Privacy

The short version

We collect what the product needs to work and nothing else. Your health data is used to compute your scores and is shown to you. We do not sell it, we do not use it for advertising, and no coach, creator or brand sees any of it until you specifically share it with them.

You can export everything and delete your account from your account settings. Deleting removes your health records, your posts and your profile.

What we collect

Three groups, and you can see all of it in your account:

• Account: your name, email, a hashed password, your locale, and a public handle if you choose one.
• Health: heart rate, resting heart rate, heart-rate variability, sleep duration, steps, active energy, weight, respiratory rate and blood oxygen — one row per day, from Apple Health, Health Connect, a file you upload, or a paired V1 band.
• Commerce: orders you place, the address you gave for delivery, and your phone number if you provided one.

How your scores are worked out

Recovery, strain, sleep, your T Score, fitness age, sleep quality, load and body battery are all computed on our servers from the data above, on the fly, each time you open the app. They are not stored, so improving a formula improves your whole history rather than leaving a trail of numbers from whichever version was deployed that week.

They are estimates derived from consumer sensors. They are not clinical measurements and are not a diagnosis.

Apple Health and Google Health Connect

We read from Apple Health and Health Connect only after you grant permission, and only the specific data types listed above. We never write back to them. You can revoke access at any time in iOS Settings or the Health Connect app, and the app keeps working with whatever it already has.

Apple requires that HealthKit data is not used for advertising or sold to data brokers. We do neither, and we would not want to.

Who else sees it

Only the companies we need to run the service, each of which sees only its own slice:

• Stripe — payments. Sees your name, email, address and the amount. Card numbers go straight to Stripe and never touch our servers.
• PayPal and NOWPayments — the other two payment rails, if you pick one. Same principle.
• Ideal Postcodes, getAddress.io or OpenStreetMap — the postcode you type at checkout, to look up the address. Nothing else is sent.
• Expo's push service — a device token, so a notification can reach your phone. No health data is ever put in a notification body.

Who never sees it

Advertisers. Data brokers. Insurers. Employers. Coaches and creators on the platform, unless you turn on sharing for that specific person, which is off by default and revocable in one tap.

How long we keep it

Health records and orders stay until you delete them or close your account. Orders are kept for six years after that, because tax law requires it — those records contain the order and the amount, not your health data.

Analytics events are stored without your name attached and are deleted after 12 months.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, correct it, delete it, or object to how we use it. Export and delete are buttons in your account; for anything else, email privacy@terrifit.com and we will answer within 30 days.

Our lawful basis is performance of a contract for the account and orders, and your explicit consent for health data — which is why nothing is read from Apple Health until you tap allow.

Security

Passwords are hashed with scrypt. Session tokens are stored as SHA-256 hashes, so a copy of our database does not hand anybody a working session. Card details never reach our servers at all.

Children

Terrifit is not for under-16s and we do not knowingly collect their data.

Getting in touch

privacy@terrifit.com for anything on this page, or the contact form for everything else.