HRV-Tracker-Privacy

Privacy Policy for HRV-Tracker

Last updated: 12 May 2026

This privacy policy explains what information the HRV-Tracker app (“the app”, “we”, “us”) collects, how it is used, and your rights regarding that information.

Who we are

HRV-Tracker is developed by George Hunn, based in Germany. Contact: georgehunn91@gmail.com

What we collect

When you use the app, we collect the following:

• A device identifier — a hashed ID generated on your device. It does not contain your name, email, or any directly identifying information.
• Heart rate and heart rate variability (HRV) measurements read from your Garmin device’s sensors during app use.
• App usage events — when the app is opened and when measurement sessions start, end, or are abandoned.
• Timestamps for each of the above events.

We do not collect your name, email address, phone number, contacts, photos, or precise location.

Why we collect it

This information is used to:

• Provide the app’s core functionality (showing your HRV measurements and history).
• Understand how the app is used so we can fix bugs and improve features.
• Measure aggregate metrics such as daily active users.

We do not sell your data, and we do not use it for advertising.

Legal basis (GDPR)

Heart rate and HRV are considered health data under GDPR (Article 9). We process this data on the basis of your explicit consent, which you give by installing and using the app. You can withdraw consent at any time by uninstalling the app and emailing us to request deletion of your data.

Where it is stored

Data is stored on servers operated by Supabase, located in the EU. Access is restricted to the app developer.

How long we keep it

Measurement and usage data is retained for up to 24 months, after which it is deleted or fully anonymised.

Third parties

We share data with the following service providers strictly for the purposes above:

• Supabase — database hosting
• Grafana — data visualisation

We do not share data with advertisers.

Your rights

If you are in the EU/UK, under GDPR you have the right to access, correct, or delete the data we hold about your device, to object to or restrict processing, and to data portability. Because the device ID is the only link to your data, please include it in any request.

To exercise these rights, email georgehunn91@gmail.com.

Children

The app is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If we change this policy we will update the date at the top of this page.

Contact

Questions? Email georgehunn91@gmail.com.