Health Data: What We Keep, What We Don't, and Why
Last updated: October 5, 2026 · What changed
Your health data is yours. We built Upscore so that we cannot see most of it: what it reads from Apple Health or Health Connect never leaves your phone, so there is no copy of your sleep, your heart rate variability, your weight or your cycle anywhere we could look, lose or be asked for. The one piece we do keep is the heart rate from your own Upscore sessions, and only with your consent. This page says exactly what that means, in plain words, with nothing left out. If anything here is unclear, write to us and we will fix the page.
The short version
- Most of your health data never leaves your phone, so we can't see it. Everything Upscore reads from Apple Health or Health Connect for Train insights (sleep, resting heart rate, HRV, weight, your cycle and the rest) is read on the device, shown to you, and never sent anywhere. Not to us, not to anyone.
- We do store heart rate and calories burned from your Upscore sessions, if you choose to share them. This is what lets you view your session recaps and trends on the web and across your devices. We ask before your first session; decline and the app works the same without them, and you can switch it off any time. Those are the only two numbers from a health app we store. We also keep your steps on the pad with every session; that is a game statistic (arrows stepped, worked out from the songs you played), not a pedometer reading, but we write it to your health app as steps, so we treat it with the same care.
- Nobody besides you can view the health data on your device, and nobody else sees what we store. Not other players, not advertisers, not our analytics, not Edi, the AI coach. The people who run Upscore can reach the database to keep it running and to answer your requests, and for nothing else. We do not sell health data, or any data, and never will.
- You stay in control. Switch storage off, delete any session, delete your account, or ask us for a copy of everything we hold.
Every type of data, at a glance
"Database" means our account database. "Your phone, never shared" means read on the device and never sent anywhere. "Your health app" means Apple Health or Health Connect on your phone, where you control it.
| Data | Comes from | Where it lives | Why |
|---|---|---|---|
| Heart rate during a session, every 1 to 5 seconds | Apple Watch, Wear OS watch or Bluetooth monitor | Database, only with your consent | The recap's heart rate chart and the Train trends, on any phone or the web |
| Session average and peak heart rate, per-song heart rate and zone, time in zones, one-minute recovery, heart rate by level | Worked out from the line above | Database, only with your consent | The recap and the Train trends |
| Session calories | iPhone: your Apple Watch, through Apple Health. Android: estimated on the phone from heart rate and weight | Database, only with your consent | The recap and the calories trend |
| Session time, length, songs, scores, records | The session you record | Database | This is the session itself |
| Steps on the pad (arrows stepped, not a pedometer) | Worked out from the charts you played | Database | The recap and the steps trend |
| Sleep, sleep stages, bedtime, wake time | Apple Health or Health Connect (Train insights) | Your phone, never shared | Life Meter, Daily Health, your charts |
| Resting heart rate, heart rate variability, heart rate | Apple Health or Health Connect (Train insights) | Your phone, never shared | Life Meter, your charts |
| Breathing rate, blood oxygen, wrist temperature, daily steps | Apple Health or Health Connect (Train insights) | Your phone, never shared | Daily Health, your charts |
| Weight, body fat, lean mass, VO2 max | Apple Health or Health Connect (Train insights) | Your phone, never shared | Your charts |
| Exercise minutes, active energy, workouts from other apps, mindful minutes, time in daylight | Apple Health or Health Connect (Train insights) | Your phone, never shared | Life Meter, your charts |
| Calories eaten, water, caffeine, protein, carbs, alcohol | Apple Health or Health Connect (Train insights) | Your phone, never shared | Your charts |
| Menstrual cycle | Apple Health or Health Connect (Train insights). You switch it on separately, in the same permission screen | Your phone, never shared | The cycle insight, your charts |
| Weight, for the calorie estimate | Health Connect (Android), once per session | Your phone, never shared | The calorie estimate for a session |
| Each session as a workout, with steps, heart rate and calories | Written by Upscore after a session | Your health app | So it shows up alongside your other workouts |
Stored in our database
The database is run for us by Supabase in the United States (Ohio). Everything in it is tied to your account and visible to your account only; no other player, league, Arena board or profile page ever shows heart rate, calories or steps.
Why we store heart rate at all
Your session recap, the heart rate chart in it, and the heart rate trends on the Train tab are built from this data. Storing it in your account is what lets you open them on any phone you sign in to, or on the web, and keep them when you change phones. If it stayed only on the phone that recorded it, a new phone would start with no history.
You choose, and you can change your mind
When you first start a session we ask whether Upscore may store your heart rate. Decline, and sessions are stored without heart rate or calories; everything else about the app works the same. Consent, and you can withdraw it later under Profile > Settings > About and Privacy > Heart Rate Data. Until you have given consent, the database refuses heart rate: a session stored without your consent has none, whatever the watch recorded. Session time, songs, scores, records and steps on the pad are stored either way; they are the session itself.
