Last updated: 4 September 2026
Readiness is built on a simple principle: your health data belongs to you. We collect only what is necessary to calculate your daily readiness score and personalise your coaching. We never sell your data, never share it with advertisers, and never use it for purposes beyond the app.
Health & fitness data (Apple Health / HealthKit)
This data is read directly from Apple Health on your device. It is processed locally to produce your readiness score and is only uploaded to our servers if you are signed in and have an active session.
Strava data (optional)
Strava connection is optional. If connected, we fetch your recent activities via the Strava API to calculate training load and acute:chronic ratio. You can disconnect Strava at any time from your profile.
Menstrual cycle data (optional)
Cycle tracking is off by default and only available if you turn it on in your profile. Your period dates and settings are stored on your device only and are never uploaded to our servers. While tracking is on, the derived phase, cycle day and cycle length (never the dates themselves) are included in morning briefing and coach chat requests so the AI can interpret your metrics in context (see "AI-generated coaching" below). Turning tracking off stops that immediately.
Account data
Profile data is stored on our secure servers (Supabase) solely to personalise your readiness context and coaching recommendations.
Usage data
The app records a small number of product events against your account (for example: app opened, score shown, paywall shown, briefing opened, onboarding completed) so we can see which parts of Readiness are used and where people get stuck. These events carry no health values. They are stored with the rest of your account data on Supabase in the EU, are never shared with anyone, and are deleted with your account. The app contains no crash-reporting, analytics or advertising SDKs from third parties.
The AI features also keep a per-account count of how many briefings, coach replies and reports were generated, and when, so we can apply the fair-use limits described in Section 2.
We do not use your data for advertising, profiling, or any purpose unrelated to providing the Readiness app service.
For readers in the European Economic Area and the United Kingdom: the data controller is Boban Ilik, operating Readiness (contact details in Section 9). We rely on the following legal bases:
Readiness does not make automated decisions about you that produce legal or similarly significant effects. The AI features generate coaching text from your metrics; they do not decide anything about your access to the service.
Account and score data is stored on Supabase servers in the EU (Ireland). All data in transit is encrypted via TLS. Your readiness score is calculated on your device; the daily metrics behind it (HRV, resting heart rate, sleep duration and efficiency) are stored alongside the score so your history follows your account. That data is encrypted at rest by our hosting provider and protected by row-level security, so it is only readable through your own signed-in account.
Retention. Account, profile, and score data is kept for as long as your account is active, and permanently removed from our servers within 30 days of account deletion. Coach chat history, cached briefings, and preferences are stored only on your device; they are wiped when you sign into a different account and removed when you delete the app.
International transfers. Some of our service providers process data in the United States: Anthropic (AI coaching text), RevenueCat (subscription management) and, for this website only, Google (analytics). Where personal data leaves the EEA or UK, the transfer takes place under each provider's data processing agreement, which incorporates the European Commission's Standard Contractual Clauses.
Readiness uses Anthropic's Claude to turn your numbers into plain-English coaching. When a daily insight, morning briefing, weekly report, or coach chat reply is generated, we send Anthropic's API the data that reply needs:
We do not send your email address or any account identifier. Anthropic processes this data solely to generate the text you see, and not for advertising. Under Anthropic's API terms, data sent through the Claude platform is excluded from model training.
Your readiness score and its Recovery, Sleep, and Stress breakdown are calculated on your device from Apple Health data. Anthropic is involved only when an AI feature produces text for you.
Readiness is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.
You can access, correct, or delete your personal data at any time. If you are in the EEA or UK, the GDPR specifically gives you the right to: access your data; correct it; have it erased; restrict or object to its processing; receive it in a portable format; withdraw consent at any time; and lodge a complaint with your national data protection authority. To exercise any of these rights, use the in-app controls below or email us; we respond within 30 days.
We may update this policy from time to time. Significant changes will be communicated via in-app notification or email. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions about this privacy policy or how we handle your data, please contact us: