Privacy Policy

1. Who we are

Taqvo is an iPhone fitness-tracking app published by an independent developer based in the Philippines, trading as Taqvo. For the purposes of data-protection law, the developer is the data controller for the personal data described here.

You can reach us about anything in this policy at support@taqvo.app. This policy covers the Taqvo iPhone app and the taqvo.app website.

2. Using Taqvo without an account

You can track workouts as a guest. In guest mode your workouts stay on your device, we do not create an account for you, and nothing is uploaded to our servers. If you later sign in, the app can sync your history to your account.

3. What we collect and why

Account and profile

• Email address, and a securely hashed password if you sign up that way — to create and secure your account.
• Sign in with Apple or Google identifiers, if you use them, to authenticate you. With Sign in with Apple you can hide your real address; we then receive only Apple's private relay address. When Apple token exchange succeeds, we store a token used to revoke that sign-in when you delete your account. If automatic revocation is unavailable, the app explains how to remove Taqvo from your Apple Account after deletion.
• Profile details you enter: display name, username, optional bio, city, units, weekly goal, and optional profile and cover photos.

Location

• Taqvo requests location access while you are using the app. Precise location is recorded only while a workout is running, so we can draw your route and calculate distance, pace, and elevation.
• Recording continues while the app is in the background or your phone is locked during an active workout, so tracking is not interrupted. It stops when the workout ends.
• Your route is stored on your device and, if you are signed in, saved to your account as an encoded path with its bounding coordinates.
• We ask for this permission before collecting anything. If you decline, Taqvo still works — you can time workouts, record duration and steps, and import workouts recorded by another device; you simply will not get a map or GPS-based distance.

Workout details

• Duration, distance, pace, elevation, estimated calories, step count, cadence, splits, a weather snapshot, and any title, notes, tags, gear, or photos you add.
• These are private to your account unless you share them through the features below.

Apple Health

• With your permission Taqvo reads your heart rate and body mass, and — when you import workouts recorded by another device such as a watch — those workouts and their routes, heart rate, distance, and energy.
• With your permission Taqvo writes your completed workouts, distance, and active energy back to Apple Health.
• Some health data is saved to your account, not only your device. When you are signed in, heart-rate figures recorded with a workout (average, maximum, zones, and the sampled series) are stored with that workout. If you use the training-readiness feature, resting heart rate, heart-rate variability, sleep duration, and VO₂ max read from Apple Health are also stored in your account.
• Health data is never used for advertising or marketing, never used for use-based data mining, never sold, and never shared with third parties for their own purposes.
• Taqvo does not store health data in iCloud.

Heart-rate monitors and watches (Bluetooth)

• With your Bluetooth permission, Taqvo can connect to a heart-rate monitor you pair — a chest strap, or a watch such as Garmin, COROS, Polar, or Suunto with heart-rate broadcast turned on — to show your live heart rate during workouts. We ask for this permission only when you search for a device.
• Taqvo only reads heart rate from the device. It does not read other data from it or send anything to it.
• Heart rate from a monitor or watch is handled exactly like heart rate from Apple Health: it is recorded with your workout and, when you are signed in, stored with that workout as described above. It is not written to Apple Health.
• The paired device's name and Bluetooth identifier are kept only on your phone and are not uploaded to our servers. You can forget the device at any time in Settings → Connected apps → Heart rate monitor; deleting local data or your account also removes it.
• If you decline, Taqvo still works — you just will not get live heart rate from an external monitor.

Contacts

• If you choose Beacon recipients or look for friends, Taqvo reads your contacts on your device. Your address book is not uploaded.
• To suggest people you may already know, Taqvo can send hashed email addresses (SHA-256) rather than the addresses themselves. These hashes are used for matching and are not anonymous data.
• When you start a Beacon, the names of the recipients you picked are stored with that Beacon so the app can show you who it went to. Their phone numbers and email addresses are not.

Beacon (live location sharing)

• Starting a Beacon creates a web link with a randomly generated code. Anyone holding that link can see the workout in progress — the live position, accuracy, phone battery level, and the route so far — without an app or an account. These are exact locations, including start and end points; community route-privacy settings do not trim Beacon locations. Share the link only with people you trust.
• The link stops working when the server receives the Beacon end request, normally one minute after your workout finishes. Ending a Beacon requires an internet connection; if that request cannot be sent, the link remains available until its automatic expiry (at most 24 hours from creation). Taqvo sends it from your own device using your messaging app; we do not send messages on your behalf.
• The location points recorded during a Beacon are kept in your account. They are removed when you delete your account.

Sharing, community, and Together

• If you post a workout, comment, give kudos, follow someone, or share a recap, that content is visible to others according to your privacy settings. Blocks and reports you submit are stored so we can act on them.
• Together — planning a workout with one other person and comparing results afterwards — is part of Taqvo Pro. When you use it we store the invitation, the schedule, messages you send in it, and the results the two of you compare.
• While a Together workout is running, your elapsed time, distance, pace, heart rate (when available from Apple Health or a paired heart-rate monitor), and current position are shared live with your partner. We keep only your latest update for that session, not a history of updates.

