Privacy Policy

Health-derived data, journal entries, coach history, and scores stay on your device. LoadSense uses no iCloud account or health-data backend. An exported file leaves the app only when you choose to share it. Support receives only the information you submit through the contact form.

Health Connect on Android. With your permission, LoadSense reads exercise sessions, heart rate, resting heart rate, HRV (RMSSD), respiratory rate, oxygen saturation, body temperature, sleep sessions, steps, active calories, VO₂ max, distance and floors climbed. These observations, their dates and sources are shown in the app. Steps identify movement for strain and recovery and for each 15-minute stress window; windows with sufficient movement or exercise are excluded from the stress estimate. Each permission is optional and can be revoked in Health Connect. Missing data is shown as unavailable, never as zero. Health records and scores stay on the device and are not sent to the purchase-verification relay.

Android purchase verification. On Android, to verify a Google Play subscription, LoadSense sends Google Play’s signed purchase data and its signature to the developer’s verification relay hosted on Cloudflare Workers. This transaction data can include the product identifier, purchase token, order reference and purchase timestamps supplied by Google Play. The relay checks the receipt and queries Google Play for the subscription’s actual status and expiry to establish current access. LoadSense does not attach Health Connect records, journal entries or scores to this request.

Google Play Billing diagnostics. On Android, Google Play Billing may send billing diagnostics to Google. These SDK diagnostics are separate from the developer’s purchase-verification relay and from purchase-funnel measurement when it is enabled.

When purchase-funnel measurement is enabled, LoadSense sends anonymous events about paywall views, purchase outcomes and restoration. They contain only the app name and version, event type, a limited technical detail, configured country and UTC day. No health data or user or device identifier is sent. The data is used for aggregate statistics, not advertising tracking. When measurement is disabled, counters stay on the device.

The optional support form sends the app name, support subject, chosen category, reply email address, any app and operating-system versions you enter, your message, and an anti-spam field to Cloudflare Workers for validation. The request is then forwarded to the developer’s support inbox. This information is used to respond to your request and maintain the app, not for advertising.

The developer uses a support submission only to route, investigate and answer your request, handle a privacy request, and protect the support channel against abuse. The developer does not sell the submission, use it for advertising, or build a profile about you.

The developer keeps a support submission only as long as reasonably necessary to resolve and follow up on the request and to meet applicable legal or security obligations, then deletes it or removes information that identifies you. There is no single fixed period because those needs differ by request. You may request access to, correction of, or deletion of a support submission by using the same form and choosing the Privacy category. A request may be limited where retention is required by law or needed to establish, exercise, or defend legal claims.