Consumer Health Data Privacy Policy

Last updated: October 29, 2026

This policy is for people who live in the United States, and in particular in Washington (My Health My Data Act), Nevada and Connecticut, whose laws protect "consumer health data". It adds to Stamio's privacy policy (stamio.app/privacy.html, also in the app under Settings › About › Privacy), which stays the main description of how Stamio handles your data.

In short. Stamio calculates everything on your iPhone and Apple Watch. The developer never receives your health data, with one exception: during the beta, an export that you choose to send yourself, after giving your explicit consent in the app. Nothing is ever sold. Nothing is shared with anyone, for advertising or any other purpose, except the workouts you choose to upload to your own Strava account, which go from your iPhone straight to Strava and never through us (see "Sharing").

Who we are

Stamio is made by Charles Lapointe, an independent developer based in France ("we"). Contact for anything in this policy: [email protected].

Health data that stays on your devices

With your permission, the app reads from Apple's Health app your workouts, heart rate, resting heart rate, heart rate variability, sleep and sleep stages, respiratory rate, wrist temperature, blood oxygen, steps, calories, VO2 max, age, sex, weight, height and wheelchair setting. From these, it calculates on your devices values such as VO2 max, training load and status, readiness, energy, sleep score and race predictions.

All of this is processed only on your iPhone and Apple Watch. We have no server that receives it, no analytics and no advertising tools. We cannot see, access or retrieve it. You can delete it at any time in the app (Settings › Data › "Delete app data"), and remove Stamio's access in your iPhone's Settings.

Health data we may collect

We only collect consumer health data in these cases, each one started by you:

• Beta validation export (beta versions installed through TestFlight only, never the App Store version). Categories: the values Stamio calculated over the last 150 days (VO2 max; load and training effect of each workout; readiness; score and stages of each night; energy; daily stress; training status; resting heart rate of each night) and the profile used for the calculations (age, sex, weight, height, maximum and resting heart rate, whether you take medication that affects your heart rate, wheelchair setting), under a tester number. Never your raw measurements (second-by-second heart rate, heartbeats), your location or GPS routes, your name, your Apple ID or your workout notes.
• Messages you send us (support email, beta feedback, sign-up email). They contain only what you choose to write or attach, which may include health information or screenshots of the app.
• TestFlight feedback and crash reports, if you send them. Apple delivers them to us under Apple's privacy policy; a screenshot may show your values.

Why we collect it and how we use it

• Beta export: only to check and improve the accuracy of Stamio's calculations, by comparing them with how you feel or with another watch you wear.
• Messages, feedback and crash reports: only to answer you and fix problems in the app.

We never use your health data for advertising, profiling, marketing or any other purpose, and we never combine it with data from other sources.

Where it comes from

From you: the export is prepared by the app on your iPhone from your Health data, and you send it yourself (by email or with the iOS share sheet). Messages and feedback come from you. We collect nothing from data brokers or other third parties.

Sharing

We do not share or sell consumer health data, and we never will without your separate, explicit consent (and, for a sale, your signed authorization).

Workouts you upload to Strava. Only if you ask the app to (the "Upload to Strava" button, or the "Upload my workouts to Strava" setting you turn on), your iPhone sends a workout, including its heart rate and GPS track, directly to your own Strava account. We never receive it. Because this sends health data to a third party at your direction, the app first asks for your separate, explicit consent and lists exactly what is sent; you can stop at any time (Settings › Strava). Strava's privacy policy then applies to what Strava receives.

To receive and keep what you send, we use these service providers (processors), which handle it only on our behalf:

• Cloudflare, Inc. (email forwarding for the stamio.app address);
• Google LLC (the developer's email inbox);
• Apple Inc. (TestFlight feedback and crash reports).

The export file is then kept on the developer's computer, protected by its password, and is not uploaded anywhere else. Access to the inbox and to Cloudflare is protected by two-factor authentication.

Consent

The beta export is only possible after you tick, in the app, a consent box that lists what is sent, why, where it is kept and for how long, and after you confirm that you are 18 or older. Consent for collection and consent for sharing are separate: the beta export only asks for the first; uploading workouts to Strava asks for its own consent before the first upload (see "Sharing"). You can withdraw your consent at any time: untick it in the app (Settings › Advanced › "Share my data for the beta") and write to [email protected] to have what you sent deleted.

How long we keep it

Beta exports: deleted after analysis, and at the latest 3 months after Stamio's release on the App Store, or as soon as you ask. Messages: as long as needed to answer you and follow up on the beta, then deleted.

Your rights

Wherever you live, you can ask us to:

• confirm whether we collect or share your consumer health data;
• give you access to it and a copy of it;
• give you the list of all third parties and affiliates with which we shared it (today: none, besides the service providers listed above and Strava, for the workouts you upload yourself);
• delete it, including from backups;
• stop using it, by withdrawing your consent.

Send your request to [email protected], with your tester number if you sent an export, from the email address you used. We may ask a question to make sure the request comes from you. We answer within 45 days (extended once by 45 days if needed, in which case we tell you why). Requests are free, up to twice a year.

Appeal. If we refuse your request, in whole or in part, you can appeal by replying to our answer with the word "Appeal" within 45 days. We will decide within 45 days and explain our decision in writing. If you are not satisfied, you can contact your state's attorney general: Washington (atg.wa.gov/file-complaint), Nevada (ag.nv.gov) or Connecticut (portal.ct.gov/ag).

Children

Stamio's beta is for adults only. We do not knowingly collect any data from anyone under 18.

Changes

If this policy changes, we will update the date above and, for any change that affects data already collected, ask for your consent again in the app before using it differently.

Not a medical device

Stamio is not a medical device. It does not diagnose, treat or prevent any disease. Its values are estimates to help you train.