Recovery privacy policy

Who this policy covers

This policy covers the Recovery app on iPhone, with its Apple Watch and widget companions, and on Android, with its Wear OS companion. It does not cover the separate Coach Adam James coaching website, which has its own privacy policy.

The Android package name is com.recovery.phone. The governing jurisdiction is the United Kingdom.

Recovery is for people aged 16 and over. It is not directed at anyone under 16. If a person under 16 created an optional coaching account, email coaching@ptadamjames.com and we will remove the account data we control.

Recovery is not a medical device

Recovery is a wellness companion. It does not diagnose, monitor, treat, or rule out a medical condition. It does not estimate blood pressure, detect arrhythmia, or replace emergency care or a clinician. Readiness and other figures are on-device wellness estimates, not clinical measurements, and may be incomplete or inaccurate. Do not use them to make medical decisions.

If you have chest pain, fainting, severe shortness of breath, new neurological symptoms, or symptoms that feel urgent, seek urgent medical care.

Health data is read only and stays on the phone

• Health data is read only. Recovery does not write health records back to Apple Health or Health Connect.
• Health data, journal text, and readiness estimates are kept on the phone. They are not uploaded to Recovery servers. Scoring and daily guidance run on the phone with a built-in engine, not a cloud AI model.
• On Android, Recovery can read heart rate variability, resting heart rate, heart rate, sleep, steps, step cadence, and workouts from Health Connect. Steps, step cadence, and workouts only feed data-quality labels, not readiness. Reads happen only while the app is open: once a day when you open Today, or when you choose Refresh. Each read covers about the last 30 days.
• Recovery's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
• On iPhone, Recovery can read heartbeat series, heart rate, resting heart rate, walking heart rate average, heart rate variability, VO2 max, blood oxygen, sleep, respiratory rate, sleeping wrist temperature, and State of Mind from Apple Health, where your devices support them. Workouts and active energy are asked for separately, for training load. Recovery keeps derived summaries, not a lasting copy of raw heart-rate traces, beat-to-beat intervals, sleep stages, or workout streams.
• You can grant some, all, or none of these. Revoking one stops future reads of it.
• You can use the local journal without granting health access and without creating an account.

Watch and widgets

The Wear OS app does not read Health Connect itself. When a watch is paired, the Android phone may send it a short derived summary over Google's Wear Data Layer. The summary can include readiness, recovery and sleep display scores, data-quality labels, a next action, journal energy and stress ratings, and up to 7 days of that history. It does not include raw heart-rate, sleep-session, or step records.

That send is phone-to-watch transport. Google may relay it through its servers when Bluetooth is unavailable, and Google describes that relay as end-to-end encrypted. It is not a Recovery upload of your health records.

On iPhone, the Apple Watch app and the widgets show a compact readiness summary kept in storage shared between the apps on your devices.

Optional coaching sign-in

Coaching sign-in is optional and is offered only where the app build supports it. If you sign in with your email, Recovery stores your email and sign-in tokens on the phone, in the Android Keystore or the iPhone Keychain. It sends your email and the tokens to Supabase Auth, and the tokens to a coaching access check at ptadamjames.com. That check returns your email and which coaching features the account may use. Recovery never sends health data, journal text, measured values, or readiness results with them.

Sign-in is not required to use the local journal, to read health data you have allowed, or to restore an existing purchase.

Service providers

• Supabase provides the optional coaching sign-in.
• The coaching access check is hosted on Vercel.
• Google provides Google Play Billing and the Wear Data Layer.
• Apple provides Apple Health, the App Store, and device services, and is responsible for its own processing of them.
• These providers may process account or transport data outside the UK. Supabase and Vercel handle sign-in and access checks, not your Recovery health records.

Purchases

Apple or Google processes a store payment. Recovery keeps only a local purchase flag on the phone. An existing Recovery purchase from Google Play stays valid. Signing out of coaching does not clear that flag and does not cancel the store purchase. You manage, cancel, or ask for refunds in the App Store or Google Play.

Reminders and exports

• On Android 13 and later, if you turn on reminders, Recovery asks to show local check-in reminders. They come from the phone, not a server, and are not medical alerts.
• On Android, you can export a text summary of check-ins, tags, notes, and data-quality summaries through the share sheet. It does not include measured Health Connect values, medication notes, or readiness tables.
• On iPhone, you can export derived summaries as a file protected by a passphrase. A separate dashboard export is off until you turn it on. If you leave its passphrase blank, the file is not encrypted. Neither export includes raw beat-to-beat data.
• An export only leaves the phone if you send it somewhere. Recovery does not upload it.

What we do not do

• We do not sell personal or health data.
• We do not use health data for ads, and Recovery does not include advertising or analytics SDKs or use advertising IDs for tracking.
• We do not upload health records, journal text, or readiness results to Recovery servers.
• We do not use a cloud model to score your health data.

How long data stays on the phone

• On Android, a Health Connect import keeps about the last 30 days and is replaced on each successful refresh. Derived readiness history stays for about 45 days.
• Journal entries and other app data stay until you delete them in the app or uninstall Recovery.
• Coaching sign-in tokens stay until you sign out, the session ends, or you uninstall.
• The coaching access result is treated as stale after 6 hours on Android, and is cleared when you sign out.

Deletion and your controls

• On Android, Settings, then Data & privacy, then Delete local data clears the journal, caches, derived history, the local coaching session, and the local purchase flag, and asks a paired watch to drop its summary. It does not delete records inside Health Connect, cancel a purchase, or delete a coaching account.
• On iPhone, Settings, then Privacy & data lets you delete one kind of data or erase all Recovery data, including the coaching session.
• Revoke health access in Health Connect, then App permissions, then Recovery on Android, or in the Health app under Apps on iPhone.
• Uninstalling Recovery removes its local data from that phone.
• Recovery cannot erase health records that never left your phone, original records held by Apple Health or Health Connect, or purchase history held by Apple or Google.

Security

• Health and journal data stay in app-private storage on the phone. On Android, journal notes are also encrypted with a key held in the Android Keystore, and app backups are turned off on the phone and the watch.
• Coaching sign-in tokens are kept in the Android Keystore or the iPhone Keychain. Android sign-in links use PKCE.
• On Android, Recovery does not log health values, sign-in tokens, or journal text in production.
• We do not claim medical-grade security or any security certification for this app.

Your rights and requests

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or get a copy of personal data we control. Most Recovery data stays only on your phone, so use the in-app controls for it.

To ask for access to or deletion of optional coaching-account data that may exist off the phone, email coaching@ptadamjames.com from the address on the account. The steps are on the Recovery account deletion page.

You can complain to the UK Information Commissioner's Office about how your personal information is handled.

Changes to this policy

We update this policy when the app or the law changes, and we change the date at the top when we do. Larger changes may also be described in the app or on this website.