Privacy and your data
Your data, in plain words
What stays on your phone, what can leave it, and the switches that decide. No ads, and no third-party analytics in the app.
Privacy policy (draft, not reviewed by a lawyer)- Raw sensor data stays on your phone.
- AI insights are off by default.
- An account is optional; sync is off until you turn it on.
- You can export everything, and delete your account.
The data map
Where each kind of data lives
Three places, and a fourth column for what never goes anywhere.
- Always
Stays on your phone
- Raw heart rate, beat-to-beat intervals and motion
- Daily scores, charts, journal and workouts
- Your settings and profile
- Device name and Bluetooth id; a ring's key in secure storage
- If you turn sync on
Copied to your account
- Daily scores and downsampled chart series
- Journal entries and logged workouts
- Profile fields you set
- Your email, for sign-in with a 6-digit code
- If AI is on
Sent to the AI service
- A compact daily summary of scores
- The names of tags you picked
- What you type to the coach, as written
- Up to 30 days of summaries for the coach
Never copied or sent
- Raw samples of any kind
- Bluetooth ids or device keys
- Journal notes to the AI
- Your name, email or location to the AI
Account and sync
Optional, and off until you say so
The app works without an account. You need one only to download the beta from the dashboard, and to use the dashboard or sync. You sign in with a 6-digit code sent to your email. There is no password.
Signing in uploads nothing. Sync is its own switch, off by default, and turning it on records your consent.
The web dashboard shows what your phone synced, and is read-only for now.
AI insights
You can see what it would see
When AI insights are on, Gallen sends a compact daily summary to Gallen's AI service, which forwards it to a large, established AI provider and returns the answer.
The AI settings screen shows today's summary exactly as it would be sent. Turn AI off and Gallen goes back to offline, rule-based text and sends nothing.
The full privacy policy names the provider and what it keeps.
Your controls
Take it with you, or take it back
Every switch can be turned off again. Turning something off does not recall what was already sent; deleting the account does that for the server.
Full data file
More, Export my data gives you one file with everything Gallen stored on the phone.
Encrypted backup
Back up and restore your history. The backup is encrypted with a password only you know.
CSV export
Your daily numbers as a spreadsheet-friendly file.
Account export
With an account, download everything on the server as one file.
Delete your account
Removes every row of yours on the server at once, including sign-in codes.
Health Connect, write only
On Android, Gallen can write your data to Health Connect. It never reads other apps' data.
This page is a plain summary. The full privacy policy, terms and cookie notice are drafts and have not yet been reviewed by a lawyer.
Questions about your data?
Read the FAQ, or write to ola@gallen.io.