Privacy Policy

Who we are

Atcek studios (ATCEK STUDIOS) is registered with the Netherlands Chamber of Commerce under KVK number 42136724. VAT identification number: NL005525248B85. Registered business address: Vendelhof 34, 3119 DM Schiedam, Netherlands. Email: [email protected].

ATCEK STUDIOS provides SUVLI and is responsible for the personal data processing described in this privacy policy. The policy explains what data the app processes, why it does so, and what rights you have under the General Data Protection Regulation (GDPR).

Our principle: your measurements stay on your devices

SUVLI is intentionally designed with privacy in mind. Your health measurements are processed on your iPhone and paired Apple Watch from Apple Health. We do not copy those measurements to our servers, and we never sell them or share them with third parties for advertising. We do not use advertising or analytics-tracking technology in the app, and we do not collect an advertising identifier or any similar tracking identifier.

A personal account is optional. Local features can be used without creating one. When a configured backend is available, the app restores an existing authentication session or requests a technical guest session if none exists. The authentication service then processes technical user/session identifiers and connection information even if you have not created a personal account. This authentication request does not include your raw Apple Health measurements and does not require you to provide a name or email. A guest session does not enable the settings backup. If a session cannot be established, local features can continue without one.

If you do create an account, we process your email address (or your Apple ID's private relay, if you sign in with Apple) and session data, and your app settings, goals and consent choices are backed up to our servers so you can restore them on another device. Your health measurements are still not included in that backup.

What data we process

a) Health and fitness data that you make available through Apple Health, such as steps, distance, calories, heart rate, heart rate variability (HRV), sleep, workouts, weight, water, mindfulness, breathing, oxygen saturation, and temperature. This data is processed on your devices to show your overviews, scores and insights, rather than uploaded to our servers.

Existing VO₂max records use a separate native read-only platform path after the app’s health-connection, consent and owner checks. Displayed fields can include the value and unit, time, source and method metadata supplied by Apple Health. This path neither creates a new measurement nor writes VO₂max records. Unavailable records are not replaced with invented values.

b) App settings you choose (goals, notification preferences, coaching style, display name, and your consent per data type). These are stored locally. If you have an account, they are also backed up to our servers so you can restore them. Sensitive profile fields (sex at birth, gender identity, menstrual and pregnancy settings, date of birth and height) are deliberately excluded from the settings backup.

c) If you create an account: your email address and session data, so we can authenticate you. You can create an account using your email address or using Sign in with Apple.

d) If you look up a food product by barcode: the barcode is sent to an external, independent product database — Open Food Facts — to retrieve nutrition information. We do not send your identity or account information with that request.

e) If you use the optional Apple Watch companion app: the Watch can read supported local health measurements and exchange a health snapshot with your paired iPhone. Some scores are calculated on the iPhone and relayed to the Watch. This does not upload those health measurements to our servers. The platform controls background measurement and delivery; a displayed value is not a promise of continuous or real-time monitoring.

For outdoor running, walking, cycling and hiking started in the Apple Watch app, location permission allows GPS points to support live movement metrics and a workout route. If both workout and route are successfully saved, the route is attached to the workout in Apple Health. Without location permission, the workout can continue without a route. The route recorder does not send GPS points to our servers.

We do not use advertising or tracking technology on your health data.

Pro purchases

Where offered in the app, Pro access consists of Monthly or Yearly auto-renewing subscriptions, or a one-time Lifetime purchase. On iPhone, purchases are processed through the Apple App Store. Android and Google Play availability will be announced separately. Lifetime is permanent Pro access without an expiry date or renewal charge; offline use, a missing refresh or 72 elapsed hours do not end it. An authoritative store refund, revocation or loss of ownership can end that access. Actual prices and any offers are shown from the store before purchase.

The store handles your payment. The app uses store purchase records and verification data, including product identifiers, purchase tokens where used and ownership/refund status, to verify and restore Pro. These are technical purchase data; we do not receive your card details or billing address through the app’s billing integration.

Legal basis and special category data

Health data is a special category of personal data under the GDPR. It is processed exclusively on the basis of your explicit consent (Article 9(2)(a) GDPR). You give this consent at two levels: in the operating system (the Apple Health permission screen) and in the app itself, for each data type. You can withdraw your consent at any time.

