RowerCore — Privacy Policy

Last updated: April 2026

RowerCore ("the app", "we", "us") is a training companion for Bluetooth FTMS‑compatible rowing machines. This policy explains what information the app collects, how it is used, how long it is retained, and how you can delete your data.

1. Information We Collect

• Profile data — name, gender, date of birth, height, and weight that you voluntarily enter.
• Workout data — session metrics such as distance, pace, strokes per minute, heart rate, and duration.
• Device identifiers — Bluetooth name and hardware ID of your rowing machine or heart rate monitor, stored to enable automatic reconnection.
• Strava tokens — OAuth access and refresh tokens if you connect Strava, stored securely on your device.
• Purchase status — information indicating whether you have purchased RowerCore Pro, stored locally.

2. How We Use Your Information

• Profile and workout data are used only to display statistics and support training functionality.
• Strava tokens are used solely to upload workouts to your Strava account at your request.
• No personal data is sold, rented, or shared with advertisers.

3. Data Storage

All personal and workout data is stored locally on your device in the app’s private, sandboxed storage. Strava tokens are stored in the platform’s secure keystore (Android Keystore / iOS Keychain).

We do not operate user accounts and do not store your personal data on our servers.

4. Third‑Party Services

• Strava — If enabled, workout data is uploaded in TCX format in accordance with Strava's Privacy Policy.
• Google Play (in‑app purchases) — Purchases are processed by Google. See Google's Privacy Policy.

5. Diagnostic Data

With your consent, anonymised Bluetooth diagnostic data may be sent to our server to improve device compatibility. This data contains device capability information only and does not include personally identifiable information.

6. Data Retention and Deletion

Local data:
All profile data, workout data and device preferences are stored exclusively on your device. This data is automatically and permanently deleted when you uninstall the app.

Cloud‑stored diagnostic data:
Anonymised diagnostic reports sent to our server are retained for a maximum of 31 days and are automatically deleted afterward.

User‑initiated deletion:
You can delete all locally stored data at any time by uninstalling the app. If you have previously consented to sending diagnostic data and wish to request earlier deletion, you may contact us using the details below.

7. Children’s Privacy

The app is not directed at children under the age of 13, and we do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this policy from time to time. The “Last updated” date above reflects the most recent changes. Continued use of the app constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy or wish to request data deletion, contact us at info@vewello.com.