Sundre

Privacy policy

Last updated: 24 October 2026

This policy explains how the Sundre app handles your data.

Who is responsible

Sundre is made by DevOpZone EOOD, a company registered in Bulgaria, which is the controller for the personal data described here. Contact: zeck@devopzone.net.

Data we process

Sundre processes the following data only to provide the account and activity features you ask for:

HealthKit

While recording, Apple Watch can read and show your heart rate and save the completed workout to HealthKit. Sundre does not send your heart rate to its server and does not include it in the recording file transferred from the watch to the phone. HealthKit data is not used for advertising, tracking or marketing.

Tracking and analytics

Sundre does not use your location or any other data for advertising, data brokers or cross-app tracking, and it does not ask for App Tracking Transparency permission. Diagnostics and analytics depend on your consent and can be turned off in settings. Telemetry does not accept email, user ID, name, photo, coordinate, address, phone or token fields.

Retention, export and deletion

Data linked to your account is kept for as long as it is needed for your account and the features you use. You can export your data and delete your account from inside the app. An export is a single ZIP archive, with activities as GPX files and everything else as JSON.

Deleting your account starts the deletion of your account data, media objects and notification tokens on the server. HealthKit records on your device are governed by your controls in Apple’s Health app.

Service providers

The app uses Apple’s HealthKit, StoreKit and notification delivery services. Its local database layer, GRDB, ships its own privacy manifest and declares that it does no tracking and collects no data.

Your choices

You can change location, photo, health and notification permissions in your device’s system settings. Crash, performance and analytics preferences can be changed in Sundre’s privacy settings. If you withdraw a permission, the related feature stops working rather than carrying on as if permission had been given.

Your rights

Under the GDPR you can ask for access to your personal data, correction, deletion, restriction of processing and data portability, and you can object to processing. Write to zeck@devopzone.net. You can also lodge a complaint with a supervisory authority; in Bulgaria this is the Commission for Personal Data Protection (cpdp.bg).

Changes

If this policy changes, we will update the date at the top of this page.