rights, write to support@ceriter.com with the email address associated with your account. We will respond within 45 days. If we need more time we will tell you, and we may take up to a further 45 days.
If we refuse a request, we will tell you why and explain how to appeal. If we deny your appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint or, in Nevada, to the Nevada Attorney General.
7. Consent
We collect and share your consumer health data only with your consent. You give that consent during setup, by ticking a box that is separate from the box for our terms and conditions. Neither box is ticked for you in advance, and we do not treat continued use of the product as consent.
If we ever want to use your consumer health data for a purpose not described in this policy, we will ask for your consent separately before doing so.
8. How long we keep it
We keep your consumer health data until one year after you tell us you have stopped using the device, or until you ask us to delete it or withdraw your consent, whichever comes first.
If you have separately agreed to it, we keep your measurements after that point, with your identifying details removed, for research and product development. You are asked about this separately, you can decline without affecting your use of the product, and you can change your mind at any time.
9. Changes to this policy
We will not collect, use or share consumer health data in a way that materially differs from what this policy said at the time it was collected, unless we obtain your consent first.
10. Contact
Ceriter B.V., François de Veijestraat 8B, 6221 AB Maastricht, The Netherlands support@ceriter.com