Privacy policy

In short

• Your health data stays on your phone. Raml Health calculates your scores there.
• Nothing leaves your phone unless you join a coach and turn on sharing. You choose training sessions and daily summaries separately for each of your coaches and can turn either off at any time.
• Only the coaches you share with see what you share, each only what you share with them. In a coaching team, only the team's lead and the team coaches the lead or a moderator gives access to you see what you share with the team, and you're told when someone new can see it. There are no ads, no analytics and no tracking, and no data is sold.

Who is responsible

Luca Ramseyer, Löwenmattweg 8b, 3110 Münsingen, Switzerland · luca@raml.ch

Write to this address for any question about your data, or to use the rights described below.

What stays on your phone

Raml Health reads from Apple Health (iPhone) or Health Connect (Android), with your permission per data type:

• Heart rate, heart rate variability, resting heart rate, respiratory rate, blood oxygen, sleep, steps, active energy, VO2 max, workouts, and weight, body fat and lean mass.
• If you connect the Google Health API (Fitbit and Pixel Watch users), your sleep stages, heart rate, HRV, minute-level blood oxygen and other values are downloaded directly from Google to your phone, read-only, and used for your scores before the copies in Apple Health or Health Connect. Your Google sign-in is stored in the phone's secure storage. Raml Health's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: data from Google is used only for the app's features described here and is never sold or used for advertising. The only people who see any of it are the coaches you share daily summaries with (see Coaching below).

From this the app calculates Sleep, Recovery and Strain on your phone. Your strength sessions, templates, body goals and settings are stored on your phone as well. The app writes your logged strength workouts (with estimated calories) and weight entries you make in the app back to Apple Health or Health Connect. None of this is sent to us.

If you back up your phone (iCloud backup on iPhone, Google's Android backup or a transfer to a new phone), your training log, body goal and settings are part of that backup, so they move to a new phone with it. Backups are kept by Apple or Google under your account, not by us. Your sign-ins (coaching and Google) are not included; you sign in again on the new phone.

The scores are wellness estimates, not medical measurements.

Coaching (optional)

If your coach invites you, you can create a coaching account in the app with Sign in with Apple (iPhone) or with your email address and a one-time code we email you (Android). You can have more than one coach: join another one with their invite code, or accept when one of your coaches asks to add another coach or one of their coaching teams, or to hand you over to another coach or a team. Until you accept such a request nothing changes and the other coach sees nothing about you, not even your name; you choose what to share with them when you accept. After a handoff your previous coach no longer sees anything of you. You can also join a coaching team with its invite code: you choose once what you share with the team. The team's lead sees it, and other coaches of the team only once the lead or a moderator gives them access to you (view, or manage for your plan and notes); you get a notification each time and Settings → Coach lists who sees you and how. Team coaches without access don't see your data; the lead and moderators see your name to give access. We then store:

• Your account: the email address your sign-in provides (with Apple this can be a private relay address) and the full name you enter so your coach knows who you are.
• Restoring sessions: on a new phone you can download the training sessions you shared with your coach back into the app. Only your own shared sessions are downloaded, and only while training sharing is on.
• Your coaches and consents: which coaches and teams you joined and when, when you turned each kind of sharing on or off for each coach or team, which team coaches were given access to you, and the coach requests you were sent with your answers (kept as a record of your choices).
• Your training plan: the plans your coaches assign, and notes they write on your sessions (with who wrote them).
• Push notifications: your phone's notification token, so you can be told about plan changes and coach notes. Notifications are delivered by Apple (iPhone) or Google Firebase Cloud Messaging (Android).

Only with the matching sharing switch turned on:

• Training sessions (all past sessions once, then each new or edited one): date, start and end time, title, exercises with every completed set (set type, weight, reps, RPE, and the load actually moved), total volume, number of working sets, your body weight on the day of the session (for bodyweight and assisted exercises), which planned workout it was, and planned workouts you skipped. Your session notes, calories and heart rate are not shared.
• Daily summaries (the last 14 days, updated when scores are recalculated): Recovery, Sleep and Strain scores, HRV, resting heart rate, sleep duration and body weight. Some of these values may come from Google Health if you connected it. Sleep stages, heart-rate curves and raw health samples are never shared.

Each coach sees it on the Raml Coach website as long as they are your coach (or have access to you in a team you share with) and the switch for them is on. Coaches sign in there with an email link or a password. Other coaches and nobody else see your data. What you share is stored once; as soon as none of your coaches may see a category any more, it is deleted.

Where it is stored and processed

• Supabase (database and sign-in), in Zurich, Switzerland.
• Vercel hosts the Raml Coach website; its server functions run in Frankfurt, Germany.
• Microsoft 365 sends the sign-in emails (the coach's sign-in links and the athletes' one-time codes).
• Apple and Google deliver push notifications; Apple provides Sign in with Apple; Google provides the Google Health API if you connect it.

These providers process data on our behalf and only for running the service. Some of them are based in the USA; where data leaves Switzerland or the EU, it is protected by their data processing agreements and the standard contractual clauses.

How long it is kept, and deleting it

• Turning a sharing switch off for a coach ends their access right away; what none of your coaches may see any more is deleted.
• Leaving a coach or a team (Settings → Coach) ends their access; leaving your last coach or team deletes everything you shared.
• Deleting your cloud account (Settings → Coach) deletes your account and all its data, and, with Sign in with Apple, revokes the app's access to your Apple ID.
• Notification records are deleted after 30 days. Backups kept by our database provider expire on their own schedule.
• Data on your phone stays until you delete the app; deleting the app removes it (what was written to Apple Health or Health Connect stays there, under your control).

Legal basis and your rights

We process your data based on your consent (Swiss Federal Act on Data Protection; for people in the EU, Art. 6(1)(a) and Art. 9(2)(a) GDPR, as health data is involved). You can withdraw your consent at any time in the app, which does not affect what happened before.

You can ask for access to your data, a copy of it, its correction or deletion, by writing to luca@raml.ch. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local data protection authority.

Changes

If this policy changes, the date above changes and the app asks you to confirm before sharing anything new.