Effective Date: April 4, 2026 | Last Updated: April 4, 2026
This Privacy Policy explains how Big Lever Ventures LLC ("Big Lever," "we," "us," or "our") collects, uses, discloses, and retains information in connection with ExerSnack (the "App") and related services (collectively, the "Services").
Branding/Names: "ExerSnack", "ExerSnack by Big Lever Ventures", "ExerSnack, a Big Lever Ventures Collaboratory Release"
Mailing Address: Big Lever Ventures LLC, c/o ExerSnack, 800 N King Street Suite 304-1840, Wilmington, DE 19801, United States
Summary (Key Points)
What ExerSnack Does
ExerSnack is a consumer fitness app that delivers brief bodyweight exercise sessions throughout the day via scheduled notifications on iPhone and Apple Watch. It tracks session completions and supports Apple Health integration for workout logging.
Apple Health & Apple Watch
You can use ExerSnack without Apple Health/HealthKit or Apple Watch. If you connect Apple Health/HealthKit, ExerSnack may write workout session data (with your permission). If you use the Apple Watch companion app, session data is synced between your Watch and iPhone.
Our Commitment
We use service providers to operate the App. We do not sell personal information or health data, and we do not use HealthKit data for advertising.
Definitions
Personal Data
Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you or your household (e.g., email address, name, identifiers).
Health Data / Sensitive Data
Personal Data about your health, wellness, physical activity, or similar information. This includes workout session data described in this Policy.
Session Data
Records of completed exercise sessions within the App, including exercise name, duration, tier, and timestamp.
Eligibility; No Children
The Services are intended for adults 18+ only. We do not knowingly collect Personal Data from anyone under 18, and we do not offer teen accounts or parental consent flows.
Information We Collect
We collect information from (a) you, (b) your connected integrations if you enable them, (c) your device and usage, and (d) app store platforms for billing.
1
Account and Identifiers
Account credentials: Sign in with Apple; email sign-in.
Account identifiers: The identifier associated with your Apple sign-in (often an email address or proxy identifier) or your email address.
Subscription and purchase metadata: Subscription status, product identifier, purchase timestamps, and related transaction metadata from Apple App Store. We do not receive or store full payment card numbers.
2
Exercise and Session Data (User-Driven)
Session completions you generate within the App, including:
Exercise name and movement pattern
Skill tier (Easy, Standard, or Advanced)
Session duration (60, 90, or 120 seconds)
Completion timestamp
Schedule configuration (notification frequency, hours, and offset)
Avatar selection (male or female)
3
Apple Health / HealthKit (Optional; Permission-Based; Write)
If you connect Apple Health/HealthKit, ExerSnack requests permissions you control in Apple Health.
HealthKit WRITE access (with your permission): ExerSnack writes completed workout sessions to Apple Health, including exercise type, duration, and timestamp.
ExerSnack does not read health or medical data from Apple Health.
Revoking permissions: You can revoke HealthKit permissions at any time in Apple Health settings. If you revoke permissions, workout sessions will no longer be written to Apple Health, but previously written data remains in Apple Health under your control.
No advertising use / no sale: We do not use HealthKit data for advertising and we do not sell HealthKit data.
4
Apple Watch (Optional; Companion App)
If you install the ExerSnack Apple Watch companion app, session data is synced between your Watch and iPhone using WatchConnectivity. Data synced includes your schedule configuration, today's exercise and tier, avatar selection, and completed session events. No additional data categories are collected via the Watch beyond those described in this Policy.
5
Device and Usage Data
We collect standard telemetry such as:
Device type and model
Operating system version
App version
IP address
Timestamps and general usage events
Crash and diagnostic signals
6
Analytics
We use Firebase Analytics to understand app usage and improve the Services. We do not integrate advertising SDKs and do not use cross-app tracking for ads.
7
Support Communications
If you contact us at help@exersnack.com, we collect the contents of your message and metadata needed to respond.
How We Use Information
We use collected information to:
Operate the Services
Provide, operate, and maintain the Services; create and manage accounts.
Sync session data with Apple Health/HealthKit and the Apple Watch companion app.
Customer Support
Provide customer support and respond to requests.
Security & Compliance
Monitor, secure, and protect the Services; comply with legal obligations and enforce our terms.
Improve & Develop
Improve and develop the Services; conduct analytics to understand usage and performance.
How We Disclose Information
We do not sell your Personal Data or Health Data. We disclose information only as described here.
Service Providers (Processors)
We share information with vendors that help us operate the Services, including:
Firebase (Google) for database, storage, and related infrastructure
Firebase Analytics for analytics
We require service providers to process information only on our documented instructions and only for the purposes described in this Policy.
App Store Billing Providers
Apple processes subscription payments. We receive subscription status and purchase metadata needed to provide access.
Legal, Safety, and Business Transfers
We may disclose information:
To comply with law, lawful requests, subpoenas, or legal process
To protect rights, safety, and security of users, the public, or our Services
In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to this Policy and applicable law
Your Choices and Controls
Account and Profile
You can update your schedule configuration, skill tier, avatar selection, and session preferences within the App at any time.
