Privacy Policy

1. Who we are

Taqvo is an iPhone fitness-tracking app published by an independent developer based in the Philippines, trading as Taqvo. For the purposes of data-protection law, the developer is the data controller for the personal data described here.

You can reach us about anything in this policy at support@taqvo.app. This policy covers the Taqvo iPhone app and the taqvo.app website.

2. Using Taqvo without an account

You can track workouts as a guest. In guest mode your workouts stay on your device, we do not create an account for you, and nothing is uploaded to our servers. If you later sign in, the app can sync your history to your account.

3. What we collect and why

Account and profile

• Email address, and a securely hashed password if you sign up that way — to create and secure your account.
• Sign in with Apple or Google identifiers, if you use them, to authenticate you. With Sign in with Apple you can hide your real address; we then receive only Apple's private relay address. If you sign in with Apple we also store a token that lets us revoke that sign-in when you delete your account.
• Profile details you enter: display name, username, optional bio, city, units, weekly goal, and optional profile and cover photos.

Location

• Taqvo requests location access while you are using the app. Precise location is recorded only while a workout is running, so we can draw your route and calculate distance, pace, and elevation.
• Recording continues while the app is in the background or your phone is locked during an active workout, so tracking is not interrupted. It stops when the workout ends.
• Your route is stored on your device and, if you are signed in, saved to your account as an encoded path with its bounding coordinates.
• We ask for this permission before collecting anything. If you decline, Taqvo still works — you can time workouts, record duration and steps, and import workouts recorded by another device; you simply will not get a map or GPS-based distance.

Workout details

• Duration, distance, pace, elevation, estimated calories, step count, cadence, splits, a weather snapshot, and any title, notes, tags, gear, or photos you add.
• These are private to your account unless you share them through the features below.

Apple Health

• With your permission Taqvo reads your heart rate and body mass, and — when you import workouts recorded by another device such as a watch — those workouts and their routes, heart rate, distance, and energy.
• With your permission Taqvo writes your completed workouts, distance, and active energy back to Apple Health.
• Some health data is saved to your account, not only your device. When you are signed in, heart-rate figures recorded with a workout (average, maximum, zones, and the sampled series) are stored with that workout. If you use the training-readiness feature, resting heart rate, heart-rate variability, sleep duration, and VO₂ max read from Apple Health are also stored in your account.
• Health data is never used for advertising or marketing, never used for use-based data mining, never sold, and never shared with third parties for their own purposes.
• Taqvo does not store health data in iCloud.

Contacts

• If you choose Beacon recipients or look for friends, Taqvo reads your contacts on your device. Your address book is not uploaded.
• To suggest people you may already know, Taqvo can send irreversibly hashed email addresses (SHA-256) rather than the addresses themselves.
• When you start a Beacon, the names of the recipients you picked are stored with that Beacon so the app can show you who it went to. Their phone numbers and email addresses are not.

Beacon (live location sharing)

• Starting a Beacon creates a web link with a randomly generated code. Anyone holding that link can see the workout in progress — the live position, accuracy, phone battery level, and the route so far — without an app or an account. That is the point of the feature, so share the link only with people you trust.
• The link stops working when the Beacon ends, and in any case expires automatically. Taqvo sends it from your own device using your messaging app; we do not send messages on your behalf.
• The location points recorded during a Beacon are kept in your account. They are removed when you delete your account.

Sharing, community, and Together

• If you post a workout, comment, give kudos, follow someone, or share a recap, that content is visible to others according to your privacy settings. Blocks and reports you submit are stored so we can act on them.
• Together — planning a workout with one other person and comparing results afterwards — is part of Taqvo Pro. When you use it we store the invitation, the schedule, messages you send in it, and the results the two of you compare.

Photos and music

• With your permission, the camera and photo library are used so you can set a profile photo and save a workout image. Photos you attach to a workout are stored in your account.
• With your permission, Taqvo can control music already playing on your device (Apple Music or Spotify) during a workout. We do not collect your listening history.

Notifications

• If you allow notifications, we store your device's push token so Apple can deliver them — for example when a Together partner finishes their workout.

Diagnostics

• We use Sentry to capture crashes and errors, so we can fix them. These reports contain technical details such as device model, OS version, app version, and the error itself. They are configured not to include personal information, and are not used to identify or profile you.

The taqvo.app website

• If you join the early-access list, we store the email address you enter so we can tell you when Taqvo is available. We do not add you to a marketing list and we do not sell or rent these details.

4. Consent and permissions

Every sensitive permission — location, Apple Health, contacts, photos, motion, music, and notifications — is requested separately, before the data is collected, and only ever with your agreement. Apple Health data is processed only on your explicit consent.

