Consumer Health Data Privacy Policy

Effective date: September 24, 2026 · Last updated: November 4, 2026
Who this is from: Soltra LLC, a California limited liability company (“Soltra”, “we”, “us”)

1. The consumer health data we collect

• Apple Health data. With your permission, Soltra reads workouts; workout routes; heart rate; active energy burned; cycling cadence, distance, and power; running power; step count; walking and running distance; and body mass.
• Workout details. For each activity: its type, when it started and ended, how far and how long it went, elevation gained and lost, averages and peaks, step count, and the device or app that recorded it. Also the title and description you give it and whether you marked it a race.
• Workout routes. The GPS route of each activity with the time of every point, plus any heart rate, cadence, power, temperature, and altitude readings the source recorded along it.
• Imported files. GPX, TCX, and FIT files, including those inside a ZIP export. These can hold the same route and sensor readings. Soltra also keeps each file’s name and whether its import worked.
• Body weight and calories. Your weight, read from Apple Health or typed in by you, is used to calculate the calories for each activity. The stored calorie figure can therefore be used to estimate your weight.
• Photo locations. The time and place of each photo you attach to an activity.
• What Soltra works out from the above. Your statistics and personal records, the map tiles your routes crossed, and the cities, boroughs, parks, regions, and countries they passed through.

Soltra does not collect information about health conditions, diagnoses, treatment, medication, reproductive or sexual health, gender-affirming care, or biometric identifiers and does not infer any of it.

2. Where it comes from

• Apple Health on your iPhone, for the types you allow.
• Recordings you make in Soltra, which use your iPhone’s location and motion sensors while the recording runs.
• Garmin Connect, if you connect your account: Garmin Connect sends Soltra the file of each new activity you record. The file can carry heart rate, cadence, power, temperature, and altitude along the route. Soltra writes nothing to Garmin Connect. No AI system at Soltra, or at any company that processes data for us, handles Garmin Connect data. Soltra doesn’t use Garmin Connect data, or anything derived from it, to train, evaluate, or improve AI models.
• Files you import: GPX, TCX, and FIT files, and ZIP exports from Strava, Garmin, or a similar service. Soltra doesn’t read activities from your Strava account.
• You, when you type in your weight, give an activity a title or description, or attach a photo.

3. Why we collect it and how we use it

We use consumer health data only for these purposes:

• Drawing your routes and territory on your map.
• Working out your statistics, records, and places.
• Placing the photos you attach on your map.
• Showing your import history.
• Calculating calories from your weight.
• Saving activities you record to Apple Health, if you allow it.
• Sending activities you record to Strava, if you connect it.
• Sending notifications about your activities, places, and imports.
• Measuring which features are used and whether they work so we can fix what breaks. Section 4 says what is sent.
• Complying with the law and keeping Soltra secure.

Your consent. Soltra reads Apple Health, your location, motion data, and your photo library only after you allow each one in the iOS permission prompt. Importing a file starts only when you pick it, Garmin Connect sends nothing until you connect your account, and Strava receives nothing until you connect it. Notifications are on by default. If you bring no activities during setup, Soltra turns on quiet notifications, which iOS allows without asking and shows only in Notification Center. iOS asks you before notifications can appear as banners or make a sound. Usage analytics are on by default. You can turn them off with Share usage analytics in Soltra’s Settings › Privacy, after which no usage analytics leave your iPhone.

