PISTEBOUND

PISTEBOUND Consumer Health Data Privacy Policy

Version 1.1. Effective 20 October 2026.

This policy describes how we collect, use, share and keep consumer health data, as Washington's My Health My Data Act (chapter 19.373 RCW) and similar laws in other US states require. It adds to our Privacy Policy at https://pistebound.com/privacy, which describes all the personal data the PISTEBOUND app for iPhone, Apple Watch and Android phones (the "App") and the website pistebound.com process. Where this policy says less, the Privacy Policy applies; nothing here reduces a right the Privacy Policy gives you.

1. Who we are

  1. PISTEBOUND is provided by Kornel Sowiński, a sole trader registered in Poland under the business name SOWINS Kornel Sowiński, Orchów 159, 98-100 Łask, Poland ("we", "us").
  2. You can reach us by email at hello@owlet.studio, by phone at +48 794 081 482, by post at the address above, or in the App under More, "Contact us".

2. Health readings stay on your phone

  1. If you allow it in iOS, the iPhone app reads data from Apple Health, such as heart rate, energy, steps, sleep, height and weight. It shows these readings on your phone only and never sends them to us. The Apple Watch app saves heart rate in Apple Health and sends none to us. The Android app reads and writes no health data and does not use Health Connect.
  2. Only two things that start in Apple Health can reach our server, and only when you choose: the details about you that you fill in from Health and save to your account (section 3), and a ski workout you import from Health, which becomes a ski day with its route and without heart rate and is backed up like any other day.
  3. We never use Apple Health data for advertising or marketing, and we never sell it.

3. The consumer health data we collect

  1. The only consumer health data we collect is your height and weight, if you save them to your PISTEBOUND account, and with them the other details about you that the account keeps: your date of birth, sex and skiing level (section 6.3.1 of the Privacy Policy).
  2. Height and weight reach our server only with your explicit consent, which the App asks for in a separate window before either is first saved to your account. Without that consent they stay on your phone. Height and weight are kept on an account only for people aged 16 or over. Only the iPhone app asks for these details; the Android app keeps on the phone only a copy of the details already on your account.
  3. We do not use location to find out whether you visit places that provide health care, and we set no virtual boundary (geofence) around such places. The only boundaries the App uses are around ski resorts you save, checked on your iPhone alone to remind you to record (section 4.5 of the Privacy Policy). The Android app uses none.

4. Where it comes from

  1. From you, when you type the details in the iPhone app.
  2. From Apple Health on your iPhone, when you ask the App to fill them in from there.

5. What we use it for

  1. To estimate the calories you burn on a ski day and to suggest gentler ways down for beginners.
  2. To keep the details on your account, so that they are the same on each of your phones and come back after you reinstall the App.
  3. We use consumer health data for no other purpose. We never use it for advertising or marketing, and never to infer anything else about you.

6. Who we share it with

  1. We share consumer health data with no third party and no affiliate; we have no affiliates.
  2. Supabase, Inc. stores it for us as our processor, on servers in Ireland, under a data processing agreement that allows it to use the data only on our instructions.
  3. No other user of the App can see it, including the members of your crews.
  4. We would disclose it to a public authority only where the law requires us to.

7. No sale

We do not sell consumer health data.

8. How long we keep it

We keep it on your account until you clear the details, withdraw your consent to keep height and weight there, or delete your account. Copies in our provider's backups are removed within 7 days after that.

9. Your rights

  1. You have the right to:
    1. confirm whether we collect, share or sell your consumer health data, and to access it, including a list of the third parties and affiliates we have shared it with (there are none);
    2. withdraw your consent at any time, by clearing height and weight in the App or by writing to us; we then delete height and weight from your account;
    3. have your consumer health data deleted, by clearing the details about you in the App, by deleting your account or by writing to us; we delete it from our server, and the copies in our provider's backups are removed within 7 days;
    4. not be treated differently for using these rights.
  2. You can do much of this yourself on the account screen in the App. For anything else, write to us at the address in section 1.2. An authorized agent may make a request for you if they show us your signed permission.
  3. If we are not sure a request comes from you, we may ask you to confirm it, for example by writing from the email address linked to your account.
  4. We reply within 45 days of receiving your request, free of charge. Where reasonably necessary we may extend this once by up to 45 days, and we will tell you why within the first 45 days.

10. Appeals

  1. If we decline your request in whole or in part, you can appeal by replying to our decision.
  2. Where possible, a person who did not take the original decision will decide the appeal, within 45 days of receiving it, and tell you in writing what we decided and why.
  3. If we deny your appeal, you can contact the Washington State Office of the Attorney General (https://www.atg.wa.gov) or the attorney general of your state.

11. Security

  1. The App's connections to our server are encrypted (HTTPS).
  2. Access rules enforced on the server let only you read the details about you. The data is not end-to-end encrypted (section 14 of the Privacy Policy).

12. Changes to this policy

We will update this policy before we change how we collect, use, share or keep consumer health data, and where the law requires it we will ask for your consent first. The date and version number at the top show the version in force.

Back to PISTEBOUND