Your training data remains yours.

1. Controller

KARDIOO is published by AMINE ANSEUR CONSULTING, a French simplified joint-stock company (société par actions simplifiée unipersonnelle) with share capital of 500 €, registered with the Pontoise trade register under number 995 049 228 and having its registered office at 104 B avenue de Verdun, 95100 Argenteuil, France. VAT number FR50995049228. It is the controller for the processing described in this policy. Privacy questions and rights requests can be sent to amine.anseur1@gmail.com.

KARDIOO is a fitness tracking and planning service. It is not a medical device, healthcare provider, diagnostic service or emergency service.

2. Data we process

Account and profile

Account identifier, email address, name, username, avatar, city, region, country, language, measurement and privacy preferences. Sign-in may be provided by Apple or Google.

Fitness and health data

With permission, KARDIOO may read workouts and metrics from Apple Health: sport, timestamps, duration, distance, energy, heart rate, speed or pace, cadence, power, elevation, swimming lengths and strokes, running dynamics, laps, time series, recording source and device.

If you connect a watch, the same categories arrive from the manufacturer as the activity file the watch recorded, together with daily summaries: sleep and its stages, heart-rate variability, resting heart rate, steps, energy expenditure, stress and VO₂max. Section 4 states, manufacturer by manufacturer, exactly what we receive.

Depending on enabled features, KARDIOO may also process weight, sex, date of birth, resting or maximum heart rate, sleep, blood oxygen, respiratory rate, FTP and other data needed for training-load and recovery features.

Location and user content

Precise GPS routes may be imported with a workout, from Apple Health or from a connected watch’s file; KARDIOO does not track location continuously. Posts, descriptions, comments, reactions, follows, chats, photos, videos, goals, planned sessions and planning-assistant requests are processed when you use those features.

Subscription, device and usage

Subscription and credit status, RevenueCat customer identifier, Apple push token, security logs, error diagnostics and limited product events. Analytics events do not include health measurements, routes or workout content.

3. Sources and connected services

• You, when you create an account or provide content.
• Apple Health / HealthKit, after granular iOS permission. Permissions can be withdrawn in Apple Health settings.
• Apple or Google, for identity details you approve during sign-in.
• Your watch — Garmin, COROS, Polar, Wahoo or Zepp — only if you pair it under Settings ▸ Watches and sensors and approve the scopes the manufacturer asks for.

While a watch is connected, KARDIOO no longer imports from Apple Health the workouts that manufacturer’s own app copied there: the same session would arrive twice. They stay in Apple Health, and the app offers to import them if you want them.

4. Watch and sensor manufacturers

KARDIOO requests only the permissions the features you use require, and processes what a manufacturer sends solely to serve the athlete who authorized it. Manufacturer data is never sold, never licensed, never shared with third parties or data brokers, never used for advertising or to build an advertising profile, and never used to train machine-learning models. It is not combined with other users’ data for any purpose outside the service.

Garmin

Activity summaries, activity details and the recorded activity file for over thirty activity types; daily health summaries such as steps, resting heart rate, intensity minutes, stress and Body Battery; sleep and its stages; heart-rate variability; VO₂max and fitness age; and intra-day activity intervals. With your permission KARDIOO also sends structured workouts and training plans to your Garmin Connect account so they sync to your device. Disconnecting in the app deregisters KARDIOO with Garmin and deletes the Garmin-sourced records we hold for you.

COROS

Workout records and the recorded workout file; daily data such as steps and energy expenditure; sleep duration; heart-rate variability. With your permission KARDIOO also sends structured workouts and training plans to your COROS account. Disconnecting in the app revokes the authorization with COROS and deletes the COROS-sourced records we hold for you.

Polar

Exercises and their recorded files, daily activity, sleep and its stages, Nightly Recharge, continuous heart rate and cardio load. Polar’s interface does not accept structured workouts, so nothing is sent to a Polar device; your planned sessions stay in the app. Disconnecting deletes the registration held with Polar and the Polar-sourced records we hold for you.

Wahoo

Completed workouts and their recorded files. Wahoo does not share workouts that originated in a third-party application, so a session recorded through another app may not reach KARDIOO. Where the capability is enabled, KARDIOO also sends the day’s structured session to your Wahoo device. Disconnecting revokes the token and deletes the Wahoo-sourced records we hold for you; at Wahoo’s request, Wahoo data is deleted within 48 hours.

Zepp

Activities and daily summaries, where the connection is available. Nothing is sent to a Zepp device. On iOS, an Amazfit watch also writes to Apple Health, and that path is governed by your Apple Health permissions rather than by this connection.

