Privacy Policy

Effective September 29, 2026

Who we are

Heartrek (“we”, “us”) is a heart-rate-powered fitness game made up of watch apps (WearOS and WatchOS), phone apps (Android and iOS), and a web app at heartrek.redshoesapps.com. This policy covers all three. It's operated by Redshoes Apps. You can reach us at redshoes.apps@gmail.com.

What we collect and why

Stored only on your watch

When you set up the watch app, you enter your age, weight, weight unit, maximum heart rate, and gender. The app also creates a random device ID and receives a 6-digit pairing code. These are saved on your watch so you don't have to re-enter them.

Sent to our server during a workout

While a workout is running, the watch app sends the following to our server about once per second:

• Your heart rate, read from your watch's heart rate sensor
• Your random device ID
• The time your workout started and the time of each reading
• Your age, weight, weight unit, maximum heart rate, and gender

We use your heart rate to move your character through the game world. We use your age, weight, gender, and maximum heart rate only to estimate calories burned and your heart rate zone. The server does not store your age, weight, gender, or maximum heart rate. It uses them for the calculation and then discards them.

From these readings the server calculates your speed, distance, laps, calories burned, intensity, and heart rate zone.

Pairing

When the watch app is first installed, our server creates a 6-digit pairing code linked to your device ID. Entering that code in the phone app or web app tells it which device ID is yours, so it can show your stats and follow your character. We keep the link between the code and the device ID so you can pair again later.

Stored in the phone app and web app

The phone app and web app save your paired device ID and a few app preferences (for example, whether you've finished onboarding and your interval length) in local storage on your phone or browser. This data stays on your device.

Subscriptions

Heartrek Premium is sold through Google Play. Google handles the payment, and we never receive your card or payment details. Our apps ask Google Play whether your Google account has an active subscription so they can unlock pairing and the game. Google's handling of your purchase is covered by Google's Privacy Policy.

Technical data

Like any website, our server and hosting provider receive your IP address and basic connection information when your devices connect. Our server logs record some events, such as a device ID completing a lap. The web app and website load an icon font from jsDelivr (a public content delivery network), which also receives your IP address when the font is downloaded.

What we don't collect

• Your name, email address, or phone number
• Your location or GPS data
• Your contacts, photos, or files
• Advertising identifiers. Heartrek contains no ads and no third-party analytics or tracking.

Who can see your data

Heartrek is a shared multiplayer world. While you're working out, your live workout stats are sent to everyone currently connected to Heartrek so your character can appear in their game. These stats include your heart rate, calories burned, intensity, heart rate zone, speed, distance, laps, and workout start time, linked to your random device ID.

Your name is never attached, because we never have it. Your age, weight, gender, and maximum heart rate are not shared with other users. The app only displays other players as characters on the trail, but someone using technical tools could read the stats above from the data their device receives.

If you don't want your live stats visible to others, don't start a workout on the watch app.

Sharing with third parties

We don't sell, rent, or trade your personal data. The only third parties involved are:

• Google Play, which handles app downloads, subscriptions, and payments
• Our hosting provider, which runs our server
• jsDelivr, which serves an icon font as described above

We never use your heart rate or other health data for advertising or marketing, and we never share it with data brokers. We may disclose information if required by law.

How long we keep it

• Live workout data is held in server memory only. It's removed when you end your workout, or about 15 seconds after your watch stops sending heart rate. It is not saved to a database, and we don't keep a history of your workouts.
• Age, weight, gender, and maximum heart rate are not stored on the server at all.
• Pairing codes and their linked device IDs are kept so you can pair again. We'll delete yours on request.
• Server logs are kept for a limited time for troubleshooting.
• Data on your devices stays until you clear it or uninstall the app.

Your choices and rights

• Stop sharing: stop the workout on your watch or end it in the app. Your live data is removed from the server within about 15 seconds.
• Delete data on your devices: uninstall the apps or clear their data. Uninstalling the watch app deletes your device ID, pairing code, and settings from the watch.
• Delete your pairing record: email us your 6-digit pairing code (shown in the watch app) and we'll delete it from our server.
• Heart rate permission: you can withdraw the watch app's permission to read your heart rate at any time in your watch settings. The app can't run a workout without it.

Depending on where you live (for example, in the EU, the UK, or California), you may have rights to access, correct, delete, or port your personal data, to object to or restrict its use, and to withdraw consent. Because we don't know who you are, we may need your pairing code or device ID to find your data. Contact us at redshoes.apps@gmail.com to make a request. You can also complain to your local data protection authority.

We process your heart rate and related health data based on your consent, which you give by granting the heart rate permission and starting a workout.

Children

Heartrek is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has used Heartrek, contact us and we'll delete any related data we can identify.

Security

All communication between the apps and our server is encrypted with HTTPS. No system is perfectly secure, but we keep the data we hold to a minimum, and live workout data exists only for the duration of your workout.

International users

Our server may be located outside your country, including in the United States. By using Heartrek you understand your data will be processed there as described in this policy.

Not medical advice

Heartrek is a game and fitness tool, not a medical device. Heart rate, calorie, and zone figures are estimates and shouldn't be used for medical decisions.

Changes to this policy

We'll update this page if Heartrek's data practices change and revise the effective date above. For significant changes, we'll also let you know in the app.

Contact

Questions or requests: redshoes.apps@gmail.com