Privacy Policy
Emuqu is committed to protecting your privacy. This policy explains what data is collected, how it is stored, and how it is used.
The developer receives nothing unless you send it
Emuqu has no server, no account, and no login. The app never sends your data to the developer — not your heart rate, not your sleep, not your location, not your chats.
There is nowhere for it to go: the app contains no analytics, tracking, or crash-reporting service of any kind, and this is checked automatically before every release.
The developer receives only what you choose to email: a support request, an AI reply you report, or a diagnostic log you share.
Those emails are used only to answer you, and are deleted once your issue is resolved, and within 12 months at the latest.
Some features do send data to services outside the app. Each one is described below: what it sends, where, and when.
In each case the data goes straight from your device to that service, never through the developer.
Data Collection
Heart Rate & HRV Data
Emuqu records heart rate and beat-to-beat (RR) intervals from the Polar H10 or Polar Verity Sense you connect over Bluetooth, and wrist heart rate from your Apple Watch during workouts. These are used to calculate HRV metrics, recovery scores, training load and sleep analysis.
Apple Health
With your permission, Emuqu reads sleep, heart rate, resting heart rate, HRV, respiratory rate, blood oxygen and sleeping wrist temperature from Apple Health. It also reads VO2 max, heart rate recovery, workouts and routes, active energy, steps, flights climbed and exercise minutes. It reads walking, running, cycling and rowing distance, walking and running speed, physical effort, body weight, date of birth and biological sex. It saves the workouts you record, with their energy, distance and route. If you turn on Apple Health export, it also writes HRV (SDNN), heart rate, resting heart rate, and sleep detected from heart rate on nights Health has none. Apple Health data is used only to run the app's features. It is never used for advertising or sold. It reaches a third party only through a feature described below: a cloud AI provider you have agreed to, or a lookup that sends a route. Routes of workouts imported from Apple Health go to OpenTopoData when you look up their elevation, and to Overpass when the assistant loads one you saved.
Profile
Your age, sex, weight and heart-rate settings, typed in or filled from Apple Health, personalise your scores and zones. If you add them, a profile photo, the email contacts you save for the assistant and your default email recipients are kept with the rest of your data.
Location
Location is used to map outdoor workouts, record your trail in Get Me Back, find nearby trails, look up the weather, keep nearby street names ready for workout updates, and answer the AI assistant's questions about where you are. It is used only while the app is open or one of these features is running.
Microphone & Speech
Voice questions to the AI assistant are transcribed on your device when your device and language support it, and by Apple's speech recognition service when they do not.
Data Storage
On-Device Storage
Your data is stored in the app's private container on your device, and leaves it only through the features this policy describes. Emuqu runs no server of its own. It stays on your device until you delete it in the app or delete the app. A backup of your device made by iOS, such as iCloud Backup, can include it.
iCloud Sync
iCloud Sync is optional and off until you turn it on, during setup or in Settings → iCloud & Data, where you can also turn it off at any time. It copies your recordings, their analysis and your settings to Apple's CloudKit private database in your own iCloud account. Each is encrypted on your device before upload, with a key kept in your iCloud Keychain, so neither Apple nor the developer can read it. Only the date of each recording, and the start time of a backup of a recording still in progress, stay readable, so the app can find and sync them. Readings from Apple Health are never uploaded; scores Emuqu computes from them are, encrypted on your iPhone first. Those readings are sleep, vitals, VO2 max, workouts from Apple Health, Apple Watch heart rate, and a birthday, sex or weight filled from Apple Health. Each device reads them from Apple Health itself.
Data Sharing
No Selling, No Tracking
Emuqu never sells your data, and contains no analytics SDKs, advertising frameworks, or tracking services.
AI Assistant
Apple Intelligence, the default, runs on your device. If you add your own API key for a cloud provider (Anthropic, OpenAI, Google, xAI or DeepSeek), your messages go directly to that provider, with the data needed to answer them. That can include heart rate, HRV, sleep, overnight vitals such as blood oxygen, training load and workouts, today's steps and distance, your profile, your location during workouts, while a Get Me Back trail runs or when you ask for directions, the start points of your recent trails and GPS workouts, and your saved home address when you ask to be led home. It can also include your notes, tags and morning check-ins, which may mention symptoms or mood, and the facts, notes and to-dos saved to the assistant's memory, which may mention health conditions. When the assistant looks up a contact or writes an email for you, it also includes the names, email addresses and notes of your saved email contacts and your default email recipients. Before anything is sent, Emuqu shows you exactly what that provider will receive and asks for your permission. You can withdraw it at any time in Settings → Flo → the provider → Withdraw consent, and removing the provider's key withdraws it too. Data already sent is kept under that provider's own retention policy. Anthropic, OpenAI and xAI say they do not use what you send through their APIs to train their models, unless you have opted in to that in your account with them. Google does not use what you send with a paid Gemini API key to improve its products. With a free key, Google may use it, including health data, to improve its products and AI, and people may review it. DeepSeek says it may use what you send to train and improve its models; its privacy policy says you can opt out by emailing privacy@deepseek.com. DeepSeek processes and stores data in the People's Republic of China.
