Roxya

Consumer Health Data Privacy Policy

Effective: October 25, 2026. This policy covers consumer health data under the Washington My Health My Data Act (RCW 19.373), Nevada law (NRS 603A.400–603A.550) and Connecticut law (CGS 42-526). It applies to the Roxya iPhone app, the Roxya web app at roxya.app, and the Roxya apps for Garmin watches and Apple Watch.

Roxya is run by Aurélien Ferlay, Rue de la Combe 11C, 1196 Gland, Switzerland. Contact: contact@roxya.app.

1. Health data we collect, and why

Heart rate from your watch
What it isAverage, maximum and minimum heart rate for each session and each part of it; calories; on Apple Watch, cadence and running power
How we use itTo record your sessions and show your progress, training zones and training load
Apple Health values (only if you connect Apple Health)
What it isOne value per day for: workouts, heart rate, resting heart rate, heart-rate variability, active and resting energy, walking and running distance, steps, VO2max, body weight, body-fat percentage, sleep
How we use itTo show recovery, sleep and training load, and to adapt your plan
Body and fitness measures you enter
What it isMaximum, resting and threshold heart rate, VO2max, body-weight log, height, age, paces, personal records, and any pain or injuries you note
How we use itTo compute your training zones, targets and statistics
Figures we work out
What it isEstimated maximum and resting heart rate, estimated VO2max and race times, training-zone boundaries, recovery and readiness scores, training load
How we use itTo show those features; estimates are computed when shown and not stored
What you tell the AI coach (only with the Roxya Coach subscription and your separate permission)
What it isYour messages, the text of your voice messages, the photos you attach, and anything they say about your health
How we use itTo answer you and to propose changes to your workouts, plan and profile. Changes apply only when you confirm them
Data from the previous Roxya app
What it isNutrition data (foods, meal logs, goals) that may still be stored with your account, plus an offline copy of the old nutrition database
How we use itNot used. Kept until you delete your account; write to us and we delete your part of the offline copy

We do not sell consumer health data. We do not use it for advertising. We do not train AI models on it. We do not use geofences.

2. Where it comes from

  • You, in the app or web app.
  • Your Garmin watch (its requests pass through the Garmin Connect app on your phone).
  • Your Apple Watch.
  • Apple Health on your iPhone.
  • Our server's calculations.
  • The previous Roxya app, if you used it.

3. Health data we share, and with whom

We share consumer health data only with:

  • Other Roxya users: your session heart rate, only if you turn on Privacy › Shared sessions › Heart rate. This is off by default, and blocked athletes never see it.
  • AI assistants you connect yourself: Claude (Anthropic), and ChatGPT or Codex (OpenAI). They read what you authorise, heart rate and Apple Health data included, under their own terms.
  • Authorities, only where the law requires it.

We have no affiliates.

These service providers process health data for us, under contract and on our instructions only:

Railway, with its storage provider Tigris
What it does for RoxyaHosting, database, photos and videos
WhereAmsterdam, Netherlands
Anthropic
What it does for RoxyaThe AI coach's answers and web searches
WhereUSA
OpenAI
What it does for RoxyaVoice messages, and the coach when Claude is unavailable
WhereUSA

4. How it is processed

  • Storage and access: the data is stored on our server in Amsterdam. Connections are encrypted. Only Roxya's operator can access it.
  • AI coach: requests go to the providers named above. They keep them for up to 30 days; Anthropic may keep a request its safety systems flag for up to 2 years.
  • No tracking: no third party collects your health data across websites or apps through Roxya, and Roxya has no third-party trackers or analytics.

5. Your rights and how to use them

Write to contact@roxya.app from your account's e-mail address, or use the in-app controls below.

  • Confirm and access: you can ask whether we collect, share or sell your consumer health data. You can get a copy of it, and the list of every third party we shared it with, with a way to contact each one.
  • Withdraw consent at any time: pause or remove your watch in Devices; tap Delete Data on the Apple Health screen, or remove Roxya's access in the Health app; withdraw the coach permission in Settings › Privacy; remove a connected assistant in Settings › Integrations; turn off heart-rate sharing in Privacy › Shared sessions.
  • Delete: you can delete sessions, Apple Health data, coach history or your whole account in the app, or ask us by e-mail. We delete within 30 days of confirming the request is yours, and we tell our service providers and the third parties we shared with to delete too. Copies in backups are deleted within 89 days, when our host's backups expire.
  • Review and correct: edit your profile, sessions and measures in the app, or write to us.
  • Appeal: if we refuse a request, reply with "Appeal" in the subject. We answer in writing within 45 days, with our reasons. If we deny the appeal, you can complain to the Attorney General of your state: Washington; Nevada; Connecticut.

We answer within 45 days. If needed, we may extend this once by 45 days, and if we do, we tell you why within the first 45. Answers are free at least twice a year. We never treat you differently for using these rights.

6. Changes

Every change is published here with its date before it applies. We tell you in the app and by e-mail. If we want to collect or share new categories of health data, or use it for a new purpose, we ask for your consent first.