Privacy Policy

Effective Date: January 2025

1. Introduction

Welcome to Prime Human ("Project", "we", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

2. Information We Collect

We collect personal information that you provide to us, such as your name, email address, and health-related data necessary for the application's functionality.

We also collect data through integrations with third-party services that you explicitly authorize, such as Strava, Whoop, Garmin, and Oura.

3. Strava Data

If you connect your Strava account, we collect the following data types to analyze your performance and recovery:

Activity data (date, duration, distance, heart rate, power, etc.)
Profile information (to display your avatar)

Data Retention & Deletion

We only retain your Strava data while your account is active and connected.

Deauthorization: If you disconnect Strava from our settings or revoke access via Strava settings, we remove your Strava-sourced data from our system.
Deletion: If you delete your Strava account, we receive a notification and permanently delete your associated data within 48 hours.

Data Sharing

We do not share, sell, or rent your Strava data to third parties. Data is used exclusively to provide you with insights within this application.

4. Garmin Data

Data Collection

If you connect your Garmin Connect™ account, we collect the following data types (only for the permissions you explicitly authorize) via the official Garmin Connect Developer Program APIs, delivered to us directly by Garmin through secure push notifications, to provide you with health and performance insights:

Daily activity and wellness summaries (steps, calories, heart rate, stress, body battery)
Sleep data (duration, stages, quality)
Activities (type, duration, heart rate, distance, calories)
Heart rate variability (HRV), pulse oximetry (SpO2) and respiration
Body composition and user fitness metrics (e.g. VO2 Max)

How Garmin Data Is Used & Processed

Garmin data is used exclusively to display your health and performance metrics within Prime Human, to compute daily and trend summaries (e.g. recovery, sleep and training load insights), and — only with your explicit consent — to make those metrics visible to the medical professionals you choose to share your data with. All processing of Garmin data is performed by our own application logic. We do not use any third-party artificial intelligence (AI), machine learning, or external data-processing services on your Garmin data.

Data Storage

Garmin data is stored in our database hosted by Supabase, and our application is hosted on Vercel. These infrastructure providers act solely as data processors on our behalf (storage and hosting) and do not access or use your Garmin data for their own purposes. Access tokens for your Garmin account are encrypted at rest, and access to your health data is protected by row-level security so that only you — and the medical professionals you have explicitly authorized — can view it.

Data Retention & Deletion

We only retain your Garmin data while your account is active and connected.

Deauthorization: If you disconnect Garmin from our settings, we deregister your account with Garmin and remove your Garmin-sourced data from our system.
Permission changes: If you revoke a specific Garmin permission, we stop using and delete the corresponding data.
Deletion: If you revoke access or delete your account on Garmin, we receive a deregistration notification and permanently delete your associated data.

Data Sharing

We do not sell, rent, or share your Garmin data with third parties, and we do not pass it to any third-party AI or analytics services. Other than the infrastructure providers listed above (acting as processors for storage and hosting only), no third party receives your Garmin data. Data is used exclusively to provide you with insights within this application, including with the medical professionals you choose to share your data with.

5. Contact Us

If you have questions or comments about this policy, you may email us at md@primehumanperformance.com