Legal
Privacy Policy
HealthStars is a heart-rate training app, so most of what it holds about you is health data you chose to share. This policy explains what we collect, why we collect it, who touches it, and how to get it deleted.
Last updated 4 September 2026The short version
- We collect what the app needs to build your training plan, score your readiness and run the challenges — nothing that exists only to profile you.
- We do not sell your personal information, and we do not use your health data for advertising.
- Health and heart-rate data reaches us only if you grant permission, and you can withdraw it at any time in Apple Health.
- Deleting your account in the app deletes your data immediately and permanently.
- Questions go to support@healthstars.io.
1 Information we collect
Everything below is either given to us by you, produced by your use of the app, or shared from Apple Health with your permission.
Account information
Your name, email address, date of birth and a securely hashed password. We record whether your email has been verified, and when we last sent you a verification message.
Biometrics and body composition
Sex, height, weight, body-fat percentage, resting heart rate and VO₂ max. These set the zones and thresholds your plan is built from.
Training sessions
For each session: heart-rate series and minimum, maximum, resting and target heart rates, heart-rate variability, duration, distance, calories, workout type and mode, the date and time, and the readiness and impact figures we compute from it.
Daily inputs you log
Hours of sleep, stress level, hydration, nutrition and whether you kept to your medication. These feed your readiness score; if you don't log them, the score is simply less informed.
Conditions you train in
Temperature, humidity and altitude for a session, so the score reflects the environment rather than penalising you for it.
Goals and progress
The goal you set (fitness, blood pressure, HbA1c or weight), its target and target date, and the trend snapshots we use to project when you'll reach it.
Clubs, challenges and referrals
Club membership and role, challenge attempts and their scores, leaderboard standings, and who referred you or was referred by you.
Payout information
If you enter a paid challenge, our payments provider collects and holds the details needed to pay you and to meet identity and tax obligations. We store only an account reference and its status — never your full bank details or card numbers.
Technical and diagnostic data
Sign-in times, app and device version, and crash or error reports. Error reports can include the technical context of a failure so we can reproduce it.
2 Apple Health and heart-rate data
How we treat health data
- HealthStars reads from and writes to Apple Health only after you grant permission, and only the data types we ask for — principally heart rate and workouts.
- We use health data solely to deliver the app's features: your plan, your readiness score, your progress and your challenge results.
- We never use health data for advertising or marketing, we never sell it, and we never share it with data brokers.
- We do not share health data with third parties except the processors in section 5, which handle it only to run the service on our behalf.
- You can withdraw access at any time in Settings › Health › Data Access & Devices › HealthStars. Features that depend on it will stop working, and data already synced stays until you delete your account.
3 How we use your information
- To run your training. Building and adapting your plan, setting your zones, scoring readiness before a session and projecting your goal date.
- To operate your account. Signing you in, verifying your email, resetting your password and keeping sessions secure.
- To run clubs and challenges. Scoring attempts, ranking leaderboards, resolving ties and paying out prizes.
- To communicate with you. Verification, password resets, challenge results and support replies. These are service messages, not marketing.
- To keep the service working and honest. Diagnosing errors, preventing abuse and enforcing the challenge rules.
- To improve the app. Understanding, in aggregate, which features are used and where the plan performs poorly.
- To meet legal obligations. Tax and record-keeping duties that come with paying out prizes.
Where the law requires a legal basis, we rely on performing our contract with you, your explicit consent for health data, our legitimate interest in a secure and working service, and compliance with legal obligations.
4 What we never do
- We do not sell your personal information.
- We do not serve third-party advertising in the app, and we do not share your data for cross-context behavioural advertising.
- We do not use your health, heart-rate or fitness data to target advertising or build marketing profiles.
- We do not publish your health data. Only what you'd expect — your club standing and challenge results — is visible to other users.
6 Where your data is stored
Your data is stored on servers in the United States. If you use HealthStars from outside the United States, your information is transferred there and processed under laws that may differ from your own. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses for these transfers.
7 Retention and deletion
We keep your information for as long as your account is open, because the plan and the readiness model depend on your history. You can delete your account at any time from your account settings in the app.
Deletion is immediate and permanent. Your profile, biometrics, sessions, goals, club memberships and challenge history are erased and cannot be restored. We keep only what the law requires us to — principally payment and tax records tied to prizes already paid — and encrypted backups, which age out on their normal cycle.
If you have an unpaid prize, contact us before deleting your account so we can settle it first.
8 Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you, and receive a portable copy.
- Correct information that is inaccurate or out of date.
- Delete your account and the data attached to it.
- Withdraw consent for health data, by revoking access in Apple Health.
- Object to or restrict certain processing.
- Be free from discrimination for exercising any of these rights.
Name and email changes and account deletion are all self-service in the app. For anything else, email support@healthstars.io from your account address and we'll respond within the period the law allows — 30 days in most cases. EU and UK users may also complain to their local data protection authority.
9 Security
Traffic between the app and our servers is encrypted in transit. Passwords are stored only as salted hashes, never in a readable form. Access to production data is limited to the people who need it, sign-in and password-reset attempts are rate limited, and sessions can be invalidated centrally.
No system is perfectly secure, so we don't claim ours is. If you believe your account has been compromised, or you've found a vulnerability, email support@healthstars.io and we'll act on it.
10 Children
HealthStars involves high-intensity training and cash challenges, and is not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, email us and we'll delete it.
11 Changes to this policy
We'll update this page when our practices change, and revise the date at the top. If a change materially affects your rights, we'll tell you in the app or by email before it takes effect. Continuing to use HealthStars after a change means you accept the updated policy.
12 Contact us
For any privacy question, request or complaint, write to us and we'll come back to you:
Email support@healthstars.ioHealthStars · healthstars.io