Privacy Policy

In short

• The app reads your health and fitness data from Apple Health on your iPhone. That data stays on your device.
• There are no accounts. We never ask for your name, email, contacts, or advertising identifier.
• There are no analytics SDKs, no advertising, and no tracking across apps or websites.
• Exactly one feature sends data off your device: the AI Daily Digest. It sends an anonymised summary of a single day, and only if you use it.

1. Who we are

Podo (bundle identifier com.tarasenko.pedometer) is developed and published by Siarhei Tarasenka, an independent developer — “we”, “us”. For anything related to this policy, write to tarasenko.by@icloud.com.

2. Health and fitness data

With your permission the app reads the following from Apple Health: steps, walking and running distance, active energy, flights climbed, workouts and their routes, sleep analysis, resting heart rate, heart rate variability, and — if you choose to share them — height, body mass, biological sex and date of birth. This is used to show your statistics and to compute derived values such as the sleep score, energy reserve, stress index and recovery score.

Apple Health remains the source of truth. We do not copy your health data into a database of our own. Derived values are cached on your device, including in a shared app-group container so that the widget and the Apple Watch app can display them. If you record a workout in the app, that workout and its GPS route are written to Apple Health on your device.

Health data is never used for advertising or marketing, never sold, and never shared with data brokers. It is not used for any purpose other than the health and fitness features described here.

3. The AI Daily Digest — the only data that leaves your device

The digest is a paid feature that produces a written review of your previous day. To generate it, an aggregated summary of that one day is sent to our server. It contains:

• the date and the app’s current language;
• steps, distance, active calories, flights climbed, your daily goals, and the hour of your peak activity;
• your 7-day and 28-day step averages, current goal streak, and how many of the last 7 days met the goal;
• sleep duration, our sleep score, bedtime deviation, awakenings, sleep stages and naps;
• resting heart rate and heart rate variability with your personal baselines, recovery zone, stress level and minutes spent under high stress, energy level;
• that day’s workouts: type, duration, calories, distance and average heart rate;
• profile values needed to interpret the numbers: biological sex, age, body mass and height.

It does not contain your name, email address, Apple ID, device identifier, precise location, or any other identifier that would let us recognise you. Requests are authenticated with a single application key, not with a user account, so we cannot link one request to another.

The summary travels over HTTPS to our server at pedometer.uxui.one, which passes it to the OpenAI API to generate the text and returns that text to your iPhone. We do not store the summary or the generated text on our server; the text is cached on your device for the day it describes. OpenAI processes it as API input — under OpenAI’s API data usage policies, API inputs are not used to train their models and are retained only for a limited period for abuse monitoring. OpenAI operates in the United States, so this step involves an international transfer of that anonymised summary.

If you do not use the digest, no health data leaves your device at all.

4. Location

Location is used only while you are recording a workout you started yourself, to draw the route. The route is saved to Apple Health on your device and is never sent to us. The app may also pass your approximate location to Apple WeatherKit to show the current weather; that request goes to Apple under Apple’s privacy policy, and we neither receive nor store it.

5. Motion data and notifications

Motion and fitness data (CoreMotion) is used for live step counting and stays on the device. Reminders and the morning digest notification are local notifications scheduled on your iPhone — there is no push server and no notification token is sent to us.

6. Subscriptions and payments

Purchases are processed by Apple. We never see or receive your payment details. From Apple we learn only whether a subscription is currently active. There are no user accounts in the app.

7. Analytics, advertising and tracking

The app contains no third-party analytics, attribution or advertising SDKs. It does not track you across apps or websites and never asks for the App Tracking Transparency permission. This website, podosteps.com, uses Umami — cookieless analytics that does not identify individual visitors.

8. Children

The app is not directed at children under 13, and we do not knowingly collect data from them.

9. Your rights and your control

Because we hold no personal data on our servers, there is nothing on our side to export or erase. Control sits with you: revoke health access in Settings › Privacy & Security › Health, manage what Apple Health stores in the Health app, and delete the app to remove every locally cached value.

Where the GDPR applies, we process the day summary described in section 3 to provide the service you requested (Art. 6(1)(b)), and health data on the basis of your explicit consent (Art. 9(2)(a)), which you give by granting health permissions and opening the digest, and can withdraw at any time. You may also lodge a complaint with your local data protection authority. Under the CCPA: we do not sell or share personal information, and we do not process it for cross-context behavioural advertising. Questions and requests: tarasenko.by@icloud.com.

10. Changes to this policy

If this policy changes, we update this page and the date at the top. Material changes will also be announced inside the app.

11. Contact

Siarhei Tarasenka · tarasenko.by@icloud.com · Terms of Use