This Privacy Policy describes how Allheartz, Inc. (“Allheartz,” “Company,” “we,” “us,” or “our”) collects, uses, stores, and discloses information when you use the Allheartz athletic platform, including any mobile applications, websites, and related services (collectively, the “Services”). By accepting this Privacy Policy during registration or by using the Services, you consent to the practices described here.
A. User Information. Name, email address, team or organization affiliation, account credentials, and (if provided) age or date of birth and demographics.
B. Movement and Performance Data. Video recordings, skeletal keypoint and movement measurements, derived performance analytics, training-session history, and athlete-reported measures.
C. Biometric Data. Video of your body and derived movement, gait, posture, and biomechanical patterns, which may constitute biometric identifiers and biometric information under applicable law (see Section 5).
D. Device and Usage Information. IP address, browser type, device type, operating system, app-usage activity, and log and analytics data.
When you submit a recording, our systems process it to generate movement measurements and derived metrics. Your video recordings and the derived measurements are stored on secure, industry-leading cloud infrastructure, protected by administrative, technical, and physical safeguards and by contractual security commitments from our cloud service providers. We retain this information as described in Section 13, including in relation to account deactivation.
We use collected information to provide and operate the Services; generate movement analysis and performance insights; improve platform functionality and develop new features; respond to support requests; maintain platform security; and comply with legal obligations.
Some features collect and analyze biometric identifiers and biometric information as described above. We collect and use this data only after obtaining your informed consent (or a parent/guardian’s consent for a minor), which you provide by accepting our Terms & Conditions and this Privacy Policy during registration; our standalone Biometric Data Notice describes these practices in more detail. We do not sell, lease, trade, or profit from biometric data, and we disclose it only to service providers and authorized personnel who are bound by confidentiality and security obligations. We retain biometric data only as long as needed for the stated purpose, or within three (3) years after your last interaction, whichever is first, after which it is permanently destroyed, except where a longer period is required by law.
Allheartz may use your video, images, movement data, and derived measurements to train and refine machine-learning models, improve movement-analysis capabilities, develop analytical tools and algorithms, and conduct internal testing and product development. Some model development requires authorized personnel to review and label identifiable video and derived outputs (for example, to verify or correct movement keypoints and angles); we also maintain and use a separate de-identified and aggregated dataset for development. Access to identifiable video for these purposes is limited to authorized personnel and contractors under confidentiality and security obligations, and we do not sell this data.
Allheartz may conduct research related to human movement, athletic performance, biomechanics, and training methodologies. Participation in formal research is voluntary; you may opt in or opt out during registration and change your preference at any time. Opting out does not prevent Allheartz from using de-identified and aggregated data for internal platform improvement and operational purposes.
Authorized team personnel. Coaches, trainers, strength staff, medical or specialty personnel, and other authorized organizational personnel.
Service providers. Cloud hosting, analytics, and infrastructure and security vendors, who are contractually required to maintain confidentiality and appropriate security protections.
Legal compliance. We may disclose information where required by law or to protect users, the Company, or legal rights and safety.
Allheartz does not sell or share your personal information (including for cross-context behavioral advertising).
We implement reasonable administrative, technical, and physical safeguards designed to protect user information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Services are intended for users age 13 and older and are not directed to children under 13. Allheartz does not knowingly collect personal information from children under 13, and will delete it if discovered. A user between 13 and 17 may use the Services only with the consent and supervision of a parent or legal guardian. Parents or guardians consent to the collection and use of the minor’s information (including biometric and movement data) and may review, request deletion of, or withdraw consent for their child’s information by contacting hello@allheartz.com.
If you are a California resident, you have rights under the California Consumer Privacy Act, as amended (“CCPA/CPRA”). The health, biometric, and precise data we process may constitute “sensitive personal information.” Subject to legal exceptions, you may:
We do not sell or share personal information. Where technically feasible, we honor opt-out preference signals such as the Global Privacy Control (GPC). To exercise your rights, submit a request through the application or contact hello@allheartz.com; we will verify your identity before responding.
Residents of other states with biometric privacy laws
If you reside in a state with a specific biometric privacy law — for example, Texas (CUBI) or Washington — additional requirements may apply to your biometric data, including destruction of biometric identifiers within one year after the purpose for collection expires. Allheartz will apply the requirements applicable to residents of those states to their biometric data.
Consumer health data (Washington, Nevada, and similar laws)
Some information we collect — including movement, biometric, and health-related data — may be “consumer health data” under laws such as the Washington My Health My Data Act and Nevada SB 370. Where these laws apply, we collect and share consumer health data only with the consent you provide by accepting this Privacy Policy or as otherwise permitted by law; we do not sell consumer health data without the separate valid authorization those laws require; and you may withdraw consent, and request access to or deletion of your consumer health data, by contacting hello@allheartz.com.
The Services use automated processing to generate movement measurements and performance insights from your data. These outputs are informational and are not used by Allheartz to make legal or similarly significant decisions about you. Where required by law, we will provide notice and any applicable opt-out or review rights regarding automated decision-making technology.
We retain information for as long as your account is active and as long as reasonably necessary thereafter to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may deactivate your account at any time, and authorized coaches or organizational personnel may deactivate accounts they manage. We may retain a deactivated profile and basic demographic information so that you can resume the program if you return, unless you request deletion. Biometric data is destroyed as described in Section 5 regardless of whether a profile remains deactivated, and de-identified and aggregated information may be retained indefinitely. You may request deletion of your information at any time, subject to legal or legitimate-business retention needs.
We and our service providers may use cookies and similar technologies to operate the Services, remember preferences, and analyze usage. You can manage cookies through your browser or device settings; disabling some may affect functionality.
We may update this Privacy Policy periodically and will revise the “Last Updated” date. Continued use of the Services after updates take effect constitutes acceptance of the revised Privacy Policy.
Allheartz, Inc., Oakland, California. Privacy questions and requests may be sent to hello@allheartz.com.