Privacy Policy
Updated: 26 September 2026 (previous version effective 25 September 2026)
AMUX Pulse ("AMUX", "we") is a training and recovery app for iOS. This policy explains exactly what data the app collects, why, and what happens to it. Short version: your data powers your own training engine. We do not sell it, we do not show ads, and we do not use it for advertising or tracking of any kind.
1. Data we collect
Health and fitness data (Apple Health)
With your explicit permission via Apple's HealthKit consent screen, AMUX Pulse reads the following data types:
- Workouts: training load and your session history
- Heart rate, resting heart rate, walking heart-rate average, and one-minute heart-rate recovery: workout intensity and recovery baselines
- Heart-rate variability (HRV): recovery scoring
- Sleep analysis: overnight recovery feeding your readiness score
- Active energy, resting energy, walking/running distance, and step count: training load and daily movement
- Activity rings, exercise minutes, and stand time: daily movement, exercise, and stand progress
- VO2 max: an aerobic fitness trend, shown as an estimate
- Blood oxygen, respiratory rate, body temperature, and sleeping wrist temperature: overnight vitals compared with your own baseline
Apple does not tell apps which of these you allowed. AMUX works with whatever you share and never fills a missing value with a guess.
The app writes one data type back to Apple Health: workout summaries for sessions you record.
Health data rules we hold ourselves to: health data is used only to compute your recovery, readiness, and training-load metrics. It is never used for advertising, marketing, or data mining, never sold, never shared with data brokers, and never stored in iCloud by us. You can revoke Health access at any time in iOS Settings → Privacy & Security → Health.
Location data
With your permission, the app uses precise location during runs to record your route, distance, and pace, including in the background while a tracked session is active so your run keeps recording with the screen locked. Routes are stored with your training history. Location is never collected outside of activity tracking.
Bluetooth heart-rate sensors
With your permission, the app connects to Bluetooth heart-rate sensors such as a chest strap, or a WHOOP band with Heart Rate Broadcast switched on, and records the heart rate they report during a session. This runs in the background while a session is active so the reading continues with the screen locked. Sensor data is stored with that session.
Apple Watch
If you use the AMUX Pulse watch app, the watch records the session and uploads it to our servers itself, over Wi-Fi or cellular, without going through your iPhone. To do that, your iPhone issues the watch its own credential, and we store an identifier for that watch so you can see and revoke it. Revoking a watch stops it uploading.
Photos and camera
If you set a profile picture, the image you choose or take is uploaded to our storage and linked to your account. If you save a share card, the app writes that image to your photo library. The app never reads your photo library other than the picture you pick.
Account data
Email address, display name/handle, and sign-in identity (Apple, Google, Whop, or email/password). Used solely to operate your account and sync your training data across your devices.
Purchase data
Subscription status and entitlement history (AMUX Pro), so the app knows which features to unlock. Payment card details are handled entirely by Apple or Whop; we never see them.
Diagnostics
Crash reports and performance data, linked to your account, used only to find and fix bugs.
Feedback and support reports
When you send a report from Feedback & support (in Settings, in Help & about, or from "Report response" on the AI coach), we receive what you write, the type you chose (bug, idea, question or other), where in the app you opened the form, and a screenshot if you attach one. If you turn on "You can email me about this", we also receive the email address you give, so we can reply.
To help us reproduce a problem, the report also carries your app version and build, your iOS version, whether you are on the free plan or AMUX Pro, your sync status, and the last few technical events the app logged. Those events are stripped of sign-in tokens, keys and link parameters on your phone before they are sent, and they contain no health data. Reports are linked to your account and are used only to fix problems, improve the app and answer you.
