Welcome to SaunaTracker Pro. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our iOS and watchOS application.
SaunaTracker Pro is a health and wellness application that helps you track heat and cold exposure therapy sessions (such as sauna, steam room, and cold plunge sessions) and monitors health metrics to evaluate session effectiveness.
Your privacy is important to us. We are committed to protecting your personal information and being transparent about our data practices. This policy is designed to help you understand:
Data Controller: JDP Software Pty Ltd, Australia
Privacy Officer: Privacy Officer, JDP Software Pty Ltd
Email: privacy@saunatracker.pro
For users in the European Economic Area (EEA), if you have concerns about our data practices, you have the right to lodge a complaint with your local data protection authority.
For users in Australia, you may contact the Office of the Australian Information Commissioner (OAIC) if you have concerns about how we handle your personal information.
With your explicit permission, SaunaTracker Pro reads and writes the following health data types through Apple HealthKit:
| Data Type | Read | Write | Purpose | Lawful Basis |
|---|---|---|---|---|
| Heart Rate and Resting Heart Rate | Yes | Yes, heart-rate samples may be saved during sessions | Monitor cardiovascular response during sessions | Explicit consent (GDPR Art. 9(2)(a)) |
| Heart Rate Variability (HRV) | Yes | Assess recovery and adaptation | Explicit consent (GDPR Art. 9(2)(a)) | |
| Blood Oxygen Saturation (SpO2) | Yes | Monitor oxygen levels during sessions | Explicit consent (GDPR Art. 9(2)(a)) | |
| Sleep Analysis and Sleep Score | Yes | Correlate sleep quality with session timing | Explicit consent (GDPR Art. 9(2)(a)) | |
| Workouts | Yes | Yes | Record and retrieve therapy sessions | Explicit consent + Contract performance |
| Workout Routes | Yes, on Apple Watch when you allow location access: a single point where the session took place (see section 3.6) | Attach where the session took place to Apple Health workouts | Explicit consent + Contract performance | |
| Active and Basal Energy | Yes | Yes, active energy may be saved during sessions | Measure session activity and energy expenditure | Explicit consent (GDPR Art. 9(2)(a)) |
| Step Count | Yes | Improve sleep onset and recovery estimates | Explicit consent (GDPR Art. 9(2)(a)) | |
| Blood Pressure | Yes | Enriched health analysis (if available) | Explicit consent (GDPR Art. 9(2)(a)) | |
| Blood Glucose | Yes | Enriched health analysis (if available) | Explicit consent (GDPR Art. 9(2)(a)) | |
| Body, Wrist, and Sleeping Wrist Temperature | Yes | Enriched temperature analysis (if available) | Explicit consent (GDPR Art. 9(2)(a)) | |
| Body Mass | Yes, on Apple Watch | Support workout energy calculations | Explicit consent (GDPR Art. 9(2)(a)) | |
| State of Mind and Wellbeing Score | Yes | Yes, State of Mind may be saved from Apple Watch guided relaxation flows | Mood and wellbeing correlation analysis (if available) | Explicit consent (GDPR Art. 9(2)(a)) |
Important: HealthKit data is stored by Apple on your device and in your personal iCloud account. SaunaTracker Pro accesses specific HealthKit data types only after you grant permission and only for the purposes described in this policy. If you enable Premium AI Coaching, the session metrics described below are transmitted to our backend and AI processor to generate coaching insights.
When you sign in with Apple (Sign in with Apple / SIWA):
We use Apple's built-in App Analytics to understand general app usage patterns (e.g., crash reports, aggregate feature usage). This data is anonymised by Apple and cannot identify individual users.
We also use TelemetryDeck, a privacy-first product-analytics service, to measure how features are used and how our onboarding and subscription flows perform. TelemetryDeck receives pseudonymous usage events (for example: an onboarding step was completed, a session was completed, the paywall was shown), using a hashed, non-reversible identifier generated on your device. It does not use the advertising identifier (IDFA), does not require an App Tracking Transparency prompt, and does not track you across other apps or websites. No health data, name, or email address is sent to TelemetryDeck. TelemetryDeck processes data in the European Union (Ireland and Germany) and the United States, under a data processing agreement.
Crash reports. From app version 1.1.5, when the app crashes, iOS creates a diagnostic report on your device (Apple's MetricKit framework). The app reduces that report on your device to a short crash signature — the top few lines of the code path that failed — and sends it, with only the app version and build number (including whether it is a test, or beta, version of the app) and the kind of failure that occurred, to our own backend in Amazon Web Services (Sydney, Australia). The full report never leaves your device. Crash reports contain no health or Apple Health (HealthKit) data, no location, and no name or email address. Crash reports are sent over your signed-in session, so they are linked to your account. We use them only to find and fix problems in the app; they are not sent to TelemetryDeck or any other third party.
