Privacy Policy

The short version

• No account, no analytics, no ads, no tracking.
• Your workouts are stored only on your device. There is no cloud sync and no server.
• I, the developer, never receive any of your data.
• The app only goes online to load map tiles and, if you've connected Withings, to sign you in there.

What extractor stores on your device

extractor saves your workouts (routes, heart rate, cadence, power and times), your gear, your profile and your settings in a database on your device. Nothing is uploaded.

You can delete workouts in the app at any time. Deleting the app removes all of its data. On Windows, the data lives in %APPDATA%\Eike Dreier\Extractor and stays there after uninstalling, so delete that folder too if you want everything gone.

If your device backs up apps (iCloud Backup, Android backup or Time Machine), those backups can include extractor's data. Apple and Google handle them under your account.

Apple Health and Health Connect

On iPhone and Android, extractor can import workouts from Apple Health or Health Connect. It asks for permission first and only reads what you allow.

• What it reads: workouts, workout routes and heart rate, including older history.
• What it does with the data: copies it into the database on your device so you can view, organize and export your workouts.
• What it never does: write to Apple Health or Health Connect, send health data anywhere, share or sell it, or use it for advertising.

You can turn access off at any time: on iPhone in the Health app (profile → Apps → Extractor), on Android in Health Connect (App permissions → extractor). Workouts you already imported stay in extractor until you delete them.

Android permissions: READ_EXERCISE, READ_EXERCISE_ROUTES, READ_HEART_RATE, READ_HEALTH_DATA_HISTORY.

Withings

If you connect your Withings account, extractor talks to Withings directly, without going through a server of mine.

Your Withings email address and a hash of your password (never the password itself) are kept in your device's secure storage: Keychain, Android Keystore or Windows Credential Manager. They are only sent to Withings to sign in. Downloaded workouts are saved on your device.

Disconnecting Withings in Settings deletes the stored sign-in details. Your Withings account itself is covered by Withings' privacy policy.

Maps

Route maps use map tiles from OpenStreetMap. To load them, the app connects to tile.openstreetmap.org, which sees your IP address, the app's name and version, and the part of the map being shown. No workout data is sent. Tiles only load while a map is on screen.

See the OpenStreetMap Foundation's privacy policy.

Files you import or export

extractor only opens files you choose and only saves exports where you tell it to. Once you share a file with another app or service, that app's or service's privacy policy applies.

Notifications and Apple Intelligence

Reminders, for example about streaks or gear, are scheduled on your device. There are no push notifications. Apple Intelligence features run on your device.

App Store and Google Play

Apple and Google handle your download under their own privacy policies. They may show me anonymous statistics such as download numbers. I only see crash reports if you agreed to share them with developers. The app itself sends nothing.

If you email me

I use your email and anything you attach only to help you, and delete it once the issue is resolved. My email is hosted by Apple (iCloud Mail).

Children

extractor is not intended for children under 16.

Your rights

You can ask what data I have about you, have it corrected or deleted, restrict or object to its use, get a copy and withdraw your consent. You can also complain to a data protection authority.

Since your data stays on your device, you can view, export and delete it yourself in the app. For anything else, email hello@eikedreier.com.

Legal details (GDPR)

• Data on your device, Withings and support emails: to provide the features you use (Art. 6(1)(b)), and for emails also my legitimate interest in answering you (Art. 6(1)(f)).
• Health data: your explicit consent, given in the system's permission dialog (Art. 9(2)(a) and Art. 6(1)(a)). You can withdraw it at any time (Art. 7(3)).
• Map tiles: my legitimate interest in showing your routes on a map (Art. 6(1)(f)).
• Your rights: Art. 15 to 18, 20 and 21. Complaints: Art. 77.