Privacy Policy
FLUX ("FLUX", "we", "us") builds an iOS running app that synchronizes your music to your live heart rate. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using FLUX you agree to this policy.
Information we collect
- Account information — when you sign up (with Apple, Google, email, or as a guest), we store an identifier and basic profile details such as your name or email, and your physiological profile (e.g., max and resting heart rate) used to calculate your training zones.
- Health & fitness data — with your permission, FLUX reads heart-rate and workout data from Apple Health (HealthKit) and connected devices (e.g., Apple Watch, Bluetooth chest straps, Garmin, Polar, COROS, WHOOP) during your runs to power real-time syncing and your Sync Score.
- Motion & cadence data — with your permission, FLUX uses your device's motion sensors to measure your steps per minute (cadence), so it can match music tempo to your stride when no heart-rate sensor is connected. This is processed on your device.
- Workout & usage data — runs you record (duration, distance, pace, cadence, heart-rate zones, Sync Score), workouts you build, and in-app activity.
- Music metadata — track information from your connected Apple Music library (title, artist, ISRC) used to determine BPM and energy for syncing. We do not access your account password.
- Device & diagnostic data — basic device information and crash/diagnostic data to keep the app stable.
How we use your information
- To provide the core experience — matching music to your heart rate in real time and calculating your Sync Score.
- To sync workouts between coaches and athletes where you use Coach Mode.
- To improve reliability, fix bugs, and understand aggregate usage.
- To send you product updates if you opt in.
Apple Health data
Health data accessed through HealthKit is used solely to provide app features to you. We do not use Apple Health data for advertising or marketing, and we do not sell it or share it with third parties for their own purposes.
Third-party services
FLUX relies on the following providers, each with their own privacy practices:
- Firebase (Google) — authentication, database, and storage for your account and workout data.
- Apple Music — to read your music library for syncing.
- Cloudflare Web Analytics — privacy-friendly, cookieless website analytics (no personal profiles, no cross-site tracking).
- MailerLite — to send product-update emails if you opt in.
- BPM metadata service — our own server analyzes song tempo/energy by track identifier; it does not receive your personal or health data.
Data storage & security
Your data is stored on secured cloud infrastructure (Firebase). We take reasonable technical and organizational measures to protect it. No method of transmission or storage is 100% secure, but we work to safeguard your information.
Your rights & account deletion
You can access and update your profile in the app. You may delete your account and associated data at any time from within the app (Settings → Delete account). You may also contact us to request access to or deletion of your data.
Children
FLUX is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Contact
Questions about privacy? Email us at syncyourbeat@gmail.com.
Note: this policy is a working draft and should be reviewed by legal counsel before public launch. It does not constitute legal advice.