Consumer health data policy

Effective 4 November 2026. This policy is from Bitnik LLC (“we”), Asheville, North Carolina, the maker of Rally Trace.

This is Rally Trace’s consumer health data privacy policy, written for Washington’s My Health My Data Act. It covers the heart rate and motion data Rally Trace collects, and the effort you rate your games, for anyone in Washington and everywhere else. Nevada’s and Connecticut’s health data laws ask for no more than this. The privacy policy covers everything else we collect.

What we collect

• Heart rate, for each game, if you say yes in setup’s Health step: each heart-rate reading, a number of beats per minute and its time. This is saved with your games in your account.
• The effort you rate a game, from 1 to 10, when you choose to rate one, with when you rated it. It is saved with that game in your account, as part of your games, for every account: whatever your age, and whether or not you save heart rate.
• Motion from your Apple Watch, if you are 18 or older and say yes to sharing: device motion at 100 Hz and, on watches that support it, accelerometer readings at 800 Hz and batched device motion at 200 Hz, for every game while sharing is on. With it go the game’s score and rally log, your taps, undos and fixes, the watch model, the wrist you wear it on, its Digital Crown side and battery level, and a random ID for the game. It has no names and no location.
• Heart rate for a game you shared, which we copy and keep beside the recording for our training. Nothing else from Apple Health does. Rally Trace also reads your active energy, resting heart rate and date of birth from Apple Health on your devices; they aren’t stored on our servers. Nor is the effort Rally Trace works out on your iPhone, except on a share card you choose to send that shows heart rate: its image, which we store and show on its page, shows the game’s effort, your own rating if you gave one, or else the worked-out effort.

We collect no location.

Where it comes from

Heart rate and motion come from your Apple Watch’s sensors, and from Apple Health on your iPhone, with the permission you give in the Health app. You can change that permission at any time. Effort ratings come from you: you give one when you rate a game in Rally Trace.

Why we collect it

• For your own features, such as showing heart rate and effort on your games, on your own pages on rallytrace.com, and on a new phone.
• Your effort ratings, to keep each game’s rating with the game on every iPhone you sign in to, and to work out how much each game adds to your level.
• When you share, to improve our detection and effort models.

We never use it for advertising, data mining or sale, and we never sell it.

Who receives it

Our processors, and nobody else, except where you choose to publish it (below). They handle it for us and we do not sell it to any of them or to anyone.

• Supabase holds your account, with the heart rate and effort ratings saved with your games, in the United States.
• Cloudflare holds shared motion recordings in the United States until we download them. We then keep them on our own computers in the United States.
• Apple holds motion recordings made in beta builds before 2.0, in its CloudKit service. Apple Health itself stays on your devices.
• Anthropic analyzes recordings and heart rate you chose to share, as our processor. We use Claude under Anthropic’s commercial terms, with a data processing agreement and zero data retention, so Anthropic keeps nothing. It never receives beta recordings made before 2.0, which we analyze only on our own computers.

Share pages are the one exception. If you share a card that shows a game’s heart rate, the card also shows the game’s effort, and Cloudflare serves that page and Supabase serves its card image, and it is public to anyone with the link, and for an adult it may be indexed by search engines. Otherwise, this list is every company and affiliate that receives your consumer health data from us.

Your consent

• Heart rate in your account: setup’s Health step says it is saved with your games in your account, and Continue is your yes. We record it with the version of the words you saw. Turn it off in Me › Settings › Account › Save heart rate with your games. That deletes your heart rate from your account, turns sharing off, and keeps your heart rate on your phone and in Apple Health. It doesn’t remove copies already taken for training; Delete what I’ve shared or deleting your account does.
• Sharing motion and heart rate: it is off until you say yes, and you can say no. Turn it off in Me › Settings › Data & sharing. Your watch stops recording and your iPhone deletes every recording still waiting. Turning sharing on also turns on saving heart rate with your games, and turning that off also turns sharing off.
• Delete what I’ve shared, below, removes the recordings you already shared and the heart rate copied with them.
• Publishing heart rate on a share page: a share page shows a game’s heart rate and effort only if you share a card that shows heart rate. That page is public to anyone with the link, and for an adult it may be indexed by search engines. Remove the share in Me › Settings › Account › Shared links to take the page down.

Your rights

• A copy: Me › Settings › Account › Download my data gives you a zip with your heart rate, your games with their effort ratings, and a list of your recordings still in Cloudflare, waiting to be copied to our own computers. For a list of every recording we hold, or the recordings themselves, which are about 20 MB each, use Write to us in Me › Settings › Data & sharing, or email rallytrace@bitnik.tech with the subject “Rally Trace data request”.
• Deletion: Me › Settings › Data & sharing › Delete what I’ve shared removes your motion recordings and the heart rate copied with them, and stops your heart rate being used to improve Rally Trace. Deleting a game removes its effort rating from the game, and clearing a rating removes it from the game in your account. The points a rated game earned toward your level stay in your progress, which your account keeps, and they can show what the rating was; they go when you delete your account. Me › Settings › Account › Delete account removes everything.
• Withdrawing consent: as above.
• The list of who receives your data: the one on this page.

We answer every request within 30 days. If we can’t do what you ask, we say why. You can ask us to look again by writing to the same address. If you still disagree, you can contact the Washington Attorney General.

How long we keep it

Heart rate stays in your account until you turn off saving heart rate or delete your account. An effort rating stays with its game until you clear it, delete the game or delete your account; the points it earned stay in your progress until you delete your account. Recordings, and the heart rate copied with them for training, stay on our own computers until you delete what you shared or your account, or ask us to delete them. Turning off saving heart rate does not remove those copies. A deletion reaches our computers within 30 days. Supabase’s backups age out within 7 days.

Under 18

If you are under 18, your heart rate is never saved to your account, and you are never asked to share motion or heart rate. An effort rating you give a game is saved with the game in your account, as it is for everyone.

Contact

Questions about this policy: rallytrace@bitnik.tech.

Bitnik LLC · Asheville, NC