Other Services
If you add a Tavily key for web search, the search queries the assistant writes go to Tavily. Tavily may use parts of those queries to improve its search results. If you turn on web search while using Claude, Anthropic runs the searches itself, with the queries the assistant writes. Weather during outdoor workouts is looked up with your location rounded to about 1 km, sent to MET Norway (the Norwegian Meteorological Institute), whose weather data the app uses under the CC BY 4.0 licence. Heat tracking uses only the weather saved with your workouts and sends nothing. Overpass, an OpenStreetMap service, receives approximate coordinates: for trail discovery, the centre of the search, rounded to about 100 m. For nearby roads it receives the centre of the 250 m square you are in during an outdoor workout, or of each turn of a saved route the assistant loads for you. Overpass is asked at overpass.private.coffee, or at overpass-api.de when that one does not answer. Addresses are looked up with Apple's geocoder. When you look up real elevation for a workout, including one imported from Apple Health, up to 100 of its route's points, rounded to about 11 m, are sent to OpenTopoData. If you choose WhisperKit for voice input, its speech model is downloaded once from Hugging Face (huggingface.co). Your voice is still transcribed on your device. Tavily and Anthropic searches run under your own key or account. The weather, map, elevation and model-download services get no account or name, though like any web request they see your device's IP address.
How These Services Treat Your Data
These services are Anthropic, OpenAI, Google, xAI and DeepSeek for the AI assistant, Tavily for web search, and Apple for speech recognition and address lookup. They also include MET Norway for weather, Overpass for trails and nearby roads, OpenTopoData for elevation, and Hugging Face for the speech model download. Data reaches these services only when you use a feature that needs them. A cloud AI provider receives nothing until you add your own key and agree to what it will receive, and Tavily nothing until you add your own Tavily key. Each service receives the data directly from your device and handles it under its own privacy policy and terms, which you should review before you use it. They are linked below. The AI and search services, Apple, MET Norway, Hugging Face and the Overpass server at overpass.private.coffee publish privacy policies. The developer does not set or enforce them. The Overpass server at overpass-api.de and OpenTopoData publish no privacy policy, so their service pages are linked. They receive only approximate coordinates, with no account, name or identifier. The developer shares no data with these services.
Your Control
Data Export & Deletion
Export all of your data at any time from Settings → iCloud & Data → Export Data. Delete single recordings in the app, or everything with Settings → Advanced Data Controls → Delete All My Data, which erases your data on this device and in iCloud and removes your API keys. Delete All My Data asks you to type a confirmation phrase and confirm once more before it erases anything. Deleting the app removes its data from this device, but not what Emuqu keeps in the iOS keychain, which iOS keeps after an app is deleted. That is your API keys, the keys that encrypt your recordings and your iCloud copies, and a record of your free trial and of any beta access. To remove the API keys, use Delete All My Data before you delete the app. The other items hold none of your health data; the trial record stays so that reinstalling continues the same trial. iCloud copies stay until you use Delete All My Data or remove them in your iCloud settings. A diagnostic log you export from Troubleshooting has health values and GPS coordinates removed, but can contain parts of what you said to the assistant by voice and the names of nearby streets. It is sent only if you choose to share it.
Children’s Privacy
Not Intended for Children
Emuqu is for users aged 13 and over — you confirm this when you accept the health disclaimer at first launch. The app is not directed at children, and the developer does not knowingly collect personal data from anyone under 13. Emuqu has no accounts and no server of its own, so the developer holds no app data, only any emails sent to them, which are deleted on request. If a child has used the app on your device, Settings → Advanced Data Controls → Delete All My Data erases everything on the device and in iCloud.
Sensor Permissions
Permissions
Emuqu asks for Bluetooth, Apple Health, location, motion, microphone, speech recognition, notification and add-only photo library permission only when a feature needs it. You can revoke any of them at any time in your device's Settings.
Data Controller
Emuqu is operated as an independent project by Chris Sharp. The developer is the data controller for any personal data processed by this app.
Contact
Privacy questions, GDPR/CCPA data-subject requests (access, deletion, correction), and security reports:
You can also contact the developer through the App Store listing.