Last updated: 27 October 2026
Readiness is built on a simple principle: your health data belongs to you. We collect only what is necessary to calculate your daily readiness score and personalise your coaching. We never sell your data, never share it with advertisers, and never use it for purposes beyond the app.
Health & fitness data (Apple Health / HealthKit)
This data is read directly from Apple Health on your device. The only thing Readiness writes to Apple Health is the water you add with the water button. It is processed locally to produce your readiness score and is only uploaded to our servers if you are signed in and have an active session.
Strava data (optional)
Strava connection is optional. If connected, we fetch your recent activities via the Strava API to calculate training load and acute:chronic ratio. You can disconnect Strava at any time from your profile.
Garmin data (optional)
Garmin connection is optional and off until you connect your Garmin account in your profile and agree on the consent screen that explains what is read, where it goes and how AI is used. From then on Garmin sends these daily summaries to our server whenever your watch syncs. Unlike Apple Health data, which is read on your device, Garmin data is stored on our servers (Supabase, in the EU), because Garmin delivers it to a server rather than to the app. It is stored against your account and used only for your own score, trends and coaching. Readiness receives Garmin data only from the moment you connect; it does not import your earlier Garmin history. VO2 max and fitness age are stored but not currently used in the app or sent to anyone.
Menstrual cycle data (optional)
Cycle tracking is off by default and only available if you turn it on in your profile. Your period dates and settings are stored on your device only and are never uploaded to our servers. Once two complete cycles are known, the app also uses them on your device to compare your heart rate variability and resting heart rate with the same phase of your earlier cycles, and your daily readiness score reflects that comparison. Only the resulting score is saved to your account, as on every other day; the dates and phase baselines are not. While tracking is on, the derived phase, cycle day and cycle length (never the dates themselves) are included in morning briefing and coach chat requests so the AI can interpret your metrics in context (see "AI-generated coaching" below). Turning tracking off stops that immediately.
Account data
Profile data is stored on our secure servers (Supabase) solely to personalise your readiness context and coaching recommendations.
Usage data
The app records a small number of product events against your account (for example: app opened, score shown, paywall shown, briefing opened, onboarding completed) so we can see which parts of Readiness are used and where people get stuck. These events carry no health readings such as heart rate, HRV or sleep figures. A few record your use of illness tracking: that it started or ended, or that the app asked whether you feel unwell. They are stored with the rest of your account data on Supabase in the EU, are never shared with anyone, and are deleted with your account. The app contains no crash-reporting, analytics or advertising SDKs from third parties.
The AI features also keep a per-account count of how many briefings, coach replies and reports were generated, and when, so we can apply the fair-use limits described in Section 2.
We do not use your data for advertising, profiling, or any purpose unrelated to providing the Readiness app service.
For readers in the European Economic Area and the United Kingdom: the data controller is Readiness DOO, 29 November 97, 1220 Tetovo, North Macedonia (contact details in Section 9). We rely on the following legal bases:
Readiness does not make automated decisions about you that produce legal or similarly significant effects. The AI features generate coaching text from your metrics; they do not decide anything about your access to the service.
Account and score data is stored on Supabase servers in the EU (Ireland). All data in transit is encrypted via TLS. Your readiness score is calculated on your device; the daily metrics behind it (HRV, resting heart rate, sleep duration and efficiency) are stored alongside the score so your history follows your account. That data is encrypted at rest by our hosting provider and protected by row-level security, so it is only readable through your own signed-in account. If you connect Garmin, the Garmin summaries listed in Section 1 are stored there too, under the same encryption and row-level security; the access tokens for your Garmin connection can be read only by our server, never by the app.
Retention. Account, profile, and score data is kept for as long as your account is active, and permanently removed from our servers within 30 days of account deletion. Coach chat history, the facts your coach remembers (which you can review and delete in Profile), your illness recovery tracking, your answers about unusual readings, past readiness forecasts, cached briefings, and preferences are stored only on your device; they are wiped when you sign into a different account and removed when you delete the app.
Garmin data is kept only while your Garmin account is connected. When you disconnect Garmin in your profile, we tell Garmin to stop sending data and delete every Garmin record we hold, including the access tokens, straight away. The same deletion happens when you remove Readiness from your Garmin Connect account, and Garmin data is removed with the rest of your account when you delete it.
International transfers. Some of our service providers process data in the United States: Anthropic (AI coaching text), RevenueCat (subscription management) and, for this website only, Google (analytics). Where personal data leaves the EEA or UK, the transfer takes place under each provider's data processing agreement, which incorporates the European Commission's Standard Contractual Clauses.
Readiness uses Anthropic's Claude to turn your numbers into plain-English coaching. When a daily insight, morning briefing, weekly report, or coach chat reply is generated, we send Anthropic's API the data that reply needs:
We do not send your email address or any account identifier. Anthropic processes this data solely to generate the text you see, and not for advertising. Under Anthropic's API terms, data sent through the Claude platform is excluded from model training.
If you have connected Garmin, the HRV, resting heart rate, sleep, stress and step figures above come from Garmin instead of Apple Health where Garmin has them, and yesterday's workouts include your Garmin activities. Your Garmin user ID, access tokens, VO2 max, fitness age and Body Battery are never sent to Anthropic.
AI transparency statement for Garmin data. Before you connect Garmin, the consent screen tells you that summaries derived from your Garmin data are sent to Anthropic's Claude to write your daily insight, morning briefing, weekly report and coach chat replies, and Garmin is connected only when you tap "I agree, connect Garmin". Garmin data is never used to train AI models, by us or, under its API terms, by Anthropic. You can withdraw this consent at any time by disconnecting Garmin in your profile: from then on no Garmin data is sent to Anthropic, and the Garmin records we hold are deleted as described in Section 4. The app keeps working from Apple Health without Garmin.
Your readiness score and its Recovery, Sleep, and Stress breakdown are calculated on your device from Apple Health data, and from Garmin data if you have connected it. Anthropic is involved only when an AI feature produces text for you.
Readiness is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.
You can access, correct, or delete your personal data at any time. If you are in the EEA or UK, the GDPR specifically gives you the right to: access your data; correct it; have it erased; restrict or object to its processing; receive it in a portable format; withdraw consent at any time; and lodge a complaint with your national data protection authority. To exercise any of these rights, use the in-app controls below or email us; we respond within 30 days.
We may update this policy from time to time. Significant changes will be communicated via in-app notification or email. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions about this privacy policy or how we handle your data, please contact us:
Readiness DOO, 29 November 97, 1220 Tetovo, North Macedonia