Privacy policy

Alberto von Hellens, HRV.today. Contact in privacy matters: hrv.today/contact.

• Account data: email address, password (hashed), optional name.
• Measurement data: R-R intervals, heart rate, HRV metrics (RMSSD, SDNN, LF/HF), measurement time and device name.
• Coaching links: connection between a coach and a client, when the user accepts it.
• Technical log data: IP address, browser/app version, error logs.

HRV and R-R data may be regarded as health-related data and is therefore processed with particular care.

• Providing the measurement, analysis and report features.
• Producing personal recovery and training recommendations.
• User account management and customer support.
• Security, abuse prevention and troubleshooting.

• Performance of a contract (GDPR 6(1)(b)) – providing the service.
• Explicit consent (GDPR 9(2)(a)) – processing of health-related HRV data.
• Legitimate interest (GDPR 6(1)(f)) – security and service development.

Data is retained while the account is active. When you delete your account, measurement data and profile data are deleted permanently. Backups and technical logs may be retained for a short period for security reasons.

Data is not sold. Data is processed by service providers acting as processors on our behalf: cloud hosting and database provider, e-mail delivery provider, and the app distribution platform (Google Play). Data may be disclosed to authorities when required by law.

If you accept a coaching invitation, the coach you selected can see the measurements made in the coaching relationship.

Service providers may process data outside the EU/EEA. In that case transfers are based on the European Commission's standard contractual clauses or another lawful transfer mechanism.

• Right of access to your data and to receive a copy.
• Right to rectification and erasure.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Data Protection Ombudsman.

You can export or delete your data yourself in Settings.

Only technically necessary storage is used: the sign-in session and the language selection. No advertising or tracking cookies are used.

All connections use HTTPS. Database access is protected with row-level security so that a user can only access their own measurements. Passwords are never stored in plain text and are not stored on the device.

HRV.today provides measurements and recommendations to support wellbeing, recovery and training. The service is not intended for diagnosing disease or for medical decision-making.