How we handle your data.

Effective: May 24, 2026 · Last updated: September 28, 2026

Riven is a fitness app for Apple Watch and iPhone that detects exercise reps and estimates muscle failure during strength training. To do that, the app reads heart rate from Apple Health and motion data (accelerometer, gyroscope, gravity, rotation rate) from your watch's sensors. This document explains exactly what data we collect, why, where it goes, and how to delete it.

1. Who we are

"Riven", "we", "us", or "our" refers to Baraa Bilal, the developer of the Riven iOS and watchOS app, contactable at privacy@riven.fit. We are the data controller for the personal data described in this Privacy Policy under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA / CPRA) where those laws apply.

2. What data we collect, and why

2.1 Data that stays on your device

The following data is created and stored locally on your Apple Watch and iPhone. The workout data described in § 2.2 is also uploaded to our servers; heart-rate data is uploaded only if you have accepted the in-app data-sharing choice. Nothing else in this table is transmitted to us.

2.2 Data we upload to our servers

When you use Riven, the following is uploaded to our servers in the background, under the random identifier described below, for every workout you record:

• Workout history summary — for each workout its start and end time, and for each set the exercise, start and end time, the rep count, any count you corrected, and the failure score. This is what lets us back up your workout history and restore it on a reinstall or a new phone.
• Workout sensor recording — the motion-sensor CSV recorded during your workout (timestamps, accelerometer / gyroscope / gravity / rotation rate at ~100 Hz, step rate and motion-activity context from the watch's motion sensors, exercise selections, set boundaries, rep counts), the per-set results, and our internal algorithm trace logs.
• Heart-rate data — only if you accept. Heart-rate samples, active energy and beat-to-beat intervals read from Apple Health are included in the uploaded files only if you have accepted the Help improve Riven choice (onboarding, or Settings → Cloud Data). If you have not accepted, those values are removed from every file on your phone before upload, so no Apple Health data reaches our servers.
• A randomly generated identifier created by our backend on first launch. This identifier is not your Apple ID, name, email, device identifier, or advertising identifier, but it is stable across your workouts on this install so we can group them together.
• Workout timestamps, durations, and the watch / iOS OS versions reported by your device.

Uploads happen quietly in the background over Wi-Fi (or cellular if Wi-Fi is unavailable) so they never interrupt your workout. Workouts already stored on your phone when you install an update that includes this change are uploaded the same way. Riven's core features — rep detection, set tracking, failure scoring, workout history — run on your device.

Legal bases under the EU GDPR and UK GDPR:

• Workout history summary — performance of our contract with you (Article 6(1)(b) GDPR): backing up and restoring your history is part of the Service described in our Terms of Service.
• Workout sensor recording (without heart rate) — our legitimate interests (Article 6(1)(f) GDPR) in operating, securing, diagnosing and improving the accuracy of the Service's detection. We have weighed these interests against yours: the data is limited to motion and workout data, contains no Apple Health data unless you accepted, is stored under a random identifier, is never sold, shared with advertisers or used for marketing, and can be deleted by you at any time. You have the right to object to this processing at any time (§ 9).
• Heart-rate data — your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), given via the Help improve Riven choice and withdrawable at any time in Settings → Cloud Data, without affecting the lawfulness of processing carried out before withdrawal. Withdrawing consent stops heart rate being included in future uploads.

2.3 Data we write to Apple Health

With your permission, Riven saves each gym session to the Apple Health app as a Traditional Strength Training workout, including the heart-rate and active-energy samples the watch recorded during it. That is what makes the session appear in Health → Workouts and count towards your Activity rings. Riven writes nothing else to Apple Health — no sets, reps, or failure scores — and if you decline the workout permission the app keeps working exactly the same, it simply saves nothing there.

We do not upload, and the app does not collect:

• Your real name or phone number.
• Your Apple ID password, or any device identifier (IDFA, IDFV, advertising ID). (Your Sign in with Apple identifier and email are stored only if you choose to sign in — § 2.4.)
• Your location.
• Contacts, photos, calendar, microphone, camera, or browsing data.
• Any third-party advertising or analytics identifier — our usage analytics (§ 2.6) is our own and never shared with an ad network.

2.4 Sign in with Apple (optional)

Sign in with Apple is optional. If you choose to sign in, Riven stores your Apple-supplied user identifier and (only if you elect to share it during the Apple flow) your display name in the iOS Keychain on your device. The Apple user identifier and the email address Apple provides (your real address, or the private relay address if you chose Hide My Email) are also sent to our servers and linked to the random identifier described in § 2.2, so that we know which installs belong to a signed-in member and can contact you about your account. Your display name is never uploaded, except your first name if you take part in the referral program (§ 2.7). Signing out in Settings → Profile erases the local copy; deleting your profile (Settings → Profile → Delete Riven profile) also removes the email from our servers and revokes the Apple token.

