Privacy Policy

Sequorr LLC ("Sequorr", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes what information we collect, how we use it, who we share it with, and your rights regarding your data when you use the Sequorr mobile application and related services, including Findrr by Sequorr (collectively, the "Service"). It also covers the data we exchange with third-party services you choose to connect, including Garmin, Oura, Polar, Suunto, and Wahoo (the "Third-Party Services").

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1.1 Account Information

When you create an account, we collect your name, username, email address, and password. Your password is stored only as a secure hash. If you allow Apple Health access during setup, we also collect your date of birth, sex, height, and weight from Apple Health. You may also choose to provide a profile photo, units, fitness goals, and heart rate zones, and to add or edit your date of birth, sex, height, and weight.

If you choose to use Sign in with Apple, you may share your email address with us or hide it. If you hide it, Apple provides us a private relay address that forwards to your email. Sequorr never receives or stores your Apple ID password.

1.2 Health & Fitness Data

With your explicit permission, we access the following data from Apple HealthKit:

• Workout sessions and their GPS routes, including workouts recorded by allowed services and devices that save to Apple Health.
• Activity: step count, flights climbed, walking and running distance, cycling distance, swimming distance, and active and basal energy burned.
• Heart and breathing: heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, and VO2 max estimates.
• Running form and mobility: running speed, stride length, ground contact time, vertical oscillation, and walking asymmetry.
• Sleep analysis (duration and stages).
• Body measurements and characteristics: weight, height, date of birth, and biological sex.

If you allow Apple Health access, we store the workouts we access on our servers, including their routes and heart rate. We also store a daily summary of your steps, distance, active energy, flights climbed, and the previous night's sleep, including sleep and wake times, time in each sleep stage, and time in bed.

With your permission, we also save activities you record in the Service to Apple Health, including the workout, its GPS route, step count, distance (walking and running, cycling, swimming, or rowing), and active energy burned. We only read or write the specific data types you authorize.

1.3 Third-Party Services

If you choose to connect a Third-Party Service, you sign in on that service's own website and approve the data Sequorr may access. Connecting is optional and requires your express consent. Sequorr never receives or stores your password for that account. The Third-Party Service issues Sequorr an access token, which we store encrypted. Once connected, new data syncs to Sequorr automatically. We do not import data from before you connected.

Depending on the Third-Party Service, we receive and store the following data:

• Garmin: workouts (type, time, duration, distance, calories, steps, cadence, speed, elevation gain and loss, and heart rate) and each workout's file with its GPS route, heart rate, and laps; the device name; daily resting heart rate, steps, and active minutes; sleep (duration, stages, sleep score, and overnight blood oxygen); overnight heart rate variability; VO2 max; and the data types you choose to share with Sequorr in Garmin Connect.
• Oura: sleep (duration and sleep score), heart rate variability, lowest overnight heart rate (used as resting heart rate), blood oxygen, VO2 max, steps, active minutes, workouts (type, time, distance, calories, and heart rate), and your ring's model and settings.
• Polar: workouts with heart rate, GPS route, power, cadence, and laps; training load and running index; overnight heart rate variability and resting heart rate; sleep score and duration.
• Suunto: workouts with heart rate, GPS route, power, cadence, and laps; device name; sleep (duration and quality score), heart rate variability, and minimum heart rate.
• Wahoo: rides, runs, and indoor sessions with heart rate, GPS route, power, cadence, and laps; calories, ascent, and speed; and your FTP (functional threshold power).

To register your connection, we send Polar your Sequorr user ID. For Garmin, we request your Garmin user ID and the data types you share with Sequorr, and we ask Garmin to remove the connection when you disconnect or delete your account. Otherwise, we send a Third-Party Service only the authorization you approve and the requests needed to retrieve your data. Each Third-Party Service may collect information about Sequorr's use of its service, such as which requests we make and when, and use it under its own privacy policy.

Each Third-Party Service is an independent company and is responsible for the data it holds about you. Information you provide directly to a Third-Party Service, including when you sign in on its website, is subject to that company's terms and privacy policy: Garmin (garmin.com/en-US/privacy/global), Oura (ouraring.com/privacy-policy), Polar (polar.com/en/legal/privacy-notice), Suunto (suunto.com/privacy-policy), and Wahoo (wahoofitness.com/privacy-policy).

If you disconnect a Third-Party Service in Activities > Connected Devices > Service Name > Disconnect, Sequorr stops receiving new data, asks the Third-Party Service to stop sending data where it supports that, and deletes the stored access token. Data the service already sent remains in your account until you delete it, delete your account, or ask us to delete it at [email protected]. If you remove Sequorr from your account in Garmin Connect, Sequorr stops receiving Garmin data.

1.4 Location

• Recording: when you record an outdoor session, we collect your location to map the route, including while the app is in the background during that session. We don't track your location outside a recording.
• Findrr by Sequorr: to show races near you, the app uses your current location, and Findrr by Sequorr sends your approximate coordinates to our servers for the race search.
• Route building: when you build a route, the app uses your current location to center the map, and sends the route's coordinates to our servers to calculate its elevation. We use them only for that calculation and don't keep them unless you save the route.
• Profile: if you've already allowed location, we may look up your city and state for your profile. We keep only the city and state.

1.5 Training Data

If you use How You Feel, training plans, goals, gear, or route building, we store your responses, plans, goals, gear, and the routes you create. We also store the scores and metrics we calculate from your data, including but not limited to training load, fitness, fatigue, form, and readiness.

1.6 Device & Usage Data

With each request, the app sends its version, build, and platform (iPhone or Apple Watch), and we record the version and build you use to maintain the Service and diagnose technical issues. We may also collect other information about the device you use to access the Service, including but not limited to device type and operating system version. If you allow notifications, we collect a push notification token for your device. To protect your account, our servers log the IP address of requests and sign-ins, and we keep the IP addresses of your 10 most recent sign-ins with your account.

