Privacy Policy.

StellarVO2Max is operated by Garage Projects AB, a private company registered in Sweden ("we," "our," or "the app"). We respect your privacy.

This Privacy Policy explains what information is collected when you use the app, how it is used, and who it is shared with.

We are committed to protecting your data and being transparent about how we handle it.

StellarVO2Max requires a user account to sign in.

Depending on your chosen sign-in method, we collect basic account information such as your email address to create and manage your account.

If you sign in using a third-party service (such as Sign in with Apple), only the information necessary to authenticate your account is shared with us, in accordance with Apple's privacy policies.

While using the app, we collect and store the fitness-related information you choose to record — such as workout entries, VO₂ max readings, and notes — together with the account identifier needed to associate that data with your account.

We do not collect sensitive personal information beyond what you choose to record yourself, and we do not sell any of your data to third parties.

StellarVO2Max integrates with Apple Health (HealthKit) to provide its core functionality. The app only accesses HealthKit data after you grant explicit permission, and you control which data types are shared.

With your permission, the app may read fitness and cardiovascular metrics from HealthKit — including, where applicable, workouts, heart rate, resting heart rate, heart rate variability, VO₂ max, and related activity metrics — in order to display, calculate, and analyze your fitness data within the app. The app may also write certain results (such as VO₂ max estimates) back to HealthKit when you ask it to.

Where HealthKit-derived data is associated with a record you save in the app, that record is stored on our backend as described in "How your data is stored". HealthKit data that is only used transiently to render information in the app is not retained on our servers.

In accordance with Apple's requirements:

• We do not use information obtained through HealthKit for advertising, marketing, recommendations to other users, or any data-mining purpose other than helping you manage your health, fitness, and training.
• We do not share HealthKit-derived data with third parties without your authorization, beyond the service providers strictly necessary to operate the app and described in this policy.
• We do not store HealthKit-derived data in iCloud.

You can review and revoke HealthKit permissions at any time in the iOS Settings app, under Privacy & Security → Health → StellarVO2Max.

Your account information and the data you record in the app are stored on our backend, which is provided by Supabase(Supabase, Inc.). Supabase hosts our database and authentication services on our behalf, and our project is hosted in Supabase's EU region.

Data transmitted between the app and our backend is encrypted in transit. Supabase processes data as our data sub-processor, under contractual terms that require appropriate security and confidentiality.

You can read more about how Supabase handles data at supabase.com/privacy.

We use the following third-party services to operate and improve the app:

• Supabase — backend database and authentication, used to store your account and the data you record in the app. Hosted in the EU. See Supabase's privacy policy.
• PostHog — product analytics, used to understand how the app is used so we can improve it. PostHog may receive pseudonymous identifiers, event data (such as which screens you view and which features you use), and basic device and app metadata. We do not use PostHog for advertising, and HealthKit-derived data is not sent to PostHog. See PostHog's privacy policy.
• Apple TestFlight (beta only) — if you are using the beta version of the app, Apple may collect anonymous crash reports and usage statistics in accordance with their Privacy Policy.

We do not use advertising frameworks and we do not allow third parties to use your data for their own marketing.

Our primary backend (Supabase) is hosted in the EU. Some of the third-party services we use — for example, PostHog — may process limited data outside the EU/EEA. Where such transfers take place, we rely on the legal mechanisms provided by these providers (such as Standard Contractual Clauses) to ensure your data continues to be protected.

You can delete your account and all associated data at any time from within the app, or by contacting us at [email protected]. When you delete your account, the data we store about you on our backend is removed.

Subject to applicable law (including the EU GDPR), you have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to data portability. You also have the right to lodge a complaint with your local data protection authority — in Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

To exercise any of these rights, contact us at [email protected].

StellarVO2Max is intended for general audiences and does not knowingly collect any information from children under 13 years of age.

We may update this Privacy Policy from time to time.

Any changes will be reflected on this page with an updated "Last updated" date.

If you have any questions or concerns about this Privacy Policy, please contact us at:

Garage Projects AB · Sweden