2.5 AI workout planner (optional)

Riven includes an optional "Quick build" AI planner that turns a short text description of your training goals into a draft workout program. If you use it, the text you type, the number of days per week you select, and our built-in (non-personal) exercise catalog are sent to our AI provider, Anthropic, PBC, which generates the plan. We do not send your name, heart rate, Apple Health data, motion data, or the random identifier from § 2.2 to Anthropic — only your typed request and the day count. Please avoid typing personal or sensitive health information into the planner. Anthropic processes the request on our behalf and, under its commercial API terms, does not use API inputs to train its models. If the AI service is unavailable, Riven builds the plan on your device instead. The AI planner is entirely optional — Riven's core features never require it.

2.6 Product usage analytics

To understand where people get stuck — for example how many finish onboarding, open Riven on the watch, start a workout, or see the upgrade screen — the app records a small number of usage events and sends them to our own servers. Each event is a name (such as workout.started, screen.viewed, paywall.shown, set.corrected), a timestamp, and a few descriptive values (which screen, how many reps were counted and whether you corrected them, your subscription tier, your data-sharing choice, the app and OS version, and the device model). Events carry the random identifier from § 2.2, a per-install identifier, and — only if you signed in — your Sign in with Apple identifier. They never contain motion-sensor readings, heart rate, or anything from Apple Health, and they are sent regardless of the Help improve Riven choice, because that choice governs heart-rate data only. Usage events stay on our servers, are used solely to improve the product, are never sold or shared with an advertising network, and are deleted together with everything else when you delete your uploaded data or your profile.

2.7 Referral program (optional)

If you invite a friend, or join Riven through a friend's invite, we store who invited whom, your invite code, when the invite was used and how (link, pasted link or typed code), and — so that each of you can see progress — whether the invited friend has completed qualifying workouts and whether they started a paid Unlimited plan. We never store the amount paid or any payment details. If you signed in with Apple, your first name is shown to the other person in the invite (your friend sees who invited them; you see your invited friends' first names); if you did not, you appear as "a friend". Opening an invite link on riven.fit records the code, the country and the type of device, with no other personal data. The free months are Apple offer codes that you redeem with Apple. Referral data is deleted together with everything else when you delete your uploaded data or your profile.

2.8 Subscription status from Apple

When a Riven subscription starts, renews, changes or ends, Apple sends us a signed notice with the product, the dates, the price level and an Apple transaction number — never your name, Apple ID or payment details. The app also tells our servers which Riven subscription is active on your device. We link both to the random identifier from § 2.2 to grant referral rewards and to understand which plans people use.

3. HealthKit (Apple Health) data

Riven uses Apple's HealthKit framework to read your heart rate and active energy during workouts, and to write each completed session as a workout record (§ 2.3). We comply with Apple's HealthKit rules:

• HealthKit data is never used for advertising or other data-mining purposes.
• HealthKit data is never sold to or shared with data brokers, marketers, or third-party advertisers.
• HealthKit data is never disclosed to any third party except as required by law.
• Heart-rate and active-energy samples are included in the uploaded workout files (§ 2.2) only if you accepted the in-app data-sharing choice. If you have not accepted, they are removed from the files on your phone before upload and never leave your device.
• You can revoke Riven's access to HealthKit at any time in the iOS Settings app under Privacy & Security → Health → Riven. Revoking read access stops Riven from reading new heart-rate samples, and revoking write access stops it from saving workouts to Health; uploads of motion and workout data (§ 2.2) continue either way.

4. Where your data is stored and processed

Local data lives on your Apple Watch and iPhone. Uploaded data (§ 2.2) is processed and stored by Supabase Inc., our hosting provider, in their EU West (Ireland) region. Supabase processes the data on our instructions under a Data Processing Agreement. If you are based outside the EU, please note that your data is transferred to and stored in the European Economic Area; we rely on Supabase's standard contractual clauses for any onward transfers.

5. How long we keep your data

• Local data: stays on your device until you delete the app.
• Uploaded data: retained under the random identifier described in § 2.2 for as long as you use Riven, so we can keep your workout history available and continue to train and validate our detection models on a stable corpus. You can delete every workout tied to your identifier at any time directly inside the app, at Settings → Cloud Data → Delete uploaded data. We complete erasure within 30 days. If the in-app deletion path is unavailable for any reason, you can also email privacy@riven.fit.
• Subscription receipts: handled by Apple under Apple's terms; we never see your payment information.

6. How we use this data

• To run the app's core features (rep counting, set detection, failure scoring, workout history), including backing up and restoring your workout history.
• To improve the accuracy of the rep-detection, set-detection, exercise-classification and failure models. Heart-rate data is used for this only if you accepted the data-sharing choice.
• To diagnose crashes and software issues you report to us.
• To enforce our Terms of Service and prevent abuse.

