Privacy Policy
Effective 15 September 2026Controller: Emmanqubic (Pty) Ltd, South Africa · privacy@emmanqubic.com
Qinaro is built local-first: your workouts, routes, and health metrics live on your phone. This policy explains the little we collect, why, and your rights under POPIA (South Africa) and GDPR.
What we collect
| Data | Where it lives | Why |
|---|---|---|
| Workout sessions (sport, duration, effort score) | On your device, and synced to our servers (Supabase, EU region) under an anonymous ID so leagues and history survive a reinstall | Scoring, history, leagues |
| GPS routes | On your device | Journey replay. Routes never leave your phone unless you export or share them yourself |
| Heart rate, resting HR, HRV, sleep (Apple Health / Oura) | Read on-device. When a workout is scored, that session's heart-rate samples are sent over TLS to our scoring server, used to compute the score, and not stored — only the score and its breakdown are kept | Effort scoring and readiness |
| Age-derived HR baseline | On your device and on our servers (HR max, resting HR, and a rolling distribution of your effort loads) | Personal effort calibration |
| Imported workouts (GPX/FIT files, Apple Health) | Parsed on your device; the resulting scores sync like any other workout | Calibrate your effort model from your history |
| Device attestation key id (Apple App Attest) | A Secure Enclave key's public half is stored on our servers | Confirm a workout came from a genuine Qinaro install (the verified-effort badge) — no personal data |
| Purchase status (Qinaro Pro) | RevenueCat (our subscription processor) | Entitlements; we never see your card details |
We do not collect: your name or email (no account is required — Qinaro creates an anonymous ID on first launch), advertising identifiers, or your contacts. Qinaro records location only while a workout you started is running — including while your screen is locked or the app is in the background, so a locked phone never truncates your route — and stops the moment you tap Finish. Location is never recorded outside a workout.
Health data
Apple Health (HealthKit) data is used solely to compute your effort and readiness scores. It is never used for advertising, never sold, and never shared with third parties. You can revoke access at any time in iOS Settings → Health → Data Access.
Sharing
Nothing is shared unless you share it. Highlight cards you export through the share sheet contain your score and an effort-painted route shape — not map tiles or coordinates.
Your rights
- Delete everything:Profile → Settings → “Delete all my data” wipes every workout, route, token, and setting from your device immediately, and at the same time deletes every synced record (workouts, baseline, league membership, wearable tokens, profile) from our servers and retires the anonymous ID. Email privacy@emmanqubic.com if you want written confirmation.
- Access / portability / correction: email privacy@emmanqubic.com.
Retention & security
Synced data is retained while you use Qinaro and deleted on request. Transport is TLS; server data is stored with row-level security so only you can read your records. Scores are written only by our servers, never by the app, so leaderboards cannot be edited from a device.
Changes
We will not move data collection in a more invasive direction without asking first, in the app, before it happens. Material changes are announced in-app with 30 days' notice.