Privacy

Privacy Policy — PerformanceOS

Effective: 30 October 2026 · Version 1.1.0
Applies to: the PerformanceOS mobile app (iOS) and the website performanceos.ch

Deutsche Fassung: Datenschutzerklärung

The controller responsible for data processing under the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR) is:

Leonard Schmid
Sole proprietorship
Lucerne, Switzerland

Email: info@performanceos.ch
Web: https://performanceos.ch

For questions about data protection, please use the email address above.

• We only process personal data to the extent necessary to operate the app and provide the features you request.
• We do not sell your data.
• We do not use cross-app or cross-web tracking and do not share identifiers with advertising networks.
• Health and fitness data is not passed on to third parties, except to the processors strictly required for operation (see section 5).
• You can delete your account and the associated data completely at any time (Settings → Delete account).

We follow Apple's privacy nutrition label taxonomy. The following types of data may be processed:

3.1 Contact information

• Name — provided at registration or in your profile
• Email address — for login, password reset, account recovery and transactional system emails

3.2 Health and fitness

• Health data (via HealthKit, only with your explicit permission): steps, heart rate, heart rate variability (HRV), resting heart rate, sleep analysis, active calories, blood oxygen, respiratory rate, body temperature, menstrual cycle
• Fitness data: workouts, sets, reps, weights, duration, perceived exertion, training plans

Garmin Connect

• Garmin is optional. The connection only starts if you set it up yourself in the app under Settings → Wearables & Apps → Garmin and sign in with Garmin. At Garmin, you decide which data is shared.
• Garmin sends data from the moment you connect. Older data is not transferred.
• Data PerformanceOS receives from Garmin:
  • Daily values: steps, active calories, resting heart rate, maximum heart rate, stress, Body Battery, heart rate variability (HRV)
  • Sleep: duration, sleep stages (deep, light, REM, awake), sleep score
  • Workouts: sport type, date, duration, distance, average heart rate, calories
  • Cycle data (only if you turn on the separate “Import cycle data” switch in the app; off by default): period days and cycle length. No data on fertility or pregnancy, no predictions.
• Data PerformanceOS sends to Garmin: When you tap “Send to Garmin” in a planned endurance session, that session is sent to your Garmin account (name, sport type, steps, duration or distance, heart rate or pace range) so you can start it on your watch.
• We also store your Garmin user ID and the access token that allows PerformanceOS to retrieve the data. PerformanceOS never sees your Garmin password.

3.3 Location

• Precise location (GPS) (only with your permission, “While Using the App”): used solely during a run with the run tracker to measure distance and pace, even when the screen is locked. Outside a run, location is not used. The route is only saved in Apple Health if the “Also Save to Apple Health” switch is on. No location data is sent to our servers; we only store the date, duration and distance of the run. There is no disclosure to third parties.

3.4 User content

• Other user content: notes, goals, nutrition logs, free text entered in the AI coach (“Puls”), chat histories, calendar context (only if you allow calendar access)

3.5 Identifiers

• User ID: internal UUID used to link your data in our database
• Device ID: Apple identifier for vendor (IDFV) and push notification token, for push notifications and session binding

3.6 Purchases

• Purchase history: subscription status (Free / Pro / Elite), purchase date, expiry, renewal events. Payment data itself (credit card etc.) is processed exclusively by Apple — we never see it.

3.7 Camera (barcode)

When you use the barcode scanner, the camera is only used to read the code live. No photo is stored or sent.

3.8 Microphone / speech recognition

When you ask Puls questions by voice, the microphone is only active during recording. Speech is converted on-device via Apple Speech Recognition; audio is not stored and not sent to our servers.

Without the necessary data, the respective feature cannot be provided, or only to a limited extent. Optional permissions (HealthKit, location, calendar, camera, microphone) can be revoked at any time in the iOS settings.

Garmin data is health data. We only process it with your explicit consent (Art. 9 GDPR and under the Swiss Federal Act on Data Protection). Cycle data is particularly sensitive and is only imported with the separate “Import cycle data” switch.