If our database were ever breached
What could be exposed is what the table marks "Database": your session history, with its heart rate timelines and calories if you gave consent. Those rows are stored under your account number, not your name or email, which live in a separate part of the database; they are still linked to your account, so we do not call them anonymous. Your sleep, body, nutrition and cycle data can never be exposed in a breach, because we never collect or store it.
How long we keep it
Until you delete it; there is no automatic expiry. Deleting a session removes its heart rate timeline, its per-song heart rate and every number worked out from them. Deleting your account removes all of your sessions and everything above. Our database provider keeps backups for disaster recovery; a deleted record can remain in those backups until they roll off, and is never restored into the live service.
Stays on your phone
Train insights is being tested with a small group and is not on for everyone yet. When it is on, Upscore asks Apple Health (iPhone) or Health Connect (Android) once, in one permission screen, for the types the table marks "Your phone, never shared". Every type has its own switch there, so you choose which to allow. The readings are used on your phone to work out the Life Meter, the levels it suggests you play, the weekly recap, Daily Health and the sentences on your charts, and all of that is shown only to you. The readings themselves are not stored anywhere, and are read fresh each time you open the Train tab. The only things kept on the phone are your chart settings (which metrics you chose), and they never leave it.
On Android, Upscore also reads your most recent weight from Health Connect once per session, to estimate the calories you burned, because Android watches do not report a calorie count the way an Apple Watch does. The estimate is stored with the session if you gave consent; your weight is not. If you have not allowed weight, you can type one into Upscore instead, and that number stays on your phone too.
Your health app gets a copy of each session: Upscore writes the workout to Apple Health or Health Connect with its steps on the pad, heart rate and calories, so it sits alongside your other workouts. That copy is yours, in your health app, under your control.
What shows on the screen. During a session your live heart rate, calories and steps show in the app and, on iPhone, on the Lock Screen and in the Dynamic Island. Anyone who can see your phone can see them. Share cards from a recap can include your average and peak heart rate; they are made on your phone and go only where you send them.
Who else is involved
- Edi, the AI coach, never sees it. Edi reads your scores and goals. Edi has no access to your sessions, your heart rate or anything from your health app, and nothing from them is sent to the AI providers behind Edi.
- Analytics never sees it. We use PostHog to understand how the app is used. Screens that show health data, including the whole Train tab, the live session, the recap and your sessions list, are blanked out of its screen recordings, and no event we send carries a heart rate, a calorie count, a body reading, or anything worked out from one. You can switch analytics off entirely under Profile > Settings > About and Privacy > Privacy.
- Crash reports go to Sentry. When the app hits an error, Sentry can keep a short recording of the screens before it. In that recording every piece of text, every image and every chart is blanked; what remains is the layout of the screen. Taps on health screens are not recorded.
- Supabase runs the database. Apple and Google run the health apps on your phone and the connection between your watch and phone, under their own privacy terms.
- Nobody else receives your health data. We do not sell it, and we do not use it for advertising. If we ever want to use it for anything new, we will ask you first.
- Legal requests. Your sleep, body, nutrition and cycle data can never be handed over in response to a legal request or a subpoena, because we never collect or store it; nobody can compel us to produce what does not exist. For what we do store (your sessions, with heart rate if you gave consent), we hand over data only when the law compels us to, and only what it compels. If Upscore changed hands, this notice would bind the new owner, and you would hear from us before anything about your data changed.
Your controls
- Stop storing heart rate. Profile > Settings > About and Privacy > Heart Rate Data, on iPhone and Android. From then on, sessions are stored without heart rate or calories. It does not remove what was stored before; delete those sessions, or your account, for that.
- Delete a session from its recap. Its heart rate data goes with it.
- Delete your account under Profile > Settings > Delete Account. Everything goes.
- Get a copy of your data. Email us (below) and we will send you everything we hold about you, within 45 days.
- Change what Upscore may read. On iPhone: open the Health app, tap your picture, then Apps > Upscore. On Android: open the Health Connect app, then App permissions > Upscore.
- Stop writing workouts to Health Connect under Profile > Connected Devices > Health Connect.
About this notice
This is the Consumer Health Data Notice of Pink Lumenade LLC, the company that makes Upscore (3130 Balfour Rd, Suite D #1023, Brentwood, CA 94513, USA). It is for people in Washington, Nevada and any other place with a consumer health data law, and it is written for everyone else too. It adds to our Privacy Policy, which covers everything else. Washington's My Health My Data Act asks for a notice that contains only what the Act requires, so there is also a Washington Consumer Health Data Privacy Policy: the same facts, in the statutory form, with nothing extra.
To withdraw consent, ask for a copy of your data, or ask us to delete health data we hold, email rinon@edi.dance. We answer within 45 days. If you disagree with our answer, reply to the same address and say so; we will look again and explain our reasoning. If you are in Washington and still disagree, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.
What changed
- October 5, 2026. Rewritten in plain words, with the table of every data type. Says where session heart rate goes and why, and that you can say no. Lists every Apple Health type Train insights reads. Says what a breach could expose, how backups work, and how to get a copy of your data. Analytics screen recordings now blank out every health screen, and no analytics event carries a health-derived value.
- September 26, 2026. First version.