Privacy

Privacy Policy

Last updated: July 26, 2026

This policy explains what OxyScore ("we", "us", the "app") does — and, more importantly, does not do — with your information. It applies to the OxyScore iPhone and Apple Watch apps.

1. Who we are

OxyScore is published by Kirill Pustovalov, publishing as OxyScore (oxyscore.fit) ("we"), at 20619 Torrence Chapel Rd, Suite 116 #1257, Cornelius, NC 28031, United States. You can reach us at support@oxyscore.fit.

2. Health & fitness data we read

With your explicit permission (granted through Apple's Health permission screen, and revocable at any time), OxyScore reads the following from Apple Health to calculate and display your results:

• Cardio fitness (VO2max) estimates
• Heart rate, resting heart rate, heart rate variability (HRV/SDNN), and heart-rate recovery
• Workouts and related samples (e.g. distance, active energy)
• Daily step counts (for the weekly activity comparison against published step-count research)
• Body weight (the Rockport walk test cannot produce a VO2max without it)
• Date of birth and biological sex (used to compute fitness age and population percentiles)

Two clarifications about body measurements: your weight is read from Apple Health when a reading exists there, and the app also lets you type it in yourself — the typed value is used only as a fallback when Health has none. Your height is never read from Apple Health; it is only ever a number you type into the app, it is optional, and the app uses it for nothing but BMI.

All of this is processed entirely on your device to produce your fitness age, VO2max trend, mortality-risk context, heart-health signals, training zones, and coaching. It is not sent anywhere.

3. Health data we write back to Apple Health

When you complete a training or test session, OxyScore saves that workout to Apple Health so it counts toward your Activity rings and appears in the Fitness app. This data stays within Apple Health on your device and syncs only through your own iCloud, under Apple's control — not ours.

OxyScore also writes one VO2max reading to Apple Health when it has actually measured one: after you complete a Cooper test, a Rockport walk test, or the Indoor Max Effort test, and after a guided interval session that genuinely drove your heart rate near your maximum. Each of these samples is saved as a new reading tagged as OxyScore's own, so it stays distinguishable from Apple's automatic estimates; the app never edits, replaces, or deletes anything Apple or another app wrote. You can see and remove these samples in the Health app, and you can decline the write permission on the Health permission screen — the app still works, it just won't record your measured number back to Health.

4. On-device AI

OxyScore's written insights (your weekly plan narration, per-session longevity read, and coaching notes) are generated by Apple's on-device foundation models. This processing happens locally on your device. Your data is not sent to us or to any third-party AI service to produce these insights.

5. What we store, and where

• Your profile (date of birth, sex, optional height/weight and heart-rate settings) is stored locally on your device using Apple's on-device database (SwiftData).
• App preferences and progress markers (unit choice, celebration state, streak data) are stored in local device storage (UserDefaults and a private App Group shared between the OxyScore app, its Apple Watch app, and its widgets).
• iCloud backup of progress markers. A small, fixed set of progress markers is backed up through Apple's iCloud key-value storage, tied to your personal Apple ID: your weekly-goal streak and grace weeks, the weekly goals your history was judged against, your unit preference, and a few "already shown you this" markers that stop the app repeating a monthly report or a review prompt. No health data is included — not your VO2max, heart-rate figures, date of birth, sex, height or weight, and not your achievements or training level, which contain fitness classifications and are rebuilt from Apple Health on a new device instead. This lives in your iCloud under Apple's control; we operate no server and cannot read it. It requires you to be signed in to iCloud; the app's Profile tab shows whether it is on. You can remove this backup at any time with "Delete progress backup" there.

None of this is stored on an OxyScore server, because OxyScore has no server.

6. What we do NOT do

• We do not upload, transmit, or back up your health data to any OxyScore server (there is none).
• We do not sell or rent your data to anyone.
• We do not share your data with advertisers, data brokers, or analytics companies.
• We do not use your Health data for advertising or marketing, and we do not use it to build profiles about you — consistent with Apple's HealthKit requirements.
• In this version of the app, we include no third-party analytics, tracking, or advertising SDKs. If that ever changes, we will update this policy and the App Store privacy label before shipping it.

