Last updated: 2026-05-16

This is the privacy policy for the Cardio Tracking iOS app ("the app"). It is published here so the App Store has a URL it can link to during review.

What data the app collects

When you sign in, the app stores:

• Your Google or Apple account ID (a stable identifier from the provider)
• Your email address (from the provider)
• Your display name and profile picture URL (from the provider)

These come from the Sign in with Google / Sign in with Apple flow. The app does not ask for additional profile fields.

While you use the app, the app stores:

• Each activity you log: distance, duration, date, optional notes, optional city, activity type
• Weekly goals you set
• Annual goals you set
• Reflections the app generates on your behalf
• Your app preferences (units, default activity)

All of this is scoped to your account — you only see your own data, and nobody else can see it.

Where data is stored

• On your device: A local SwiftData cache so the app feels instant and works offline for reads.
• Supabase (Postgres + Auth): The system-of-record copy of your account and activity data. Row-level security ensures each row is only readable and writable by the user who owns it.

The app does not store data with any other third party.

Third-party services