Privacy Policy — Alpirac

Last updated: 21 February 2026

This policy explains how the Alpirac app collects and uses your data. It applies when you use the iOS/iPadOS app and related services in Europe, the United Kingdom, Canada, and the United States.

Data controller

Developer / publisher: Julien Pulhuj
Contact email: julien.pul@icloud.com

1) Data we process

Account identifiers (Sign in with Apple): stable identifier provided by Apple, name and email (possibly via the “hide my email” relay).
User profile: first name, last name, date of birth, sex, city, bio (optional).
Location and route: GPS position, altitude/barometer, speed, heading, activity tracks (GPS points), distance and duration.
Activity data: activity type (hiking, climbing, etc.), segments, statistics (elevation gain/loss, pace, average speed, etc.).
Health (HealthKit) (only if you authorize it): read and/or write activity and health data (calories, heart rate, workouts, VO₂ max, sleep, recovery) to export to Apple Health and estimate fitness/cardio indicators.
Apple Intelligence: AI-generated summaries may be computed on-device or via Apple’s Private Cloud Compute. Processing is performed by Apple and subject to Apple’s privacy and security protections.
Diagnostics: crash logs and anonymized usage data to improve the app.
Alpirac does not sell your data and does not perform advertising profiling.

2) Purposes and legal bases (GDPR)

Provide app features (activity recording, maps, CloudKit sync) — performance of a contract.
HealthKit export or reading — explicit consent, withdrawable at any time in the Health app.
Geolocation for activity tracking — consent.
Displaying fitness/cardio indicators — legitimate interest and/or consent depending on the data used.
Improvement and security (diagnostics, fraud prevention) — legitimate interest.
Legal obligations — legal obligation.

3) Where is your data stored?

On your device.
In iCloud/CloudKit (Apple) when sync is enabled (account, activities, metadata). The infrastructure is provided by Apple; we do not operate our own servers for this data.
HealthKit data: never on our servers. It stays on your device and, where applicable, in iCloud depending on your settings.
Apple Intelligence summaries: processed on-device or via Apple’s Private Cloud Compute, with no storage by Alpirac.

4) Sharing and processors

Apple (CloudKit, App Store, crash diagnostics, Apple Intelligence): hosting and system services.
No other sharing with third parties, except where required by law.

5) Retention periods

Account and activities: as long as your account is active, then deletion or anonymization within a reasonable period (up to 24 months) after inactivity or an erasure request.
Diagnostics: up to 12 months.
HealthKit: managed by iOS / the Health app — you control history and deletion.

6) Your rights (Europe, UK, Canada, United States)

In Europe and the UK, you have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to define post-mortem directives.
In Canada and the United States, you can request access to and deletion of your data, and exercise applicable rights depending on your jurisdiction.
To exercise your rights: email julien.pul@icloud.com from the address associated with your Alpirac account.
Revoke Sign in with Apple: Apple ID Settings > Password & Security > Apps Using Your Apple ID.
Manage Health permissions: Settings > Health > Apps > Alpirac.
Manage location: Settings > Privacy & Security > Location Services > Alpirac.

7) Security

We apply appropriate technical and organizational measures. As no method is infallible, protect access to your device and your iCloud account.

8) Minors

Alpirac is intended for a general audience. Accounts for minors must be created with the consent and under the supervision of a parent or legal guardian, where applicable.

9) Changes to this policy

We may update this policy. The update date appears at the top of the document. In case of major changes, we will provide information in the app.