Privacy

What stays on your iPhone

• Runs: route, distance, time, splits, heart rate and time in each zone.
• Raw run logs: GPS fixes, steps and heart rate per run, used to improve pace accuracy. You can export them.
• Your training plan, settings and coach profile.
• Live heart rate: it goes straight from your WHOOP strap to your iPhone over Bluetooth.

What our server receives

The ZoneTempo server runs in Amsterdam (EU). It receives:

• An anonymous install ID, checked with Apple's App Attest so only the real app can use it. No name, email or login.
• Your subscription status as signed by Apple, how many of your free Pro runs you've used, and monthly usage counters.
• On Pro runs only: the numbers the coach talks about — workout, distance, time, target and current pace, heart rate, zone and splits — plus your coach settings: first name, language, style and humour. Never your location.

For Pro runs the server keeps a short record (when the run started and what it cost to generate), not what happened in it. Spoken lines are generated by AI voice and language models through OpenRouter. Generated voice clips are cached so they can be replayed; a clip can include your first name.

Other services

• Apple handles purchases and subscriptions. We never see your payment details.
• Apple Health (off by default): if you turn it on, finished runs are saved to Health on your iPhone, including route and heart rate.

Deleting your data

In the app, go to Settings → Privacy → Delete my data. It removes your runs and plans from your iPhone and your anonymous record from our server. An active subscription stays with your Apple ID; cancel it under Manage subscription.

What we don't do

• No accounts, no advertising, no tracking across apps.
• No analytics SDKs in the app today. If we add privacy-friendly, anonymous usage statistics, this page will say so first.
• No selling or sharing of your data.

Contact

Questions about privacy: [email protected].