Privacy Policy

The most important points first

Schwitz is built so that your data stays with you. The app needs no account, we operate no servers of our own and use no tracking or advertising SDKs. All session, health and journal data is stored exclusively locally on your devices and — if you use iCloud — in your private iCloud. As the provider we have no access to it.

Controller

Marco Kleine-Böhme
ventuno labs
Brahmsallee 18
20144 Hamburg, Germany
Email: [email protected]

1. The Schwitz app

Local data processing

All data you record in Schwitz — sauna sessions, rounds, Aufguss infusions, presets, journal entries, your display name and your settings — is stored locally on your iPhone or Apple Watch. It is not transmitted to us or to third parties.

Apple Health (HealthKit)

With your explicit consent, Schwitz reads health data from Apple Health (heart rate, active energy, resting heart rate) to show your pulse live during a session and to calculate recovery values. Completed sessions are saved to Apple Health as workouts.

Processing takes place exclusively on your devices. HealthKit data is never transmitted to us or to third parties and is not used for advertising, marketing or similar purposes. You can revoke the permissions at any time in iOS Settings under Privacy & Security → Health. Legal basis: Art. 6 (1)(a), Art. 9 (2)(a) GDPR (consent).

Sleep, resting heart rate and heart rate variability (Schwitz Pro): For the “afterglow” evaluation — how sauna days affect the following nights — Schwitz additionally reads sleep data, resting heart rate and heart rate variability (HRV, SDNN) from Apple Health. This permission is only requested when you explicitly tap to enable it in the Analysis tab, never when the app launches. The evaluation is calculated exclusively on your device and held in memory only; the values are not stored permanently in Schwitz, not synced to iCloud and not transmitted to us or to third parties. The evaluation texts are generated from fixed templates; no cloud AI processing is used. Legal basis: Art. 6 (1)(a), Art. 9 (2)(a) GDPR (consent).

Restoring from Apple Health: Schwitz saves a workout to Apple Health for every session and stores key details of the session in it (e.g. rounds, Aufguss infusions, sauna type). After a reinstall, Schwitz can read these workouts it created itself in order to restore your history. This also happens exclusively on your device.

iCloud sync (CloudKit)

If iCloud is enabled on your device, Schwitz syncs your sessions, presets and journal entries through the private CloudKit database of your iCloud account. This data resides in your Apple Account; we have no access to it. The provider is Apple Inc. or Apple Distribution International Ltd. Apple’s privacy terms apply: apple.com/legal/privacy. You can turn off syncing in your device’s iCloud settings.

Purchases (App Store)

Purchases and subscriptions (Schwitz Pro) are handled entirely through the Apple App Store. We do not receive any payment or account data — Apple only sends us anonymous transaction confirmations used to unlock the Pro features.

Notifications

Schwitz uses local notifications only (e.g. the reminder about a session that is still running, the note after a session has been saved and — for Pro users — the weekly look-back on Mondays). They are scheduled and triggered on your device; there are no push servers.

No analytics or advertising services

The app contains no third-party analytics, crash-reporting or advertising SDKs. No tracking takes place.

2. The schwitz.app website

Hosting

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit the website, Cloudflare may collect technical data such as your IP address. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and performant delivery). Further information: Cloudflare Privacy Policy.

Cookies and tracking

This website uses no cookies and no tracking tools.

Fonts

This website uses self-hosted fonts. No connection to external servers (e.g. Google) is made to load fonts.

Contact by email

If you contact us by email, we store your details to process the request and for follow-up questions. We do not pass this data on without your consent. Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or Art. 6 (1)(f) GDPR (legitimate interest).

Launch notification (form)

On the homepage you can enter your email address to be notified once when the app launches. The form is processed by the service Formspree (Formspree, Inc., USA): your email address is sent to Formspree and delivered to us from there. For technical reasons your IP address is also transmitted to Formspree. As Formspree is based in the USA, this may involve a transfer to a third country.

We use your address only to inform you once about the app launch and delete it afterwards. The legal basis is your consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by email to [email protected].

3. Your rights under the GDPR

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

Because the app data resides exclusively on your devices and in your private iCloud, you can view, export or delete it yourself at any time — for example by deleting individual sessions, the health data in Apple Health, or the app itself.

4. Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg, Germany
datenschutz-hamburg.de