We use the information we collect for the following purposes:

• Provide core fitness tracking, activity recording, and training analytics (TSS, CTL, ATL, TSB calculations), readiness, and training plans.
• Display your activity history, training load, and performance trends.
• Show races and events near you through Findrr by Sequorr.
• Send notifications related to your account, activities, and Service updates.
• Improve, maintain, and secure the Service.
• Respond to support requests and communicate with you about your account.
• Comply with legal obligations.

We do not sell your personal information. We may share your information in the following limited circumstances:

3.1 Service Providers

We use service providers to operate the Service, including cloud hosting, database and storage services, email delivery, push notifications, mapping services (Apple Maps), and authentication providers. These providers access your data only to perform services on our behalf and are contractually obligated to protect your information.

3.2 Third-Party Services

We exchange data with the Third-Party Services you choose to connect, as described in section 1.3.

3.3 Event Organizers (Findrr by Sequorr)

Findrr by Sequorr does not share your information with event organizers. Registration takes place on the organizer's website, and the organizer's use of your data is governed by its own privacy policy.

3.4 Legal Requirements

We may preserve, use, or disclose your information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request, including but not limited to requests from law enforcement, or to protect the rights, safety, or property of Sequorr, our users, or the public.

3.5 Business Transfers

If Sequorr is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. This Privacy Policy will continue to apply to your information, and we will notify you before it becomes subject to a different privacy policy.

3.6 External Sharing by You

If you choose to share your data, screenshots, or activity information outside the Service through third-party platforms or other external channels, Sequorr is not responsible or liable for that content once it leaves the Service. Information shared externally is subject to the terms and privacy practices of the platforms through which it is shared.

3.7 Elevation Data

Route elevation, climb, and grade come from Sequorr's own elevation service, built on elevation data from the USGS 3D Elevation Program (United States) and Copernicus WorldDEM-30 (elsewhere). The route coordinates sent to calculate elevation stay on our servers and are not shared with any third party. The service reads the public elevation data without any information about you or your route.

Elevation data credits: USGS 3D Elevation Program. Produced using Copernicus WorldDEM-30 © DLR e.V. 2010-2014 and © Airbus Defence and Space GmbH 2014-2018 provided under COPERNICUS by the European Union and ESA; all rights reserved. The organisations in charge of the Copernicus programme by law or by delegation do not incur any liability for any use of the Copernicus WorldDEM-30.

4.1 Where We Store Data

Your data is stored on secure servers hosted by our infrastructure providers in the United States. Health data synced from Apple HealthKit and data from Third-Party Services is transmitted to our backend over encrypted connections (HTTPS/TLS) and stored in an encrypted database.

4.2 Security Measures

We implement industry-standard security measures, including but not limited to:

• Encrypted data transmission (HTTPS/TLS) and an encrypted database.
• Passwords stored only as secure, salted hashes (bcrypt).
• Access tokens for Third-Party Services encrypted at rest with AES-256-GCM.
• OAuth 2.0 authorization for Third-Party Services, with signed requests that verify each connection started in your account.
• Rate limits on sign-in, account, and API requests to block repeated or automated attempts.
• Signing out all of your devices when your password is reset or your email address is changed.
• Access controls and regular security reviews.

While we take reasonable steps to protect your data, no system is completely secure. You are responsible for keeping your account credentials confidential.

To change your email address, you must confirm a code sent to the new address. Once the change is confirmed, your other devices are signed out, and we send a notice to your previous address with a link to reverse the change within 7 days.

4.3 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service, including the Apple Health workouts and daily summaries we store. When you delete an activity, we keep a small record of it so the same activity is not imported again from Apple Health or a Third-Party Service.

When you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law or necessary to resolve disputes or enforce our Terms of Service. After your account is deleted, we may retain:

• A summary of your use of the Service, such as how long you had an account and which Third-Party Services you connected, along with your reason for leaving if you provide one. This summary does not include your email address.
• Backups and server logs, for up to 30 days, after which they are deleted.
• Profile photos you uploaded, to establish or defend legal claims and to respond to lawful requests, including but not limited to requests from law enforcement.

5.1 Access & Portability

You can access your personal information within the Service through your profile and activity history. You may request a copy of your data by contacting us at [email protected].

5.2 Correction

You can update your account information at any time through the Edit Profile screen. For corrections to other data, contact us.

5.3 Deletion

You can delete your account at any time through Settings > Edit Profile > Delete Account in the Service. This permanently removes your account and associated personal data from our systems within 30 days, except as described in section 4.3. You can also delete individual activities, disconnect a Third-Party Service, or ask us to delete the data a Third-Party Service sent.

5.4 Withdraw Consent

You can revoke Sequorr's access to HealthKit data, location data, notifications, and other permissions at any time through your device settings or through the Health Access settings within the Service. You can disconnect a Third-Party Service at any time in Activities > Connected Devices > Service Name > Disconnect.

5.5 California & Other State Residents

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. Residents of other states may have similar rights, including the right to access, correct, and delete personal information and to limit the use of sensitive personal information such as health data. Sequorr does not sell personal information and uses health data only to provide the Service. To exercise your rights, contact [email protected]. We may need to verify your identity before completing a request, and we respond within 45 days. We will not discriminate against you for exercising these rights.

The Service is not directed to children under 16 years of age, and you must be at least 16 to create an account. We do not knowingly collect personal information from anyone under 16. If we become aware that we have, we will take steps to delete that information promptly.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or via email and update the "Effective" date at the bottom of this policy. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Effective October 23, 2026