2. Service providers (processors)
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication and cloud database | Account data, training sessions, profile, health data you allow from Apple Health, and metrics derived from it |
| RevenueCat | Subscription management (App Store purchases) | Anonymous app-user ID, purchase history |
| Whop | Optional web membership purchases and sign-in | Account email, membership status |
| Anthropic (Claude) | AI Recovery Coach and AI training summaries | See AI section below |
| Resend | Sending you trial and renewal reminder emails, and sending each feedback report to our team's inbox | Your email address and your trial or renewal dates. For a feedback report: its content as described in section 1, your account email, and a link to any screenshot that stops working after one hour |
| Telegram | Notifying our team the moment a feedback report arrives | The first part of the report, its type, your app version and plan, and your reply email if you allowed a reply |
| Notion | Our internal list of feedback reports, where we track fixes | The report content as described in section 1, your account email, and a link to any screenshot that stops working after one hour |
| Expo | Delivering over-the-air app updates | Your app's version and update channel. No account data |
| Polar | Optional Polar wearable connection | When you connect Polar, we receive your cardio fitness (VO2 max), maximum and resting heart rate, aerobic and anaerobic thresholds, height, weight, and your last 30 days of workouts. We send Polar an internal AMUX account identifier so it knows which account to sync. Disconnecting deletes the stored data and the registration on Polar's side. |
| Oura and WHOOP | Optional wearable connections | When you connect one, we receive the recovery, sleep and workout metrics that provider exposes. Disconnecting deletes the stored data. |
| Sentry | Crash and performance monitoring | Crash and performance data, linked to your account ID and email address. Sign-in codes, tokens, passwords and API keys are stripped before anything is sent, and performance tracing is off. |
| Mapbox | Map tiles, snapping your route to paths, and the watch route thumbnail | Map tile requests, and your GPS coordinates with their timestamps while a run is recording and when it is saved |
Each provider processes data only on our instructions to run the service. None of them may use your data for their own advertising.
3. AI processing disclosure
AI is off until you turn it on. Nothing is sent to an AI provider until you accept the AI consent notice in the app. You can see, grant or withdraw that consent at any time in Profile → Settings → Privacy & data → AI answers, and also from the coach's info panel. Withdrawing takes effect immediately for the coach and every AI card.
Once you opt in, these features send data to Anthropic (Claude), acting as our data processor:
- Recovery Coach: the chat, when you send a message
- Weekly review: a read-back of your training week on the Data tab
- Pre-session briefing: a short note before a planned session
- Calibration coach: guidance while your baselines are still being learned
- Post-race debrief: a review after a race day
What is sent: a compact summary built on your phone, not your raw data. Depending on the feature it contains:
- your question (coach chat only)
- readiness: your readiness score, its band and the main reasons behind it
- training load: acute and chronic load and your acute:chronic workload ratio (ACWR)
- heart rate variability: latest value, 7-day average, change and trend
- sleep: hours, efficiency, short nights, last bedtime and trend
- recent sessions: totals for the last 30 days and short summaries of up to eight recent sessions (date, type, title, duration, distance, average and maximum heart rate, load, and post-workout check-in flags such as soreness)
- body and physiology: body weight rounded to a whole kilogram, resting and threshold heart rate, threshold pace
- fitness estimates: your VO2 max estimate, its range and trend, VDOT, race time predictions, and recent 5K and 10K times or test distances
- race results (post-race debrief): distance, time, pace, per-kilometre splits, pace fade, heart-rate drift, effort rating (RPE), and predicted versus actual time
- training profile: the goal, level, weekly availability and recovery priorities you set, and safety flags from your questionnaire (for example a recent injury, medication that affects heart rate, or a medical clearance flag)
- nutrition preferences: diet style and dietary restrictions
- your plan: program, week, race phase and days to race, planned sessions and their targets (pace, zone, exercises), and your progress this week
- data sources: which sources are connected (for example Apple Health) and which data is missing
What is never sent: your name, your email address, your date of birth, GPS routes or location coordinates, raw heart-rate samples, raw Apple Health history, or notes you write.
Anthropic does not train models on this data. Anthropic may retain API inputs for up to 30 days, solely for abuse monitoring, after which they are deleted. You can use the entire app without ever turning AI on.
4. No tracking, no ads
AMUX Pulse contains no advertising, no third-party ad SDKs, and does not "track" you as defined by Apple's App Tracking Transparency framework: we never link your data with third-party data for advertising, and we never share data with data brokers.
5. Retention and deletion
- Export: download your training sessions any time in the app: Settings → Privacy & data → Export data.
- Delete: permanently delete your account and all cloud data in the app: Settings → Privacy & data → Delete account. Deletion cascades through every server-side record (profile, sessions, entitlements) and cannot be undone.
- Data on your device (and anything you wrote to Apple Health) stays under your control and can be removed by deleting the app or editing Apple Health.
- Deleting your account does not cancel an active Apple or Whop subscription. Cancel those with Apple (Settings → Apple ID → Subscriptions) or Whop directly.
6. Your choices
- Every permission (Health, location, Bluetooth, notifications) is optional and requested only when the related feature needs it. The app works without them, with reduced functionality.
- Change permissions any time in iOS Settings → AMUX Pulse.