You can withdraw any permission at any time in iOS Settings, and you can turn off sharing features inside Taqvo. Withdrawing consent stops the collection from that point on; it does not undo processing that already happened lawfully. Taqvo's core tracking is free, and no paid functionality is conditioned on granting access to your data.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. What we never do

• We do not sell or rent your personal data, and we do not share it for cross-context behavioural advertising.
• We do not show third-party ads in Taqvo.
• We do not track you across other companies' apps or websites, and Taqvo contains no advertising or tracking SDKs.
• We do not use your health or location data for marketing.

6. How this maps to Apple's privacy labels

Using Apple's own categories, this is what Taqvo collects. "Linked to you" means it is associated with your account.

• Contact Info (email address) — linked to you.
• Health & Fitness (workouts, heart rate, and the trend figures described above) — linked to you.
• Location (precise, during a workout) — linked to you.
• Contacts (hashed email addresses for matching; chosen Beacon recipient names) — linked to you.
• User Content (photos, notes, posts, comments, messages) — linked to you.
• Identifiers (account ID, push token) — linked to you.
• Diagnostics (crash and error reports) — not linked to you.

None of this data is used to track you. We do not link it with data from third parties for advertising or measurement, and we do not share it with data brokers, so Taqvo does not ask for permission to track.

7. Our legal bases (EEA and UK users)

Where the UK GDPR or EU GDPR applies, we rely on the following bases:

• Performance of a contract — running your account and delivering the features you ask for, such as recording a workout or syncing your history.
• Consent — location, Apple Health, contacts, photos, motion, music, and notifications. Each is requested separately and you can withdraw any of them at any time in iOS Settings. Health data is processed only on your explicit consent.
• Legitimate interests — keeping the app stable and secure, preventing abuse, and handling reports. We balance these against your rights.
• Legal obligation — where the law requires us to keep or disclose something.

8. Who we share data with

We share data only with the providers that make the app work, and only so they can provide their service to us:

• Supabase — database, authentication, and file storage for your account, profile, workouts, and photos.
• Apple — Sign in with Apple, Apple Health on your device, push delivery, and WeatherKit for a workout's weather snapshot.
• Google — Google Sign-In, if you choose it.
• Spotify — only if you connect it for playback control.
• Sentry — crash and error diagnostics.

These providers act on our instructions under written terms, and we confirm that each is required to provide the same or equal protection of your data as this policy states. They may not use your data for their own purposes. Taqvo contains no advertising networks and no third-party analytics SDKs.

We may also disclose data if the law requires it, or to protect someone's safety or our rights. If Taqvo is ever transferred to someone else, we will tell you before your data moves.

9. Where your data is held

Our backend is hosted by Supabase and your data is stored on servers in the United States. Our diagnostics provider may also process data outside your country. Where data leaves the EEA, UK, or the Philippines, we rely on our providers' standard contractual clauses and equivalent safeguards.

10. How long we keep things

• Account, profile, and workouts — until you delete them or delete your account.
• Beacon links — a link stops working when the Beacon ends or expires. The position history recorded during it stays in your account until you delete your account.
• Diagnostics — retained by Sentry on a rolling window, then deleted.
• Early-access submissions — until Taqvo is available or you ask us to remove you.

11. Your rights and choices

You can do the most important things yourself, in the app:

• Export your data — Settings, then the data and privacy section.
• Delete your account — Settings, then the data and privacy section. This removes your authentication record, profile, workouts, Beacon history, social activity, settings, and stored photos.
• Change permissions — location, Health, contacts, photos, motion, music, and notifications can all be changed in iOS Settings at any time.
• Privacy settings — control who can see your profile, routes, stats, and activity, and who may invite or follow you.

Under the Philippine Data Privacy Act of 2012 you have the rights to be informed, to access, to object, to erasure or blocking, to damages, to rectification, and to data portability, and you may complain to the National Privacy Commission.

Under the EU or UK GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may complain to your local supervisory authority.

Under the California Consumer Privacy Act you have the rights to know, delete, and correct the personal information we hold, and to not be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA, so we do not offer a "Do Not Sell or Share My Personal Information" link. In the past twelve months we have collected the categories described in section 3: identifiers, contact information, health and fitness data, precise geolocation, photos and user content, and diagnostic data.

To exercise any right we cannot handle in the app, email support@taqvo.app. We will respond within the period the applicable law allows, and we may need to verify who you are first.

12. Security

Data in transit is encrypted with HTTPS/TLS. Our database uses row-level security so an account can only reach its own records, and Beacon links use randomly generated codes that are impractical to guess. No system is perfectly secure, but we work to protect your information.

If a breach affects your personal data, we will notify you and the National Privacy Commission within 72 hours of knowing about it, as the Data Privacy Act requires, and we will notify other regulators where their law applies.

13. Children

Taqvo is not intended for children under 13, or under the minimum age of digital consent where you live if that age is higher. We do not knowingly collect personal data from them. If you believe a child has given us personal data, email support@taqvo.app and we will delete it.

14. Changes to this policy

We may update this policy. The date at the top always shows the current version, and we will tell you in the app about changes that matter.

15. Contact

Questions, requests, or complaints: support@taqvo.app.