5. Purposes and legal grounds

• Core service: synchronize and display activities, calculate insights, build and adapt plans, send planned sessions to your watch, provide social features and support — performance of our contract.
• Health data: personalized fitness insights — explicit consent, withdrawable at any time.
• Subscriptions: verify entitlements and App Store purchases — contract and legal accounting duties.
• Security and reliability: prevent abuse, diagnose failures and protect accounts — legitimate interests.
• Product measurement: improve flows using limited events — legitimate interests or consent where required. No advertising profile is created.

A KARDIOO subscription pays for the training plan and the analyses built on top of your data. Connecting a watch, receiving its activities and disconnecting it are never behind a payment.

6. Visibility and disclosure

Profiles and workouts follow the settings selected in the app. A workout can be public, relationship-limited or private, with separate controls for route, heart rate and pace. Chats remain available to their participants.

KARDIOO does not sell personal data and does not share it for cross-context behavioural advertising. It does not use Apple Health or manufacturer data for advertising, does not disclose either to data brokers, and does not transfer either to any third party except the processors named in section 7, acting on our instructions. Data may be disclosed to a public authority only where the law requires it.

7. Processors and international transfers

Service providers process only what they need for their role: Supabase for identity and database services, Cloudflare R2 for media storage, Apple for HealthKit, purchases and push delivery, Google for sign-in and Firebase Analytics, RevenueCat for subscription status, and, for the manufacturers where it applies, Stridee for watch connections.

KARDIOO’s servers and its database are hosted in the European Union. Where a connection runs through Stridee, Stridee receives your Kardioo account identifier and, from the manufacturer, the activities and summaries you authorized; it forwards them to us encrypted and makes no other use of them on our behalf. Deleting your Kardioo account also deletes the reference Stridee keeps of you and revokes the corresponding connections.

If natural-language assistance is enabled, a model provider may receive the sentence entered and coarse plan context such as phase, session counts and rounded load indicators. Names, emails, account identifiers, dates of birth and raw health series are excluded before transmission. Manufacturer activity files and raw manufacturer measurements are never sent to a model provider. The active provider will be identified in the app.

Where a provider processes data outside the EEA, KARDIOO relies on an adequacy decision, Standard Contractual Clauses or another lawful safeguard.

8. Retention and deletion

Account, training and content data is kept while the account is active and it remains necessary to provide the service. Technical logs and notifications have limited lifetimes. Transaction evidence may be archived for applicable tax and accounting periods.

Disconnecting a watch revokes the authorization with that manufacturer, stops any further data arriving, and deletes the records that manufacturer provided. Your own workouts and history in KARDIOO are not affected, and no other connection is touched.

Deleting your account first revokes every watch connection at the source, so no manufacturer keeps delivering to a deleted account. It then erases outright every daily health and sleep record — heart-rate variability, sleep stages, blood oxygen and the rest — anonymizes the profile, deletes the identity held by the sign-in provider and, where applicable, your reference at Stridee. Your past workouts are retained in anonymized form, detached from your identity and visible to nobody, including you; the app states this before you confirm. Residual backups remain isolated until replaced in their normal cycle.

At a manufacturer’s request, or at yours, the data that manufacturer provided — including the retained workouts and their activity files — is deleted within 48 hours, and KARDIOO confirms the deletion in writing. Write to the address in section 10; no account or app is needed to ask.

The app also lets you erase stored health metrics separately, and disconnect a watch without deleting anything else. An active App Store subscription may need to be cancelled before automated account deletion; contact us if this check prevents you from exercising your rights. Deletion can also be requested without the app — see Deleting your data.

9. Security

KARDIOO uses TLS in transit for every connection, account-level access controls, centralized authorization for private workouts, separate public and private media storage, and limited logging. Manufacturer access tokens are held encrypted on the server and are never sent to the mobile app. Incoming notifications from a manufacturer or from Stridee are verified before any content is processed, and where the transport provides it, signed in both directions and encrypted end to end. No system can guarantee absolute security; a breach affecting your rights would be notified to you and to the competent authority as the law requires.

10. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability and objection, and withdraw consent without affecting prior lawful processing. Contact amine.anseur1@gmail.com. You may also complain to the French CNIL or your local supervisory authority.

11. United States residents

If you live in California or another US state with a comprehensive privacy law, you may request to know the categories and specific pieces of personal information collected, their sources and purposes; to have them corrected or deleted; and to obtain a portable copy. You will not be discriminated against for exercising these rights, and the service will not be degraded or priced differently because you did.

KARDIOO does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act, and has not done so in the preceding twelve months. Health and fitness data received from Apple Health or from a watch manufacturer is treated as sensitive personal information and is used only to provide the features you asked for. Requests go to the same address as above and are answered within the statutory deadline; an authorized agent may act for you with proof of authority.

12. Children and changes

KARDIOO is not intended for children under 16 and does not knowingly collect their data. Material policy changes will be communicated in the app or through another appropriate channel before taking effect.