Account deletion: You can delete your account through the App settings. Alternatively, you can request account deletion by emailing help@exersnack.com.
Integrations Permissions (HealthKit)
You control Apple Health/HealthKit permissions through Apple Health settings and can revoke them at any time. If you disable the integration, ExerSnack stops writing new session data to Apple Health. Previously written workout data remains in Apple Health under your control.
Notifications
ExerSnack's core functionality depends on push notifications to deliver scheduled exercise sessions. You can disable notifications in your device settings, though this will prevent scheduled sessions from being delivered. You can adjust notification timing and frequency within the App at any time.
Data Retention
We retain information as follows:
1
Active Subscription
We retain your account, session data, and schedule configuration while your subscription is active.
2
Subscription Lapse / Inactivity
We retain your account-related data up to 18 months from the earlier of your subscription lapse date or your last login date. After that 18-month period, we delete the data.
3
Account Deletion
If you delete your account, we delete associated Personal Data and session data from our active systems, generally within 30 days, subject to limited legal and security exceptions.
4
Backups
Deleted data may persist in encrypted backups for a limited period and will be removed in accordance with our backup retention cycle, generally up to 90 days, unless we are required to retain it longer for legal, security, or operational reasons.
Data access/export: You can request a copy of the primary information associated with your account by emailing help@exersnack.com. We will provide it in a commonly used format where reasonably feasible, subject to verification and applicable legal exceptions.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. We use Firebase as our database and storage provider, which supports encryption in transit and at rest.
Encryption
Firebase supports encryption in transit and at rest for all stored data.
Access Controls
Access to production user data is restricted to authorized administrators and access is logged.
Incident Response
We maintain an incident response process to address potential security events.
No method of storage or transmission is completely secure; we cannot guarantee absolute security.
International Transfers (If Applicable)
If you access the Services from outside the United States, your information may be processed in the United States or other jurisdictions that may have different data protection laws.
US Privacy Rights (Including California and Other States)
Depending on where you live, you may have rights to access, delete, or correct certain Personal Data, and to opt out of certain processing.
Other state privacy laws may provide similar rights; we will comply as applicable.
California
If the California Consumer Privacy Act (as amended) applies, California residents may have additional rights, such as the right to know, delete, correct, and limit use of certain sensitive personal information, subject to legal exceptions. We do not sell personal information and do not share it for cross-context behavioral advertising.
Consumer Health Data Privacy Notice
Washington, Nevada, and Similar Laws
This Notice supplements the ExerSnack Privacy Policy and applies to "Consumer Health Data" as defined by certain state laws, including Washington's My Health My Data Act and Nevada's consumer health data law. If there is a conflict between this Notice and the main Privacy Policy regarding Consumer Health Data, this Notice controls to the extent required by applicable law.
Categories of Consumer Health Data We Collect
Depending on how you use ExerSnack, we may collect:
Workout data written to Apple Health/HealthKit if you authorize the integration
Purposes for Collection and Use
We collect and use Consumer Health Data to:
Provide and personalize the Services, including session scheduling, progress tracking, and notification delivery
Maintain, secure, debug, and improve the Services
Write workout completions to Apple Health if you authorize this integration
Comply with legal obligations and enforce our terms
Sources of Consumer Health Data
We collect Consumer Health Data from:
You, directly through the App
The Apple Watch companion app, if installed, via WatchConnectivity sync
Sharing of Consumer Health Data
We do not sell Consumer Health Data. We share Consumer Health Data only as described in this Privacy Policy, including:
Service providers that help us operate the Services
Apple App Store for billing metadata
For legal, safety, and business transfer reasons as described in this Policy
Your Rights
Depending on your state of residence, you may have rights to:
Access and receive a copy of your Consumer Health Data
Delete your Consumer Health Data
Withdraw consent for certain collection or sharing, where applicable
Appeal certain decisions regarding your rights requests where required by law
How to exercise your rights: Email help@exersnack.com with your request. We may need to verify your identity.
GDPR/UK Notice (If Applicable)
If GDPR/UK GDPR applies, you may have rights including access, rectification, erasure, restriction, objection, and portability where applicable. You may also have the right to lodge a complaint with a supervisory authority.
Our lawful bases may include performance of a contract, legitimate interests, consent for certain permissions, and legal obligations, depending on the context.
Data Breach Notification
FTC HBNR and State Laws
HIPAA Status
ExerSnack is not a HIPAA covered entity and does not operate as a HIPAA business associate for this consumer app use case.
FTC Health Breach Notification Rule
Because ExerSnack is a direct-to-consumer fitness app, the FTC Health Breach Notification Rule may apply in certain circumstances. If the HBNR applies, it generally requires notice to affected individuals and the FTC, and in certain cases the media, within the timeframes and in the manner required by the Rule.
State Breach Notification Laws
We will also comply with applicable U.S. state breach-notification laws. Where required, we may provide notice to affected residents within statutory deadlines, subject to permitted delays.
Changes to This Privacy Policy
We may update this Policy from time to time. We will update the Effective Date above and, if changes are material, we may provide additional notice.