Turning usage analytics and crash reports off. TelemetryDeck analytics and crash reports are on by default. To turn them off, open the App on your iPhone and go to Profile → Privacy & Opt-Ins → Usage & Crash Reports. One switch controls both, and it takes effect immediately. Your choice syncs to your other devices through iCloud; a new device follows the default until it receives your choice. Analytics events already queued on your device at the moment you turn it off may still be sent. You can turn it back on at any time.
If you allow location access for SaunaTracker in iOS and watchOS Settings, the App records where each session takes place when the session starts: precise coordinates from your iPhone or Apple Watch, and a place name. The place name is one you enter or choose from your saved places, or one looked up from the coordinates using Apple's location services (which sends the coordinates to Apple). On Apple Watch, this is one location point when the session starts, saved to Apple Health as a single-point workout route; the App does not track your movement during a session. (Versions before 1.1.5 recorded a continuous route on Apple Watch for every cold bath and cold shower session; those routes stay with their workouts in Apple Health until you delete the workouts there.)
We use this to help you identify and return to your favourite heat and cold exposure locations: to tag where each session happened, to group repeat visits to the same place, and to show your places (including opening them in Apple Maps). Location data is stored in Apple Health (as part of the workout), in the App on your devices, and in your private iCloud database for sync. It is not sent to our backend, to our AI processor, or to TelemetryDeck.
To stop location recording, turn off location access for SaunaTracker in iOS Settings (Privacy & Security → Location Services) and on your Apple Watch. Deleting a session removes its location from the App, and you can choose to delete the workout from Apple Health too. Saved places are removed when you delete your account.
Reminders made on your device. If you allow notifications, the App can show you a recovery update the morning after a session, a note that a coaching insight is ready when push notifications aren't available, a few getting-started tips in your first weeks, and reminders when you are behind your weekly goal. The App decides these on your iPhone from data already on your devices. Nothing is sent to us to create them. You can turn each kind off in Profile → Notification Settings.
Push notifications (Premium with AI features). If you are a Premium subscriber with AI features turned on and you allow notifications, we can tell you when a coaching insight or your weekly summary is ready, even when the App is closed. To do this, the App registers your iPhone with our backend and stores:
We also keep a short record of the notifications sent or shown: which kind it was, when it was decided and whether it was sent, the day it fell on in your time zone, and an identifier for what it was about (a session for a coaching insight, a week for a weekly summary, and a random identifier for a reminder your device reported). Reminders your device showed are reported to us in this way. We use this record only to avoid sending you more than one notification a day or the same notification twice.
While you are in a session on your iPhone, the App tells our backend until when to hold notifications, so that none arrives during it. We keep only that time. It stops having any effect after at most 4 hours, and is removed when the session ends or your device's registration is deleted.
If your weekly summary is ready between 21:00 and 07:00 your time, we hold it and aim to send it at about 08:00 instead. If we can't send it then (for example, you have already had a notification that day, a session is running, or you have turned weekly summaries off), we don't send it. While it is held, we keep your App installation's identifier, your account identifier, which week it is for, and when it was held and is due. We remove them once it is sent or no longer due, or automatically about 2 days after it was due.
Push notifications carry generic text, such as “Your coaching insight is ready”, and routing identifiers. They never contain your insight, health data, name or email address. Apple delivers them (see section 5.1).
How to stop it. Turn off notifications in iOS Settings or the App's Notifications switch, turn off AI features, or sign out. Each removes your device's registration from our backend. Deleting your account deletes the registration and the notification record (see section 7).
| Purpose | Lawful Basis |
|---|---|
| Provide core App functionality | Contract performance |
| Record and display your workout sessions | Contract performance |
| Access HealthKit data for session tracking | Explicit consent as gateway |
| Calculate HCEI scores from health metrics | Contract performance |
| Sync data across your devices via iCloud | Contract performance |
| Authenticate your identity | Legitimate interest (security) |
| Provide AI-powered insights (Premium subscribers) | Explicit consent |
If you are a Premium subscriber and opt in to AI features:
AI Processing Limits:
| Service | Data Shared | Purpose | Role |
|---|---|---|---|
| iCloud (CloudKit) | App data | Cross-device sync | Data Processor (app data) / Independent Controller (iCloud account) |
| HealthKit | Health metrics | Read/write health data | Platform Provider |
| Sign in with Apple | Authentication tokens | Identity verification | Identity Provider |
| App Store | Purchase status | Subscription verification | Platform Provider |
| Apple Push Notification service | Push token; generic notification text and routing identifiers (section 3.7) | Delivering push notifications | Platform Provider |
Note on Apple's Role: Apple acts as a data processor for app data stored in your iCloud private database, and independently as a controller for your iCloud account and platform services. Your iCloud data is protected by Apple's privacy practices and Data Processing Addendum.