Community safety and content review

We check profile details, profile and cover photos, Community posts and comments, Together messages, and notes or labels submitted through Together to help prevent abusive or inappropriate content. Automated checks use OpenAI's moderation API. Authorized human reviewers can inspect reports and relevant content, remove content, or restrict accounts. Review may delay when content becomes visible.

For text checks we send the text being reviewed. For image checks we send the relevant JPEG after removing embedded metadata such as EXIF location tags. Text and visible image content can themselves contain personal information. We do not add internal account, workout or plan identifiers, route coordinates, live location or health measurements to moderation requests. Saving a private workout alone does not send its title or photos to OpenAI. Profile photos are checked before public storage; shared workout photos are checked before the post becomes visible to others.

Our backend stores content, review status and decisions; private workout-photo copies used for review and retries are included in account deletion. Safety moderation is separate from optional AI workout insights; turning off insights does not turn off checks on submitted social content.

To appeal a decision, contact support@taqvo.app with the affected content or account and the reason you believe the decision should change.

Subscriptions and service emails

• Apple processes subscription payments. We receive product identifiers, transaction identifiers, purchase dates, and an app account token to verify purchases and associate them with your account. We do not receive your payment-card details.
• We use Resend to deliver early-access confirmations, account welcome messages, and Pro purchase confirmations. Depending on the message, Resend receives your email address, first name, plan, and purchase date. We record delivery, bounce, and complaint events, and keep hashed email suppression records to avoid sending to addresses that bounce or complain.

Photos and music

• With your permission, the camera and photo library are used so you can set a profile photo and save a workout image. Photos you attach to a workout are stored in your account.
• With your permission, Taqvo can control music already playing on your device (Apple Music or Spotify) during a workout. We do not collect your listening history.

Notifications

• If you allow notifications, we store your device's push token so Apple can deliver them — for example when a Together partner finishes their workout.

Diagnostics

• We use Sentry to capture crashes and errors, so we can fix them. These reports contain technical details such as device model, OS version, app version, and the error itself. They are configured not to include personal information, and are not used to identify or profile you.

Product usage

• If Share usage analytics is on (Settings → Privacy & data), the app records anonymous events about which features are used — for example which onboarding steps were viewed, whether a paywall was shown, and whether a workout or Together session was completed. Events carry a random per-install identifier, never your account, and are kept for 13 months. Turning the setting off stops collection and discards events not yet sent.

The taqvo.app website

• If you join the early-access list, we store the email address you enter so we can tell you when Taqvo is available. We do not add you to a marketing list and we do not sell or rent these details.
• We use Vercel Web Analytics and Speed Insights to understand aggregated website usage and performance, including page views, referrers, broad device and browser categories, country-level location, and Core Web Vitals. This measurement does not use cookies, does not identify you, and does not follow you across other websites. Query strings, URL fragments, and private invitation codes are removed before analytics events are sent.

4. Consent and permissions

Every sensitive permission — location, Apple Health, Bluetooth, contacts, photos, motion, music, and notifications — is requested separately, before the data is collected, and only ever with your agreement. Apple Health data is processed only on your explicit consent.

You can withdraw any permission at any time in iOS Settings, and you can turn off sharing features inside Taqvo. Withdrawing consent stops the collection from that point on; it does not undo processing that already happened lawfully. Taqvo's core tracking is free, and no paid functionality is conditioned on granting access to your data.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. What we never do

• We do not sell or rent your personal data, and we do not share it for cross-context behavioural advertising.
• We do not show third-party ads in Taqvo.
• We do not track you across other companies' apps or websites, and Taqvo contains no advertising or tracking SDKs.
• We do not use your health or location data for marketing.

6. How this maps to Apple's privacy labels

Using Apple's own categories, this is what Taqvo collects. "Linked to you" means it is associated with your account.

• Contact Info (name and email address) — linked to you.
• Health & Fitness (workouts, heart rate from Apple Health or a paired heart-rate monitor, and the trend figures described above) — linked to you.
• Location (precise, during a workout) — linked to you.
• Contacts (hashed email addresses for matching; chosen Beacon recipient names) — linked to you.
• User Content (photos, notes, posts, comments, and Together messages) — linked to you.
• Purchases (subscription and transaction records) — linked to you.
• Identifiers (account ID, push token) — linked to you.
• Diagnostics (crash and error reports) — not linked to you.
• Product interaction (anonymous feature usage) — not linked to you.

None of this data is used to track you. We do not link it with data from third parties for advertising or measurement, and we do not share it with data brokers, so Taqvo does not ask for permission to track.

