Privacy Policy

1. Who this policy applies to

This policy applies to everyone who uses the app. It does not apply to third-party services we link to or that you connect to the app, which have their own privacy policies (see Third-party services below).

2. Information we collect

Account information. When you create an account, we collect your email address and authentication details. If you use Sign in with Apple, Apple gives us a unique identifier and, depending on your choice, your name and either your real or a private relay email address. We never receive your Apple password.

Health and fitness data. With your explicit permission, the app reads a specific set of data from Apple Health (HealthKit) and writes data you log back to Apple Health:

• Read: heart rate, resting heart rate, heart rate variability (HRV), body mass (weight) and sleep analysis. For outdoor workouts, also that workout's distance and energy samples.
• Written: completed workouts and weight entries you log.

Most health data read from Apple Health stays on your device. The exception is your body weight: with cloud sync on, weight measurements are stored in your Revirium account so they're available across your devices. Your continuous recovery signals — sleep, HRV and resting heart rate — are used only on your device and are never uploaded to our servers. You choose which data types to share and can change or revoke access any time in iOS Settings → Privacy & Security → Health → Revirium, or within the app.

Content you create. Workouts, programs, notes, goals and other information you enter into the app.

Location data. If you turn on GPS tracking for an outdoor endurance workout, the app accesses your precise location while that workout is active to record distance, pace and route. With cloud sync on, recorded routes are stored in your account for later review. Location is used only while a workout's GPS tracking is switched on — never in the background — and you can decline or revoke access any time in iOS Settings.

Usage and diagnostic data. When you send feedback from within the app, we collect basic technical details to help reproduce issues — app version, device model, iOS version, locale and time zone — which you can withhold with the in-app toggle. We do not use third-party analytics or advertising SDKs.

3. How we use your information

We use your information to:

• provide, maintain and improve the app's features and your personalized insights;
• create and secure your account and authenticate you;
• sync your data across your devices;
• respond to your support requests; and
• comply with legal obligations.

We do not use your health or fitness data for advertising or marketing, and we do not sell it. We do not use health data for any use-based data mining other than to provide and improve health-management features within the app, consistent with Apple's requirements.

4. How and where your data is stored

Your account and app data are stored using Supabase, our backend and database provider, which hosts your data in the Asia Pacific (Tokyo, Japan) region. Data is transmitted over encrypted connections (HTTPS/TLS).

Most health data read from Apple Health remains on your device under Apple's protections. The data you choose to sync to your account — logged workouts, body measurements and weight, recovery check-ins, and the GPS routes of outdoor workouts — is stored with Supabase as described above. On your device, this data is held in an encrypted store that is excluded from iCloud and device backups. We never store your health data in iCloud, and the app uses no third-party analytics or advertising services.

If you turn cloud sync off, your data is kept only on this device and is not backed up anywhere — if you lose or reset your phone, it cannot be recovered. With cloud sync on, a copy lives in your Revirium account and restores automatically when you sign in again.

5. When we share information

We do not sell your personal information. We share information only:

• With service providers who operate the app on our behalf under contracts requiring them to protect your data: Supabase (database, authentication, hosting) and Apple (Sign in with Apple, HealthKit, App Store).
• With your consent, including any third party you explicitly direct us to share with.
• For legal reasons, if required by law or to protect rights, safety and security.

We do not share data obtained through HealthKit with third parties for advertising or data-mining, and we only share it with providers to deliver health and fitness services to you.

6. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data from our systems within 30 days, except where we must retain limited records to comply with the law.

7. Your rights and choices

• Access and correction: view and edit much of your data directly in the app.
• Delete your account and data: permanently delete your account and its personal data from within the app at any time (Settings → Account → Delete Account). Deletion removes your data from our live systems immediately; residual copies in encrypted backups are purged on our provider's backup rotation. Deletion is permanent.
• Revoke health access: manage HealthKit permissions any time in iOS Settings → Privacy & Security → Health → Revirium.
• Regional rights: depending on where you live you may have additional rights (e.g. under GDPR or CCPA/CPRA) such as access, portability, restriction or objection. To exercise them, contact contact@revirium.com.

8. Security

We use technical and organizational measures — encryption in transit, access controls and authentication — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

Revirium is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. International data transfers

Your information is stored on our provider's servers in Japan (Asia Pacific — Tokyo) and may also be processed in Australia (where we operate) and other countries where our service providers operate. Where required, we take steps to ensure appropriate safeguards.

11. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice in the app.

12. Contact us

[WA/ASIC Business name (ABN…) here]
Email: contact@revirium.com
Western Australia, Australia