- Questions or privacy requests: martin@amux-pulse.com.
7. Children
AMUX Pulse is not directed at children. You must be at least 16 to use the app. The AI features are available only to users aged 18 or over: the app checks the age on your profile before every AI request, including the coach and all AI cards, and our server keeps a record of the birth year you give. We do not knowingly collect data from anyone below these ages. If you believe a child has given us data, write to us and we will delete it.
8. Your rights, and the legal basis we rely on
This section applies to everyone, and it is what European data protection law (the GDPR) requires us to tell you.
Who is responsible for your data
The data controller is "AMUX" Ltd. (UIC 208410829), Iskar 5, Laka, Bulgaria. You can reach us about anything in this policy at martin@amux-pulse.com. We have not appointed a Data Protection Officer, because we are not required to.
Why we are allowed to process your data
| What | Why | Legal basis |
|---|---|---|
| Your account, sync, and subscription | To give you the service you signed up for | Performance of a contract, Article 6(1)(b) |
| Health and fitness data, including anything from Apple Health or a wearable | To compute your readiness, recovery and training load | Your explicit consent, Article 9(2)(a), together with Article 6(1)(a) |
| Precise location during a run | To record your route, distance and pace | Your consent, Article 6(1)(a) |
| Sending a summary to an AI provider | To generate the AI coach and AI summaries | Your consent, Article 6(1)(a), and Article 9(2)(a) because the summary contains health data |
| Crash and performance diagnostics | To find and fix faults | Our legitimate interest in a working app, Article 6(1)(f) |
| Feedback and support reports you send | To investigate what you reported, improve the app, and reply if you asked us to | Our legitimate interest in answering you and fixing the app, Article 6(1)(f). The reply email only if you turn on "You can email me about this", Article 6(1)(a) |
Health data is special category data under Article 9. We process it only because you explicitly agreed, and only to compute your own training metrics. If you withdraw that consent, we stop.
How long we keep it
- Your account, training history, and health metrics: until you delete your account. We do not expire your training history while your account is open, because its value is that it is long.
- Anything sent to the AI provider: up to 30 days at Anthropic for abuse monitoring, then deleted. Not used to train models.
- Crash and performance diagnostics: 90 days, then deleted automatically. Diagnostics are processed in the European Union.
- Feedback reports: kept while they help us fix or improve the app. When you delete your account, we delete your screenshots and the reply email you gave, and the report is no longer linked to your account. Copies already delivered to our team's inbox, team chat and issue list are not removed automatically; write to us and we will delete them.
- After you delete your account: server-side records are removed immediately. Backups roll off within 30 days.
Your rights
You can ask us to do any of the following, free of charge, and we will answer within one month:
- See your data (access). Export is built into the app: Settings, then Privacy & data, then Export data.
- Correct it (rectification) if something is wrong.
- Delete it (erasure). Also built in: Settings, then Privacy & data, then Delete account.
- Get a portable copy (portability) in a machine-readable format.
- Restrict or object to processing, including our legitimate-interest use of diagnostics.
- Withdraw consent at any time, for Health, location, or AI, separately. Withdrawing is as easy as giving it, and it does not make our earlier processing unlawful.
If you are unhappy with how we handled it
Write to us first and we will try to fix it. You also have the right to complain to your national data protection authority. Ours is the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, cpdp.bg. If you live elsewhere in the EU or the UK, you can complain to your own authority instead.
Sending data outside the EU
Your account and training data are stored in the European Union, in Supabase's Paris region. Crash diagnostics are processed in the European Union. Some of our other providers process data outside the European Union, mainly in the United States: Anthropic (only if you turn AI on), RevenueCat, Mapbox, Resend, Whop, Expo, and, for feedback reports only, Telegram and Notion. Those transfers rely on the European Commission's Standard Contractual Clauses, or on the EU-US Data Privacy Framework where that provider is certified under it. You can ask us for a copy of the safeguards.
Data we receive about you from someone else
If you connect Polar, Oura or WHOOP, we receive fitness and recovery data about you from that provider, as listed in the provider table above. You start that by connecting the account, and you stop it by disconnecting.
Automated decisions
The app computes scores and adapts your plan automatically, and the AI features generate text. None of this produces a legal effect or a similarly significant effect on you within the meaning of Article 22, and no human-reviewed decision is made about you. The guidance is training guidance, and it is not medical advice.
9. Changes
If this policy changes materially, we will update this page and note it in the app's release notes. The effective date above always reflects the current version.