7. Our legal bases (EEA and UK users)

Where the UK GDPR or EU GDPR applies, we rely on the following bases:

• Performance of a contract — running your account and delivering the features you ask for, such as recording a workout or syncing your history.
• Consent — location, Apple Health, Bluetooth, contacts, photos, motion, music, and notifications. Each is requested separately and you can withdraw any of them at any time in iOS Settings. Health data is processed only on your explicit consent.
• Legitimate interests — keeping the app stable and secure, preventing abuse, and handling reports. We balance these against your rights.
• Legal obligation — where the law requires us to keep or disclose something.

8. Who we share data with

We share data only with the providers that make the app work, and only so they can provide their service to us:

• Supabase — database, authentication, and file storage for your account, profile, workouts, and photos.
• Apple — Sign in with Apple, Apple Health on your device, push delivery, and WeatherKit for a workout's weather snapshot.
• Google — Google Sign-In, if you choose it.
• Spotify — only if you connect it for playback control.
• OpenAI — automated text and image safety checks on the content described above.
• Sentry — crash and error diagnostics.
• Resend — delivery of the service emails described above and delivery-status processing.
• Vercel — hosting and request processing for taqvo.app, plus the anonymous website usage and performance measurement described above.

These providers act on our instructions under written terms, and we confirm that each is required to provide the same or equal protection of your data as this policy states. They may not use your data for their own purposes. Taqvo contains no advertising networks and no analytics SDKs that identify visitors or track them across websites.

We may also disclose data if the law requires it, or to protect someone's safety or our rights. If Taqvo is ever transferred to someone else, we will tell you before your data moves.

9. Where your data is held

Our primary Supabase project is hosted in Tokyo, Japan (ap-northeast-1). Our website, authentication, email, and diagnostics providers may also process data outside your country. Where data leaves the EEA, UK, or the Philippines, we rely on our providers' standard contractual clauses and equivalent safeguards.

10. How long we keep things

• Account, profile, and workouts — until you delete them or delete your account.
• Beacon links — a link stops working when the Beacon ends or expires. The position history recorded during it stays in your account until you delete your account.
• Resolved reports — report text, image evidence references and reviewer notes are scheduled for removal from the active review database after 90 days, except while an active appeal or legal hold requires preservation. Minimal decision records, including identifiers, decision, reviewer and timestamps, remain for accountability even after account deletion. Removing report evidence references does not delete original private workout photos; those follow workout/account deletion.
• Other moderation copies and backups — automated moderation job copies and backups are separate from resolved-report evidence; the 90-day period above does not promise immediate deletion from those systems.
• Diagnostics — retained by Sentry on a rolling window, then deleted.
• Product usage — kept for 13 months, then deleted.
• Early-access submissions — until Taqvo is available or you ask us to remove you.
• Email delivery and suppression records — delivery records support troubleshooting; suppression hashes are retained as needed to respect delivery failures and complaints.

11. Your rights and choices

You can do the most important things yourself, in the app:

• Export your data — Settings, then the data and privacy section.
• Delete your account — Settings, then the data and privacy section. This removes your authentication record, profile, workouts, Beacon history, social activity, settings, and stored photos. The moderation retention exceptions in section 10 still apply.
• Change permissions — location, Health, Bluetooth, contacts, photos, motion, music, and notifications can all be changed in iOS Settings at any time.
• Privacy settings — control who can see your profile, routes, stats, and activity, and who may invite or follow you.

Under the Philippine Data Privacy Act of 2012 you have the rights to be informed, to access, to object, to erasure or blocking, to damages, to rectification, and to data portability, and you may complain to the National Privacy Commission.

Under the EU or UK GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may complain to your local supervisory authority.

Under the California Consumer Privacy Act you have the rights to know, delete, and correct the personal information we hold, and to not be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA, so we do not offer a "Do Not Sell or Share My Personal Information" link. In the past twelve months we have collected the categories described in section 3: identifiers, contact information, health and fitness data, precise geolocation, photos and user content, and diagnostic data.

To exercise any right we cannot handle in the app, email support@taqvo.app. We will respond within the period the applicable law allows, and we may need to verify who you are first.

12. Security

Data in transit is encrypted with HTTPS/TLS. Our database uses row-level security to enforce account access and the sharing permissions of each feature, and Beacon links use randomly generated codes that are impractical to guess. No system is perfectly secure, but we work to protect your information.

If a breach affects your personal data, we will notify you and the National Privacy Commission within 72 hours of knowing about it, as the Data Privacy Act requires, and we will notify other regulators where their law applies.

13. Children

Taqvo is not intended for children under 13, or under the minimum age of digital consent where you live if that age is higher. We do not knowingly collect personal data from them. If you believe a child has given us personal data, email support@taqvo.app and we will delete it.

14. Changes to this policy

We may update this policy. The date at the top always shows the current version, and we will tell you in the app about changes that matter.

15. Contact

Questions, requests, or complaints: support@taqvo.app.