We do not use your data for advertising, profiling for marketing purposes, or any automated decision-making that produces legal effects concerning you.

7. Who we share data with

We share personal data only with the following categories of recipients, and only as needed to run Riven:

• Apple Inc. — App Store distribution, Sign in with Apple (if you use it), HealthKit, StoreKit. Governed by Apple's privacy policy.
• Supabase Inc. — hosting of uploaded workout data in the EU. Governed by Supabase's privacy policy and DPA.
• Anthropic, PBC — generates draft plans from the text you type into the optional AI planner (§ 2.5). Receives only your typed request, the day count, and our exercise catalog — never your health, motion, or identity data. Governed by Anthropic's privacy policy and commercial API terms (no training on API inputs).
• Cloudflare, Inc. — content delivery for this website (riven.fit). Governed by Cloudflare's privacy policy. The mobile app itself does not communicate with Cloudflare.

We do not sell, rent, or trade personal data, and we do not share it with advertisers, data brokers, or analytics companies. We do not use Google Analytics, Facebook Pixel, or any equivalent tracking in the app.

8. App Tracking Transparency

Riven does not track you across apps or websites owned by other companies. We do not request the App Tracking Transparency permission because we have no need for the IDFA or any cross-app identifier.

9. Your rights and privacy choices

The most direct controls are inside the app itself:

• Stop sharing heart rate — turn off Settings → Cloud Data → Help improve Riven. Future uploads then exclude heart rate and all other Apple Health data. Takes effect immediately.
• Object to the upload of your workout data — email privacy@riven.fit. Unless we have compelling legitimate grounds that override your interests, we will stop using your workout sensor recordings to improve our models and delete them from our servers, and confirm within 30 days.
• Delete previously uploaded data — Settings → Cloud Data → Delete uploaded data. Queues every workout tied to your random identifier for permanent erasure on our servers within 30 days. Workouts you record afterwards are uploaded as described in § 2.2.
• Stop the watch from reading heart rate — iOS Settings → Privacy & Security → Health → Riven.

Depending on where you live, you also have some or all of the following statutory rights regarding the personal data we hold about you:

• Access — request a copy of the data tied to your random identifier.
• Rectification — ask us to correct inaccurate data.
• Erasure ("right to be forgotten") — ask us to delete all data tied to your identifier. This is the in-app action above; you can also email us if the in-app path is unavailable.
• Restriction and objection — ask us to restrict processing, or object to processing based on our legitimate interests (§ 2.2), by emailing us.
• Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal. The in-app toggle is the primary mechanism for heart-rate data.
• Portability — receive your uploaded workout CSVs in a machine-readable format.
• Complaint — lodge a complaint with your local data-protection supervisory authority. In Ireland (where our processor is located) that is the Data Protection Commission.

California residents have additional rights under the CCPA / CPRA, including the right to know what categories of personal information we collect and to opt out of any "sale" or "sharing" of personal information. We do not sell or share (in the CCPA sense) personal information.

For any right we cannot fulfill via an in-app action, email privacy@riven.fit. We respond within 30 days. Deleting the Riven app from your devices stops further uploads from those devices but does not by itself delete previously uploaded data — use the in-app delete action, or email us, for that.

10. Security

Local data is protected by iOS's standard data-protection class (encrypted at rest while the device is locked). Authentication tokens are stored in the iOS Keychain. Uploads to Supabase use TLS 1.2 or higher in transit. Server-side access is gated by Supabase Row-Level Security, scoped to the anonymous identifier on your device. No system is perfectly secure, but we follow current industry practice and Apple's platform security guidance.

11. Children

Riven is rated 17+ on the App Store and is intended for adults engaged in resistance training. We do not knowingly collect data from anyone under the age of 16 in the EU/UK, or under 13 in the United States. If you believe a minor has used Riven and provided us with data, please contact privacy@riven.fit and we will delete it.

12. Cookies and the website

The riven.fit website uses only the strictly necessary cookies set by our hosting provider (Cloudflare) to operate the site. We do not use marketing or analytics cookies. The mobile app does not use cookies.

13. Changes to this policy

If we change this Privacy Policy in a way that materially affects how we handle your data, we will update the "Last updated" date at the top of this document and, where required by law, ask for your renewed consent before the change takes effect.

September 27, 2026 update. Workout history summaries and workout sensor recordings (§ 2.2) are uploaded for every user, and heart-rate data only with your acceptance. This applies from the app version that includes this change; earlier app versions uploaded sensor data only if you accepted the data-sharing choice. The optional Help improve Riven choice now controls whether heart-rate data is uploaded.

14. Contact

Questions, requests, or complaints about your data can be sent to privacy@riven.fit. For general support, write to support@riven.fit.