Privacy policy
STATD turns your training into a player card. To do that, the app uses data about your health and training. That is special category personal data, and we treat it that way. FitAdvisor (sole proprietorship of Florian Ruitenbeek, Bossebaan 4 A, 5076 NC Haaren, the Netherlands, Chamber of Commerce 56554117, info@statd.app) is the controller.
In the current test version, friends, clubs and the account are switched off. Everything then stays on your phone and nothing is sent to our server. What is written below about the server only applies once those features are switched on.
What the app reads
From Apple Health, only with your permission, and read only: workouts, distances and running times; VO2max and heart rate; heart rate variability, resting heart rate and sleep; weight, date of birth and sex. The app writes nothing to Apple Health.
What you enter yourself: tests such as a squat or a 5 km, your name, club, profile photo, goal and race date, and how hard a workout was. If Apple Health does not provide a date of birth, the app asks for your year of birth.
For friends and clubs you create an account with Sign in with Apple. Apple then gives us your email address, or a hidden forwarding address from Apple if you choose that. We only use it to recognise your account and to contact you about your account.
What stays on your phone
The app calculates your card on your phone. Your measurements, heart rate, sleep, weight, age, sex, heart rate zones and paces never leave your phone.
What you share, and with whom
If you use friends or clubs, only this is sent to our server: the email address Apple provides; your name, club and profile photo; who you follow and who follows you; the clubs you are a member of or have created (name, place, members and requests); the scores on your card (overall, rank, the six stats and whether they were measured); and, if you switch it on yourself, your overall per week and your weekly plan (type of workout, description, duration, done or not).
Your name, club and photo can be seen by anyone who can find you through search, if you are discoverable. You choose whether you are discoverable; the app asks you before anything becomes visible. Your card, and if you switch it on your progress and weekly plan, can be seen by people whose follow request you accept and by members of the clubs you belong to. There is no public profile.
A share image is only seen by the people you send it to yourself. An image of a record or of your week can show your time, weight, distance or pace, because that is the record. The app makes such an image on your phone; it does not go through our server.
The server is hosted by Supabase in a European data centre (Frankfurt). We will sign a data processing agreement with Supabase before friends and clubs are switched on. Like every server, Supabase logs the IP address and time of each request, for security and to fix problems. Those log files are deleted automatically after a short time.
What for, and what not
Only to make the app work: your card, your challenges and what your followers may see. No advertising, no selling of data, and no use of health data for marketing or profiling.
STATD is a game and not a medical device. The numbers and advice in the app are not medical advice.
Legal basis
We process your health data based on your explicit consent (Article 9(2)(a) GDPR). You give it when you connect Apple Health and when you switch on what you share. You can withdraw it at any time: in Settings, Health, Data Access & Devices, and in the app under Who sees what.
How long we keep data
On your phone: until you delete the app, or until you choose "Erase everything on this phone" at the bottom of your profile. On the server: until you delete your account. You can do that at the bottom of your profile in the app; we then immediately remove your account, your email address, your profile, your scores, your photo, your follow relationships and your club memberships, and also clubs you manage.
Age
An account, friends, clubs and sharing are available from age 16. Under 16, parental consent is required in the Netherlands, and we do not ask for it. Younger users can use the card, but then nothing leaves the phone: no account, no friends or clubs and no share button. The app knows your age from Apple Health or from the year of birth you enter.
Your rights
You can access your data, have it corrected or deleted, withdraw your consent and object. Email info@statd.app to do so. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If this policy changes, you will see it in the app before the change takes effect.