Garmin data and the AI coach Puls

• Puls only uses Garmin data if you explicitly allow it: the “Puls may use this data” switch in the app under Settings → Wearables & Apps → Garmin. The switch is off by default.
• If it is on, the Garmin values needed for a response are sent to Anthropic (as described in section 5, not used for model training).
• If it is off, no Garmin values are sent to Puls or Anthropic.
• You can withdraw this permission at any time with the same switch. From then on, no more Garmin values are sent to Anthropic.
• Existing Puls chats are kept after you withdraw permission; the withdrawal applies from the moment you turn the switch off. The chat history is only stored on your device and can be removed at any time under Settings → “Delete Chat History”. You can delete entries in Puls Memory individually or all at once in Puls Memory.

We use selected external service providers that process data on our behalf. Appropriate contracts (data processing agreements) are in place with all of them.

For transfers to countries without an adequate level of data protection (in particular the USA), we rely on standard contractual clauses (SCC) and the EU-US Data Privacy Framework, where applicable.

Important regarding Anthropic: Your chats and context data are sent to the Anthropic API to generate AI responses. We have agreed with Anthropic that this data is not used for model training.

• On your device: Raw HealthKit data generally stays on your device. Only the aggregated values we need for score calculation and history are stored in our database.
• In our database (Supabase, region Zurich/Switzerland): encrypted connections (TLS 1.2+), encryption at rest, row-level security per user account.
• Garmin data: is stored at Supabase in Switzerland (region Zurich), like all other app data.
• Access control: Only you can see your data. Operator access is limited to technically necessary cases (debugging, incident response) and is logged.
• Backups: automatic encrypted backups with a limited retention period.

• Account and usage data: for as long as your account exists.
• After account deletion: personal data is deleted within 30 days. Statutory retention obligations (e.g. accounting records for subscription purchases, 10 years under the Swiss Code of Obligations) remain reserved; this data is pseudonymised and no longer linked to your profile.
• Chat history with Puls: stored locally on your device by default (cap of 200 messages). You can clear it at any time under Settings → Puls chat → “Delete chat history”.
• Backups: max. 30 days after account deletion.
• Garmin data:
  • Disconnecting Garmin in the app (Garmin → “Disconnect Garmin”): PerformanceOS deregisters the connection with Garmin and deletes the daily values, sleep data, workouts and cycle data imported from Garmin, as well as the access tokens. Your own entries remain.
  • Workouts when disconnecting: When you disconnect, the workouts imported from Garmin are deleted as well. Workouts you entered yourself remain.
  • Removing the connection in Garmin Connect: From then on, no new data arrives. If you remove the connection directly in Garmin Connect, PerformanceOS automatically deletes the data imported from Garmin as soon as Garmin reports the disconnection, just like disconnecting in the app. Your own entries remain.
  • Deleting your account: All data is deleted, and the connection is also deregistered with Garmin.
  • Turning off the cycle data switch: All cycle data imported from Garmin is deleted immediately.

As a data subject, you have the following rights:

• Access to the data stored about you
• Rectification of inaccurate data
• Erasure (“right to be forgotten”) — directly in the app under Settings → Delete account
• Restriction of processing
• Data portability (data export)
• Withdrawal of consent given (e.g. revoking HealthKit access in the iOS settings)
• Garmin: You can withdraw your consents for Garmin (connection, cycle data, use by Puls) individually in the app at any time. Access, rectification, erasure and handover of your data also apply to Garmin data, via the existing contact address.
• Complaint to the competent supervisory authority (in Switzerland: FDPIC, edoeb.admin.ch; in the EU: the data protection authority of your country of residence)

Requests: info@performanceos.ch — we respond within 30 days at the latest.

PerformanceOS does not use any SDK for advertising networks, no cross-app tracking and no Meta, Google or TikTok pixel. For this reason, the app does not request App Tracking Transparency (ATT) permission. All identifiers listed in section 3 are used solely to operate the app and are not shared with data brokers or advertising partners.

According to the Terms and Conditions, the app may only be used from the age of 16. Users between 16 and 18 require the consent of their legal guardians (see Terms §3). We do not knowingly collect data from persons under 16. If you become aware that a child has submitted data, please inform us immediately.

The website performanceos.ch only uses technically necessary cookies (session handling). No analytics, marketing or tracking cookies are set. For this reason, there is no cookie consent banner.

We reserve the right to amend this privacy policy if app features, service providers or legal requirements change. The current version is available at performanceos.ch/en/privacy (English) and performanceos.ch/datenschutz (German), and in the app under Settings → Privacy. We will inform you in the app of any material changes.

Questions, access requests, complaints:

Leonard Schmid
Email: info@performanceos.ch
Web: https://performanceos.ch