4. What we share and who receives it

We do not sell consumer health data. Soltra has no affiliates. These companies receive it, each only as described:

• Supabase, Inc. hosts our database, file storage, and server code on our instructions and so holds every category in Section 1 (supabase.com/privacy, [email protected]).
• Apple Inc. receives the workouts, routes, active energy, distances, elevation gain, and moving time of activities you record in Soltra, only if you let Soltra write to Apple Health. Apple also delivers notifications, as described below (apple.com/privacy/contact).
• Strava, Inc. receives each activity you record in Soltra that has a GPS route, only while your Strava account is connected. For each one it receives the title, type, start time, route points with their times, distance, altitude, elapsed and active time, and elevation gain. Strava then holds it under its own privacy policy (strava.com/legal/privacy, [email protected]).
• Mapbox, Inc. receives the part of the map you are looking at so it can draw it. Its location telemetry stays off unless you turn it on from the map’s ⓘ menu (mapbox.com/legal/privacy, [email protected]).
• PostHog, Inc. receives usage analytics tied to your Soltra account identifier, which say what features you use and whether they worked. Whether you connected Apple Health during setup is part of usage analytics. They note when you record, import, or share an activity, including one that came from Apple Health, when Soltra matches photos to an activity, which kind of notification you opened, and whether each worked. They don’t carry the type of a workout or any other detail about it. It doesn’t receive GPS coordinates, routes, health readings, or place names (posthog.com/privacy, [email protected]).
• Google LLC (Firebase Cloud Messaging) and Apple deliver Soltra’s notifications. A notification can name the activity type, the recording device, a place and its region, or the kind of personal record and where it happened. It can give a rounded distance or elevation, a coverage percentage, or a landmark whose area your tiles now match. It can also say how an import went, including how many files could not be read, and give a count of your activities, tiles, cities, parks, or countries or where a new place ranks among them. It doesn’t contain coordinates, a route, raw sensor readings, a file name, or anything you typed (policies.google.com/privacy, support.google.com/policies/contact/general_privacy_form).

Google’s Firebase Crashlytics receives crash and freeze reports that can show whether a recording or an Apple Health sync was running when the app crashed or, for a freeze, when the report was sent. They carry no health readings, routes, or locations and are not linked to your account. RevenueCat, Inc., which tracks subscriptions, receives no consumer health data.

No third party is allowed to collect consumer health data about you over time and across other websites or online services.

Apart from the above, we would disclose consumer health data only where the law requires it, to protect someone’s safety, or to a new owner if Soltra is sold. In that last case this policy would keep applying and we would tell you.

5. Your rights and how to use them

• Access it. Ask whether we collect, share, or sell your consumer health data, get a copy, and get the list of companies that received it with their contact details (Section 4).
• Delete it. Soltra’s Settings has three delete actions. Delete all photos removes attached photos and their locations. Delete your data removes your activities, routes, statistics, imports, photos, and stored weight. Delete your account does all of that and closes the account. You can also ask us by email. Deleting your data or account also deletes the analytics PostHog holds under your account. Copies in our hosting provider’s backups expire within six months and aren’t used to bring back what you deleted. Strava gives us no way to delete activities already sent there. Delete those in Strava yourself.
• Withdraw consent. Turn off Apple Health access in the Health app › your profile › Apps (under Privacy) › Soltra. Turn off location, motion, photo, or notification access in iOS Settings › Soltra, or turn off individual notifications in Soltra’s Settings. Disconnect Strava or Garmin Connect, or turn off Share usage analytics, in Soltra’s Settings. You can also remove Soltra from your connected apps in Garmin Connect. Withdrawing stops collection from then on. To remove what was already collected, delete it.
• Correct it. Edit an activity’s title, type, or description and your weight in the app. For anything else, email us.

To make a request, email [email protected] or write to Soltra LLC, 440 N Barranca Ave #5017, Covina, CA 91723, United States, and say which right you are using. To confirm a request is yours, we reply to the email address your Sign in with Apple account gave us and act on the answer from that address. We respond within the time the law allows.

6. Appeals

If we turn down a request, we tell you why. To appeal, reply to our decision or email [email protected] with “Appeal” in the subject line. We answer an appeal within the time the law allows. If we deny it, you can contact your state attorney general: Washington at atg.wa.gov/file-complaint, Nevada at ag.nv.gov, or Connecticut at portal.ct.gov/ag.

7. Changes to this policy

If we make a material change to this policy, we tell you in the app before it takes effect and update the dates at the top.