The short version. RoxDay keeps your race and health data on your own iPhone and Apple Watch. We don’t run accounts, we don’t have servers that store your data, and we never sell your data or use it for advertising. The only time your data leaves your device is when you choose to send a race to Strava, or when Apple processes a subscription on our behalf.
RoxDay (“RoxDay”, “we”, “us”) is a race-day companion app for HYROX and hybrid athletes, built for iPhone and Apple Watch. This policy explains what data the app handles, how it’s used, and the choices and rights you have. RoxDay is an independent app and is not affiliated with HYROX.
RoxDay is developed and operated by Niklas Bauer (sole developer), the data controller for the purposes of the EU/UK General Data Protection Regulation (GDPR). You can reach us about privacy at privacy@roxday.app.
Because RoxDay is built to work on-device, most of your data never leaves your iPhone and Apple Watch. Here is what the app handles:
When you record or plan a race, RoxDay stores information such as your run splits, station times, roxzone transitions, total finish time, division and gender selection, goal-plan targets, and any race labels you enter. This is created by you and stored locally on your devices.
With your explicit permission, RoxDay reads heart rate from Apple Health during a race so it can show live and average heart rate alongside your splits. Depending on the permissions you grant, RoxDay may also read basic workout metrics (such as distance and active energy) and can save a completed race to Apple Health as a workout. RoxDay only requests the health data it needs for these features. See Section 4 for the specific commitments that apply to this data.
RoxDay Pro is an auto-renewable subscription sold through Apple’s App Store. Apple processes the purchase and your payment details — we never see or store your payment information. We only receive from Apple whether you have an active entitlement so we can unlock Pro features. Your subscription is billed and renewed through your Apple ID, and you can view, manage, or cancel it at any time in Settings → [your name] → Subscriptions on your device; Apple’s terms govern the transaction.
RoxDay contains no analytics or crash-reporting SDKs of our own. If you have enabled “Share with App Developers” in your device’s Settings → Privacy & Security → Analytics & Improvements, Apple may provide us with aggregated, anonymized crash and usage diagnostics to help us fix bugs and improve the app. This data comes from Apple, does not identify you, and never includes your health data. You can turn it off at any time in that same setting.
Your data is used only to make the app work for you:
Under GDPR, our legal bases are: your consent (for accessing Apple Health and for connecting Strava), and performance of a contract and our legitimate interest in providing the app’s core race-tracking features that you asked for.
Health data is sensitive, and Apple sets strict rules for how it may be used. In line with Apple’s HealthKit requirements and the App Review Guidelines, RoxDay commits that:
You control HealthKit access at any time in Settings → Health → Data Access & Devices → RoxDay, or in the Health app. You can grant or revoke read and write access for each data type individually.
Connecting Strava is entirely optional. If you connect your Strava account and choose to send a race (or enable auto-send), RoxDay transmits that race’s summary — such as finish time, run splits, average pace, average heart rate, and station times — to your Strava account, writing it into the activity description.
We do not sell your data and we do not share it with advertisers or data brokers. The only parties involved are:
Where we share data with a third party, we require that they provide the same or equivalent protection of your data as set out in this policy and as required by applicable law and the App Store guidelines.
Your race and health data stays on your device for as long as you keep it. Because we don’t hold your data on our own servers, you are in direct control of it:
If you have any question or request about your data, contact us at privacy@roxday.app and we’ll help.
Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or the CCPA/CPRA (California), including the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Because RoxDay stores your data on your own device, you can exercise most of these rights directly — by viewing, editing, or deleting your data in the app. For anything you can’t do in the app, email privacy@roxday.app and we will respond as required by law.
For California residents: we do not sell or “share” your personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
RoxDay is not directed to children and is not intended for use by anyone under the age of 16 (or the minimum digital-consent age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Your data is stored on your device and protected by iOS’s built-in security, including device encryption; Strava tokens are held in the iOS keychain. While we take reasonable measures to protect your information, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.
RoxDay processes your data on your own device wherever you are. The limited connections described above (Strava export and Apple subscription processing) may involve transfers to servers operated by those companies; their respective privacy policies govern those transfers.
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll provide a more prominent notice within the app or on this page. Your continued use of RoxDay after an update means you accept the revised policy.
Questions about this policy or your data? Email us at privacy@roxday.app.