Privacy Policy

1. Overview

Longevio estimates your fitness age using Apple Health data and research-informed methods. Built on a privacy-first principle, health calculations happen on your device.

Developer: Dan Urbánek, Czech Republic. This Privacy Policy applies to the Longevio iOS app, watchOS companion, and widgets.

2. Data We Collect

TelemetryDeck Anonymous Analytics

• SHA-256 hashed device ID — irreversible hash, cannot be reversed to identify you
• No personal data — no name, email, location, IP address, or health metrics
• Opt-out available — toggle in Settings > Privacy > Anonymous Analytics

HealthKit Data

• Read-only access only — processed on your device, never transmitted to any server
• No account required — everything works locally without login

3. HealthKit Data

What We Access

Longevio requests read-only access to calculate your fitness age:

• Resting Heart Rate — baseline cardiovascular fitness indicator
• VO₂ Max — maximum oxygen uptake (oxygen efficiency)
• Step Count — daily activity level
• Active Energy Burned — calorie expenditure from activity
• Body Mass (BMI) — height and weight for fitness metrics
• Sleep Analysis — sleep duration and quality
• Heart Rate Variability (HRV) — cardiovascular recovery indicator
• Walking Speed — mobility and fitness indicator

How We Use It

• Estimate your fitness age using multiple science-informed methods, including HUNT Study, FRIEND, Cooper Institute, and a combined score view
• Generate trends, recovery insights, and guidance summaries
• Power dashboard visualizations, history, and widgets
• Display on Home Screen and Lock Screen widgets

All processing happens entirely on your device. We never write to Apple Health. We never transmit HealthKit data to any server. We never share HealthKit data with third parties.

Your Control

• Grant explicit permission when first opening the app
• Revoke permissions anytime in iOS Settings → Privacy & Security → Health → Longevio
• Without HealthKit access, the app will gracefully handle unavailable data

4. Anonymous Analytics (TelemetryDeck)

Longevio uses TelemetryDeck for anonymous usage analytics to understand app usage patterns and improve features.

Data We Send

• Hashed anonymous device ID (SHA-256, cryptographically irreversible)
• App version — which version you're running
• iOS version — system version for compatibility insights
• Locale — language setting only (no location)
• Event type — e.g., 'Screen.Dashboard', 'Feature.WidgetAdded'

Data We Do NOT Send

• ❌ Personal data (name, email, phone, birthdate)
• ❌ Health data (heart rate, fitness age, any HealthKit values)
• ❌ Location data (GPS, city, country)
• ❌ IP address
• ❌ Device identifiers (IDFA, IDFV)

Your Control

Disable anonymous analytics anytime in Settings > Privacy > Anonymous Analytics. TelemetryDeck's privacy policy: telemetrydeck.com/privacy

5. Local Storage

Longevio stores the following data locally on your device only:

App Group UserDefaults

group.cz.dnesdan.longevio — shared with Widget and Apple Watch:

• Fitness age cache and calculation results
• Stress and recovery scores
• Widget configuration and display data

SwiftData (On-Device Database)

• Fitness age history records and trends
• Calculation algorithm data

Keychain

• Premium subscription status — cryptographically secured

iCloud Key-Value Store (Optional, User-Toggleable)

• Latest fitness age record synced across your own devices signed into the same Apple ID
• Toggle on/off in Settings > iCloud Sync
• No third-party servers — uses Apple's secure iCloud infrastructure

All data protected by iOS encryption. Deleted automatically when you uninstall the app.

6. In-App Purchases

• StoreKit 2 — Apple processes all payments securely
• We never see payment info — credit card details handled entirely by Apple
• Premium status stored locally in Keychain on your device

7. iCloud Sync

Longevio offers optional iCloud synchronization for your fitness age data across your own devices:

• User-controlled — toggle on/off in Settings
• Uses NSUbiquitousKeyValueStore — Apple's secure sync service
• Syncs only between your devices signed into the same Apple ID
• No third-party servers — Apple handles encryption and security

8. Internet Connectivity

9. Third-Party Services

The app does not include:

• ❌ Google Analytics or other analytics SDKs
• ❌ Firebase or Google services
• ❌ Facebook SDK or Meta services
• ❌ Advertising SDKs or ad networks
• ❌ Crash reporting services (Crashlytics, Sentry, Bugsnag)
• ❌ Social media integrations

10. Data Sharing

• No personal data is collected from your device by us
• No health data is transmitted to any server
• No data is sold or shared with third parties
• TelemetryDeck receives only anonymous hashed signals (cannot be reversed)

11. Children's Privacy

Longevio is rated 4+ in the App Store. The app collects no personal data from any user, including children. Because we collect minimal non-health data and no identifying information, the app complies with COPPA and equivalent regulations worldwide.

12. Your Rights

GDPR (European Users)

• Right of access: Your health data lives in Apple Health, which you fully control. No personal data is held by us.
• Right to deletion: Uninstall the app to delete all local data. Revoke HealthKit access in Settings to stop data access.
• Right to portability: Your health data stays in Apple Health; export via Health app.
• Right to object: Revoke HealthKit permissions and disable analytics in Settings anytime.

CCPA (California Users)

• We do not sell personal data
• We do not share personal data with third parties for advertising purposes
• Opt-out of analytics in Settings > Privacy > Anonymous Analytics

Deleting Your Data

To delete all Longevio data: uninstall the app. All local storage, fitness history, and cached health calculations are permanently removed. Your health data remains in Apple Health under your control.

13. Changes to This Policy

If we update this Privacy Policy, we will update the "Last Updated" date above and notify users via app update release notes if changes are significant. The current version is always available at ios.dnesdan.cz/longevio/privacy-policy.

14. Contact

15. Technical Details

Apple Frameworks Used

• HealthKit: Read-only access to health metrics (with your explicit permission)
• StoreKit 2: In-app purchase processing handled entirely by Apple
• WidgetKit: Home Screen and Lock Screen widgets displaying fitness age
• WatchConnectivity: iPhone ↔ Apple Watch sync of fitness age over personal local device connection
• AppIntents: Siri shortcuts support for fitness age queries
• CoreSpotlight: Searchable fitness age history in Spotlight
• NSUbiquitousKeyValueStore: Optional iCloud sync of fitness age across user's own devices

Data Retention

• HealthKit data: Stored in Apple Health on your device, controlled entirely by you
• Local app data: Stored until you uninstall the app
• Fitness age history: Stored on-device in SwiftData, permanently deleted on uninstall
• iCloud sync data: Only if enabled; deleted from iCloud when disabled or app uninstalled

Security

• All data processing happens on-device
• No network connections except TelemetryDeck (anonymous) and StoreKit (Apple-handled)
• Data protected by iOS device encryption
• Premium status secured in Keychain
• No user accounts or authentication required

16. Compliance

This app complies with:

• ✅ GDPR (General Data Protection Regulation)
• ✅ CCPA (California Consumer Privacy Act)
• ✅ Apple HealthKit Usage Guidelines
• ✅ Apple App Store Review Guidelines