Effective 26 August 2026 · Version 2026-08-26
Health and fitness data is treated differently from everything else Tapir holds. It is special category data under the GDPR, sensitive personal information under the CPRA, and consumer health data under Washington's My Health My Data Act. This page states the rules plainly, in one place. The binding detail is in the Privacy Policy.
What counts
Age, height, weight, sex, resting and maximum heart rate, heart-rate variability, sleep, injuries and where they hurt, and the heart rate inside any activity you import.
The rules
- Explicit consent, asked for separately. Health data is not covered by accepting the terms. You are asked for it on its own, and you can say no and still use the app.
- Never for advertising or marketing. Not ours, not anybody's.
- Never sold, and never disclosed to a data broker.
- Never used to train machine-learning models. Your training plan is deterministic arithmetic and no model writes it. The conversational coach sends your question, a summary of your plan, and any injury you have told us about to Anthropic so it can answer; that is inference, not training, and nothing is retained there to train on. Your free-text notes are never sent.
- Never shown to another athlete. The social features read Tapir's own session records, never imported activity, and never anything from this page.
- Withdrawable and deletable in the app, in one step, without contacting us.
Where it lives
On your phone, in an encrypted store whose key sits in the device keychain and is readable only while the device is unlocked. It syncs to our servers only if you have an account and have consented; there it is encrypted at rest and protected by database-level row-level security, so another athlete's query cannot reach it even if the application layer has a bug.
Apple Health
Tapir does not read Apple Health today, so nothing on this page comes from HealthKit. If that changes, everything here will apply to what we read from it, with Apple's own rules on top: never used for advertising or marketing, never sold, never disclosed to a data broker, and revocable in iOS Settings whenever you like.
What you lose by saying no
Two features, and nothing else. Without height, weight and age there are no carbohydrate targets. Without heart rate there are no heart-rate zones, and Tapir coaches you by pace instead. Every other part of the app works exactly the same.