Corpus app privacy statement

1. Who is responsible

Corpus-tracker (sole proprietorship), KVK no. 42180358, Coendersweg 26B, 9722 GG Groningen, is the data controller. Contact for all privacy questions: support@corpustracker.com.

2. What data

Account: email address, username, password (stored encrypted by our authentication service) and your language choice.

Health and lifestyle data you enter yourself or import through a connection: workouts and sets, nutrition and supplements, sleep, heart rate and recovery measurements, body measurements and wellbeing. This is data about your health.

Connections: if you connect Garmin, Strava or Withings, we store the access you granted (encrypted tokens) and the data they provide (for Garmin, see section 8). You can disconnect at any time.

Apple Health and Health Connect (iOS and Android apps only, and only if you allow it): we read sleep (with sleep stages), resting heart rate, heart rate variability, steps and energy expenditure and store a daily summary. You choose in your phone's system settings which types of data Corpus may read and can withdraw that at any time. We do not write anything back to Apple Health or Health Connect.

Location (iOS and Android apps only, and only if you allow it): your approximate location (rounded to about 1 km), only while you use the app, to show weather, day length and moon phase in your analyses. We do not track you or store routes.

Social: friend code, friendships, and what you choose to share (templates, activity, nutrition), each switchable on or off separately.

Subscription: whether you have Pro and until when, plus a customer ID at our payment provider Stripe (web) or a link with RevenueCat, Apple or Google (purchase in the app). Your card or bank details go straight to Stripe, Apple or Google; we do not see or store them.

App usage: which screens you open and for how long, and error reports. This is metadata only, never the content of your logs, and you can switch it off in your privacy settings.

Notifications: if you enable push notifications, we store your device's address for those notifications.

3. Why and on what basis

To make the app work and show you your own data: performance of the contract. Because this is health data, we ask for your explicit consent when you create your account. Without it we cannot provide the app. You can withdraw consent in your privacy settings, after which your account can no longer be used.

We use health data from Apple Health or Health Connect solely to make Corpus's features work for you, never for advertising, marketing or data mining. Use for research is only possible with the separate consent below.

Research: only with separate, individual consent (internal pseudonymised research, and sharing with research institutions). These are off by default and you can withdraw them at any time.

Payments and administration: performance of the contract and a legal obligation to keep invoices and payments. Security and abuse prevention: our legitimate interest.

We do not sell your data, we do not use it for advertising, and we do not track you with tracking or advertising cookies.

4. Who we share data with

We use processors that work only on our behalf: Supabase (database and login, Frankfurt region), Vercel (hosting, Frankfurt region), Railway (compute for statistics and connections, EU), Upstash (scheduling of notifications, EU), Resend (email), Cloudflare (domain, security and bot protection at login), RevenueCat (management of subscriptions you take out in the app, US), Apple and Google (delivering push notifications to your device) and Open-Meteo (weather data; receives only the rounded coordinates, no account or name).

Stripe processes your payment and is also responsible in its own right for that, including fraud prevention and legal obligations. For a purchase in the app, Apple or Google does this.

Garmin, Strava and Withings only receive data if you create a connection, and then fall under their own terms.

Some of these parties are based in or operate from the US. Where data ends up outside the EEA, this happens on the basis of appropriate safeguards, such as standard contractual clauses or the EU-US Data Privacy Framework.

5. How long we keep it

We keep your data as long as your account exists. After you delete your account we delete your data, except what we are legally required to keep: invoices and payment records are kept for 7 years for tax administration.

You can delete your account yourself at any time in the app, under Profile, Delete account. We then erase your account and personal data immediately; they disappear from backups within 30 days at the latest. A running Stripe subscription is stopped automatically. A subscription you took out through the App Store or Google Play you must cancel yourself in that store. We keep the record of your consent without any link to you as a person.

6. Your rights

You have the right to access, rectification, erasure, restriction, objection and portability, and to withdraw consent. You can export your data yourself under Profile, Export data, and manage your sharing and research choices under Profile, Privacy and sharing. For anything else email support@corpustracker.com; we respond within one month.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Security and cookies

We protect the data with per-user access restrictions at database level, encrypted connections and limited access for ourselves. No system is infallible; in case of a data breach that poses a risk to you, we report it as the law requires.

The app only uses functional storage in your browser (such as your login session and preferences). There are no tracking or advertising cookies.

8. Garmin data

If you connect Garmin Connect, we receive data from your Garmin account through the official Garmin Connect Developer API: sleep (stages, score), heart rate and heart rate variability, stress, Body Battery, steps, calories and, if you allow it, activities including distance, pace, heart rate, cadence and route (GPS). We use this data only to show and analyse it for you in the app, alongside your own logs.

We do not sell Garmin data, do not share it with third parties for their own purposes and do not use it for advertising. It is only processed by the processors listed in section 4 (Supabase and Vercel for storage and hosting). Garmin data is not processed by AI systems and is not used to train, evaluate or improve AI models.

You decide which data Garmin shares through your settings in Garmin Connect, and you can stop sharing there at any time. You can also disconnect in the app (Profile, Connectors); we then deregister you at Garmin and delete our access tokens. Data that has already arrived stays in your account until you delete it. You can view, export and delete it as described in section 6, including by having your account deleted.

9. Changes

We update this statement when the app or our processors change. The date at the top shows the latest version. For a material change we tell you in the app.