HealthKit Data Usage Policy

HealthKit integration is entirely optional. R90 Navigator works fully without HealthKit access. You will be asked for explicit permission before any HealthKit data is accessed. You can decline without losing access to any core functionality.

With your explicit permission, R90 Navigator may read the following data types from Apple HealthKit:

• Sleep analysis: Sleep start and end times, sleep stages (if available from your device or wearable)
• Heart rate: Resting heart rate data points
• Heart rate variability (HRV): HRV measurements
• Activity data: Step count and active energy to understand your activity level

We request only the minimum data types necessary to personalize your rhythm plan and recovery coaching.

HealthKit data is used exclusively to:

• Improve the accuracy of your personalized sleep rhythm plan
• Detect your actual sleep and wake times for better cycle alignment
• Provide more relevant R-Lo coaching suggestions based on your actual patterns
• Personalize recovery and readiness guidance
• Display sleep and activity trends within the App

• HealthKit data is processed locally on your device where possible.
• Where server-side processing is necessary for personalization (such as computing rhythm recommendations), data is transmitted securely using TLS encryption.
• HealthKit data is stored in your user account and protected by row-level security, ensuring only you can access your data.
• HealthKit data is never combined with data from other users for advertising or profiling purposes.

You can revoke HealthKit access at any time:

• From your iPhone: Settings > Health > Data Access & Devices > R90 Navigator > Turn off access
• From within the App: Profile > Settings > Health Data > Disconnect

After revoking access, R90 Navigator will no longer read new data from HealthKit. Previously synced data may remain in your account until you request its deletion. Revoking HealthKit access does not affect other App functionality.

HealthKit-derived data stored in your account is deleted when you delete your R90 Navigator account, in accordance with our Account Deletion Policy. You may also request deletion of specific HealthKit-derived data by contacting privacy@r90navigator.com.

This policy and our use of HealthKit data comply with Apple's HealthKit guidelines, including:

• HealthKit data is not used for advertising or marketing
• HealthKit data is not sold to third parties
• HealthKit data is not shared with third parties for purposes unrelated to providing the Service
• HealthKit data access is clearly disclosed and requires explicit user permission
• Users can revoke access at any time

In the future, R90 Navigator may support additional health data integrations (such as Google Health Connect, Oura, or Whoop). Each integration will be subject to the same privacy protections described in this policy: optional access, explicit permission, no advertising use, no sale to third parties, and full user control.

• Privacy: privacy@r90navigator.com
• Support: hello@r90navigator.com