If you opt in to AI features, session data is transmitted to our backend infrastructure and AI processor:
TelemetryDeck — pseudonymous product-analytics events (see section 3.5). Data is processed in the European Union (Ireland, Germany) and the United States under a data processing agreement. No health data, name, or email address is shared. Role: Data Processor.
| Data Type | Storage Location |
|---|---|
| HealthKit data | Your device + your iCloud; AI Coaching session metrics are separately processed as described above if you opt in |
| App data (workouts, goals) | Your device + your iCloud |
| Account credentials | Apple's systems |
| AI processing data | Our backend (AWS ap-southeast-2), stored until you delete your account. AI processing by Amazon Bedrock within AWS Australian regions — see section 5.2 |
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.3) and at rest, secure authentication via Sign in with Apple, and strict access controls on backend systems.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with applicable law (including GDPR 72-hour notification requirements and the Australian Notifiable Data Breaches scheme).
| Data Type | Retention Period |
|---|---|
| Workout records | Until you delete them |
| Account information | Until you delete your account |
| Consent records | 7 years after account deletion |
| Crash reports | Deleted automatically after 90 days; deleted sooner when you delete your account |
| Push registration (section 3.7) | Deleted automatically 60 days after the App last ran on that device; deleted sooner when you sign out, turn off notifications or AI features, or delete your account |
| Notification record (section 3.7) | Deleted automatically after 90 days; deleted sooner when you delete your account |
| Session hold time (section 3.7) | Removed when the session ends or with the push registration; it stops having any effect after at most 4 hours |
| Held weekly summary (section 3.7) | Removed when it is sent or no longer due; otherwise deleted automatically about 2 days after it was due |
| Session locations and saved places | On your devices, in Apple Health and in your private iCloud: until you delete the session (its location) or your account (saved places) |
| Research export files | Deleted automatically after 30 days; deleted or redacted sooner when you delete your account |
| AI processing data (session metrics and insights) | Kept by our backend until you delete your account. Amazon Bedrock retains nothing (zero data retention; no abuse-monitoring storage for the Claude model we use) |
You can delete your data at any time: individual workouts within the App, all App data by deleting your account in Profile settings, or HealthKit data via iOS Settings.
Regardless of your location, you have the right to:
Additional rights apply under GDPR (EEA), the Australian Privacy Act, and CCPA (California). Contact us at privacy@saunatracker.pro to exercise your rights. We will respond within the timeframes required by applicable law (generally 30 days for GDPR and Australian Privacy Act requests, 45 days for CCPA requests).
You must be at least 17 years old to use SaunaTracker Pro. We do not knowingly collect personal information from anyone under 17. If you believe we have collected information from a child under the applicable age threshold, please contact us immediately at privacy@saunatracker.pro.
Your App data synced via iCloud is transferred according to Apple's practices, supported by Apple's Data Processing Addendum and Standard Contractual Clauses (SCCs) for transfers outside the EEA.
Data you send from the App to us is collected by JDP Software Pty Ltd in Australia and processed by our AWS infrastructure in ap-southeast-2 (Sydney, Australia), including when you use AI features, receive push notifications (section 3.7), or while crash reports are on (section 3.5); AI processing runs on Amazon Bedrock within AWS Australian regions (section 5.2). Push notifications are delivered by Apple's Push Notification service under Apple's terms. Australia does not have an EU adequacy decision, so our use of AWS is covered by the AWS GDPR Data Processing Addendum, part of the AWS Service Terms, which incorporates the European Commission's Standard Contractual Clauses (Decision 2021/914) between us and AWS. We will send you a copy on request at privacy@saunatracker.pro. Product analytics are processed by TelemetryDeck in the EU and the US under its data processing agreement (section 5.4).
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you through the App. For changes that materially affect how we process your personal data, we will require your affirmative re-acknowledgment.
If you have questions about this Privacy Policy or our data practices:
Privacy Officer: JDP Software Pty Ltd
Email: privacy@saunatracker.pro
Our use of HealthKit data complies with Apple's HealthKit guidelines: we only use HealthKit data for health and fitness purposes, we do not use it for advertising, we do not share it with third parties except as described in this policy, and we obtain explicit user consent before accessing HealthKit.