Withdrawing consent

In the app, you can disable consent for each data type through Profile → Privacy & data. Disabled data types will no longer be read. You can also withdraw access completely in the system settings: on iOS through Settings → Health → Data Access & Devices → SUVLI. Labels can vary with the iOS version.

Retention and deletion

Retention periods: a personal account and its settings backup are kept until you delete the account. Removal of technical guest accounts that have not been used for 30 days is being prepared and is not yet active. Support emails are deleted no later than 12 months after your request has been handled. This also covers support mail already received or still arriving at our former support address.

Your health measurements remain in Apple Health. Profile → Privacy & data → Erase data clears the app’s local health snapshot and settings; it does not delete the original platform health records or your server account. Manage original health records in Apple Health. Uninstalling is not a substitute for explicit account deletion or secure-session cleanup.

For a personal account, Profile → Account → Delete account requests deletion of the account and its server data. After server deletion succeeds, the app attempts to clear the local secure session and the deleted account’s local app data. It reports incomplete local cleanup rather than claiming everything was erased. The local reset also attempts to send a cache-clear request to the paired Watch; the iPhone confirmation does not prove that an unavailable Watch has already received and completed that request.

Deleting your account does not cancel an Apple subscription. Manage subscriptions separately through the store. See our Terms of Use and Support page.

The app can record limited technical events locally for reliability, such as a failure category or synchronization outcome. These diagnostic paths use bounded technical fields rather than raw health measurements, purchase payloads or full error messages. Some technical logging can occur without enabling optional diagnostics. The app does not automatically upload these logs to our servers.

Your rights

Under the GDPR, you have the right to access, correct, erase, restrict, and transfer your data. You can view locally available data in the dashboards and erase the local app snapshot through Privacy & data. The export action copies a readable snapshot to the clipboard; it is not an export of all original Apple Health records. If you paste or share that text, the destination you choose will receive it. Manage original health records in Apple Health. For account data and the settings backup, use the account deletion option, or email [email protected]. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

You may ask us to exercise the privacy rights that apply to your situation, including access, correction, erasure, restriction, portability and objection where applicable. You may withdraw consent at any time without affecting the lawfulness of earlier processing. We normally respond within one month; if a lawful extension is necessary, we will inform you within that first month and explain why. You can complain to the Autoriteit Persoonsgegevens. Platform settings and the local snapshot export help with some requests but do not replace your right to contact us.

Security

Your data is protected by your device's security and by Apple Health (encrypted system storage and access only with your permission). Local app data is stored in app-specific device storage; secure sign-in session information is kept separately. Your paired iPhone and Watch may exchange health data through the platform's device-connectivity services. Not uploading measurements to our servers does not mean that there is no device-to-device transfer or that security risks cannot exist.

If you have an account, account data and your settings backup travel over an encrypted connection (HTTPS) and are associated with your account and protected by backend access controls. Crash information is captured and kept only on your device — a small, fixed set of non-identifying technical fields (source, category, whether it was fatal). It is not sent to us. If reviewed remote crash reporting is ever added, we will disclose that here first, before it is enabled.

Children

SUVLI is intended only for people aged 16 and older. If you are younger than 16, do not use SUVLI. We do not knowingly collect children's data. The app does not verify your age; during setup you confirm yourself that you are 16 or older.

Changes

We may update this privacy policy, for example when we add new features. The date above shows the most recent change. We will announce important changes in the app.

Contact

Questions about your privacy or this policy? Email [email protected]. We will respond as soon as possible and no later than the legally required deadline.

Service providers, website visits and support

Supabase provides the app's account authentication (including technical guest sessions) and settings-backup infrastructure. Apple operates the platform services and App Store purchase/sign-in processes you choose to use. A barcode lookup is sent to Open Food Facts. These roles are separate from the processing of raw Apple Health measurements on your devices. When you visit this website, Cloudflare delivers and protects the site and receives technical request information, such as your IP address and the requested page. If you email support, our email service receives your address, message and any attachments so that we can answer you. Our support mailbox is a Gmail account provided by Google. Please do not send passwords, verification codes or health records in an initial support request.

Calculated wellness indications

SUVLI calculates personal wellness scores and insights from available measurements and profile information; a calculated score is not a new sensor measurement or a clinically validated diagnosis. These indications are not used to decide eligibility for employment, insurance, credit or comparable services. Missing or old inputs can limit an indication; available source and freshness context is explained in the app.