7. Apple services we rely on

OxyScore uses these Apple services, each governed by Apple's own privacy policy:

• App Store & StoreKit — to sell and manage your subscription. Apple processes your payment; we never see your payment details.
• Apple Health (HealthKit) — the source of your fitness data, under the permissions you grant.

Game Center is not used in this version. The improvement-based leaderboard it was intended for is not enabled: the app never asks you to sign in to Game Center, and nothing — no score, no achievement — is sent there. If a later version turns it on, we will update this policy and the App Store privacy label before shipping it, because a leaderboard score derived from your VO2max would leave your device.

8. Notifications

OxyScore does not send notifications of any kind. There are no push notifications (we have no server that could send them) and no local notifications, so the app never asks for notification permission.

9. Your controls and rights

• Revoke health access at any time in the Apple Health app (Sharing → Apps → OxyScore), or in iOS Settings → Privacy & Security → Health.
• Delete everything by deleting the app: all OxyScore data stored on your device is removed. Some copies live outside the app and are under your control: data you wrote to Apple Health remains in Health until you remove it there; the optional iCloud progress-marker backup (Section 5) remains in your iCloud until you remove it with "Delete progress backup" in the Profile tab (do this before deleting the app) or by clearing the app's iCloud data in your device's iCloud settings; and any PDF report or share image you exported or sent somewhere — Files, Photos, a message, another app — stays where you put it until you delete it there. We never see any of these.

Because your data lives on your device and not with us, requests to "access, export, or delete my data" are satisfied directly by the controls above — we hold no copy to retrieve or erase.

10. GDPR (EU/UK) and CCPA/CPRA (California)

Health data is a special category of personal data under the GDPR and sensitive personal information under California law. OxyScore is designed so that this data stays on your device under your control; we do not collect, receive, or process it as a data controller or business, and we do not sell or "share" it as those laws define. The rights those laws provide (access, deletion, portability, opt-out of sale) are met by the on-device controls in Section 9. If you have questions about your rights, contact support@oxyscore.fit.

You also have the right to lodge a complaint with your local data-protection supervisory authority — in the EU, the authority in your country of residence, work, or where you believe an infringement occurred; in the UK, the Information Commissioner's Office. Because the app holds no personal data on our side, we operate no retention schedule for it; the only personal data we retain at all is support correspondence, covered in Section 11. We do not use automated decision-making producing legal or similarly significant effects, and we do not transfer personal data internationally, because we receive none to transfer.

11. When you contact us

If you email support@oxyscore.fit, we receive your email address, your message, and anything you choose to attach (for example a screenshot). This is the only personal data we ever receive directly, and we use it only to answer you. Our legal basis is our legitimate interest in providing support (GDPR Art. 6(1)(f)); if you send us health information in your message, we rely on your explicit consent for it (Art. 9(2)(a)) and you should send no more than you need to. Mail is handled by our email provider on our behalf. We keep support correspondence for up to 24 months and then delete it. You can ask us to delete it sooner at any time.

12. Age requirement

OxyScore is designed for adults. It is not directed to anyone under 18, the app asks for your date of birth and does not let anyone under 18 proceed, and we do not knowingly collect data from anyone under 18. See our Terms of Use for the full age requirement.

13. Data security

Your data benefits from the security of your device and Apple's platform protections (device encryption, HealthKit's access controls, and the app sandbox). Because we do not transmit or store your health data off-device, there is no OxyScore database that could be breached.

14. Changes to this policy

If we change this policy, we will update the date above and, for material changes, note it in the app or on this page. Continued use after an update means you accept the revised policy.

15. Contact

Questions about privacy? Email support@oxyscore.fit.

---

This document is provided for transparency and is not legal advice. See also our Terms of Use.