Privacy Policy

1. Scope

This policy explains how personal data are processed in the HypoxiaLiveVenom application, Apple Watch app, public website, support service and future private portal. The beta is intended exclusively for invited adults.

2. Data we process

Identification and contact details; sports profile; team membership; sessions and protocols; heart rate and RR intervals; HRV, SDNN and RMSSD; SpO₂; sleep and sleep stages; recovery; signal source and quality; consents, exports and access logs.

3. Sources

Data come from the user, an authorised professional, Bluetooth sensors, Apple Watch, Apple Health/HealthKit, and applications or devices the user has authorised to write data to Health.

4. Purposes and legal basis

We process data to manage access; record and analyse training, recovery and adaptation; generate reports; provide support; and maintain security. Ordinary data are processed to provide the service. Health data, team linking and research require specific, explicit and withdrawable consent.

5. HealthKit and health data

We do not sell health data, display advertising based on them or use them for marketing. HealthKit data are not stored in iCloud. We access only categories authorised by the user, who may revoke permissions in Apple Health.

6. Recipients

Access is limited to the user, expressly authorised professionals and essential technical providers bound by confidentiality, minimisation and contractual safeguards. Identifiable data are not shared with other teams, sponsors, insurers or advertisers.

7. Research

Research is optional and separate from sports use. Analyses use pseudonymised data, and publications contain aggregated or anonymised results. Names, email addresses, photographs, teams and direct identifiers are not published.

8. Retention

During the beta, data remain primarily on the device and in exports made voluntarily. Before the portal is activated, retention periods will be defined by category, with deletion when the purpose ends and limited retention for security, legal obligations or the defence of claims.

9. Location and transfers

The public website does not store physiological metrics. Before synchronisation is enabled, European infrastructure will be selected and the location, processors and safeguards for any international transfer will be documented.

10. Your rights

You may request access, correction, deletion, restriction, objection, portability and withdrawal of consent by writing to privacy@hypoxialivevenom.com. You may also complain to the competent data-protection authority.

11. Security

We apply data minimisation, role-based access, encryption in transit, logical separation by team, access logging and periodic review. No system can eliminate all risk; incidents will be communicated where legally required.

12. Changes

Material changes will be versioned and, when they affect consent, will require renewed acceptance in the app.

13. Controller legal information