Privacy Policy

Effective Date: March 15, 2026

Last Updated: October 20, 2026

Welcome to ZonePoints, an application published by Vercer LLC (“we”, “us”, or “our”). We are committed to transparency and providing you with robust control over your data.

1. Data on Your Device

Local Storage

By default, your raw heart rate readings and full training session data are stored exclusively on your device. The App retains an unlimited amount of this data on your device indefinitely so you maintain a complete historical record. You can delete any session at any time (see Section 5). Unless you are a pro user and turn on sync across devices, this raw session data never leaves your device.

2. Data We Collect

Analytics and Diagnostics

To operate, maintain, and improve the App, we collect standard App settings and certain derived summary statistics (such as your total number of sessions and the minimum and maximum heart rates observed across sessions, not raw heart rate readings). To monitor the App’s technical health, we utilize Google Analytics and Firebase monitoring tools (including Analytics, Crashlytics, and Performance Monitoring) to collect diagnostic data. These services may transfer and store data on servers located in the United States or other countries.

Legal Basis for Processing

We process your data on the following bases: your explicit consent (for optional features such as sync across devices and Health Connect); our legitimate interest in maintaining and improving the App (for analytics and diagnostics); and contractual necessity (to provide the core App functionality you have requested).

3. Optional Features

Sync Across Devices (Pro Users)

You never need an account to use ZonePoints. Pro users can turn on sync across devices, which is off until you agree to it on the App’s sync screen. Your Pro purchase on Google Play is what identifies you: we receive its purchase token, check it with Google Play, and link it to a random account identifier. We never receive your name, email address or Google account.

When sync is on, we store in Firebase (Google Cloud): each session’s heart rate readings, zone points, notes and activity type; your zone settings (maximum and resting heart rate and zone method) with the dates they took effect; and the model name of each device that syncs. If Health Connect is enabled, sessions read from Health Connect are included, as they count towards your training streaks. Only your own devices can read this data.

  • Turning sync off stops copying. Deleting synced data, in the App or as described at zonepoints.app/delete-data, permanently removes everything we hold for sync; the sessions on your devices are not affected.
  • When your Pro ends (after Google Play’s grace period and account hold), sync stops and all synced data is permanently deleted 30 days later. Renewing within those 30 days restores it.
  • A session you delete is removed from your other devices, and its synced copy is permanently removed 30 days later, so that a mistaken deletion can be recovered on request.
  • Daily backups of the sync store are kept for no longer than 30 days, and deleted data is never restored from them.

Cloud data is governed by the Firebase Privacy Policy. Health Connect data stored in Firebase remains subject to Health Connect’s Limited Use requirements and is not governed by Firebase’s broader data use terms.

Google Health Connect

Integration with Google Health Connect is optional and disabled by default. If enabled:

  • We will write ZonePoints heart rate data into Health Connect, and read heart rate data recorded by other applications.
  • If you subsequently disable the integration, we will delete all third-party data read from Health Connect, as well as all ZonePoints-generated data previously written to Health Connect.
  • Our use of information received from Health Connect strictly adheres to the Health Connect Permissions policy, including its Limited Use requirements.

4. How We Use Anonymized Data

We process your training and usage data to create anonymized, aggregated datasets. Because this data is stripped of all personally identifiable information, it is not reasonably linkable to any individual. These datasets may be used for any business purpose, including sale or licensing to third parties such as research institutions, health and fitness companies, and data analytics providers.

  • Public Statistics: We may publish broader comparisons (e.g., heart rate trends by city). To protect your privacy, we will only include a geographic group in these publications if it contains data from at least 10 distinct users.
  • Health Connect Exception: We will never share or use health information sourced from Google Health Connect for these broader purposes, even in an anonymized format.

5. Managing, Exporting, and Deleting Your Data

  • Deletion: You retain full control over your training records. Deleting an individual session in the App removes it from ZonePoints on all your devices, and from the sync store after 30 days (see Section 3). If Health Connect is enabled, this action will simultaneously delete the associated session from Google Health Connect. To delete everything held for sync, see zonepoints.app/delete-data.
  • Exporting Data: You may export your raw training data from the App at any time in a standard format. Once exported, you are responsible for the security and handling of that data.

We implement reasonable technical and organizational measures to protect your data.

6. Children’s Privacy

ZonePoints is directed toward the general public. We do not intentionally target or knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us immediately so we may delete it.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, as well as the right to restrict or object to certain processing. To exercise any of these rights, contact us using the details below. We will respond to privacy-related inquiries within 30 days.

For California residents: We do not sell personal information as defined by the California Consumer Privacy Act (CCPA). Anonymized, aggregated data that cannot reasonably be linked to you is not personal information under the CCPA and may be sold or shared as described in Section 4.

8. Updates and Contact Information

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes via an in-app notification when you next open the App.

This policy is governed by the laws of the State of Washington, United States.

Contact Us: Email: support@vercer.com Legal Entity: Vercer LLC