Herz P1 App - Privacy Policy
Last updated: Sept 9, 2026
1. Who we are, and what this covers
Herz P1, Inc, 470 W Broad St, Unit #5116, Columbus, OH 43215, United States (no returns please to this address!) ("Herz P1", "we", "us") operates the Herz P1 app and Herz P1 devices.
This policy explains what personal information we collect, why, who we share it with, and the choices you have. It covers the Herz P1 app on iOS and Android and the Herz P1 devices. It does not cover purchases you make on our shop website - those are governed by a separate policy at herzp1.com/privacy.
If you are located in the European Economic Area or Switzerland, a separate privacy policy applies to you and is served by the app based on your country. It is also available at herzp1.eu/de/app-privacy.
2. The short version
The detail is below. This is the summary.
| What | Answer |
|---|---|
| Do you sell my data? | No. We do not sell personal information, and we do not share it for cross-context behavioural advertising. |
| Do you use my health data for advertising? | Never. Not our own advertising, not anyone else's. |
| Where does my health data go? | To our servers in the European Union, so the app can show it back to you across your devices. |
| Can other people in my household see my readings? | No, unless you are a managed user. Invited adults each have their own account and the device owner cannot see their measurements. |
| Can I delete everything? | Yes. Deleting your account removes your profile and your history. See §8. |
| Is Herz P1 a medical device? | No. Herz P1 is a consumer wellness product. It helps you track your health, fitness and sleep to see how you're doing over time. |
3. What we collect
3.1 Account and profile
- Name, email address, and password (stored only as a cryptographic hash - we never see it).
- Date of birth, sex, height, weight, country and language. These are needed because body-composition estimates are calculated from them.
- Optional phone number, if you enable two-factor authentication.
- Your consent records: which consents you gave, and when.
3.2 Health and fitness data from your devices
Here's what each device records, broken out so you can see it clearly.
| Device | What it records |
|---|---|
| Smart Scale | Your weight, plus body-composition insights: body fat, muscle, body water, lean mass, bone mass, resting energy, visceral fat rating, and per-limb readings. Plus the time of each measurement. |
| Smart Band | Heart rate, heart-rate variability, steps, active time, distance, energy estimates, sleep duration and sleep stages, skin temperature, and where supported, blood-oxygen/SpO2. |
| Smart Ring | Heart rate, heart-rate variability, steps, active time, distance, energy estimates, sleep duration and sleep stages, skin temperature, and where supported, blood-oxygen/SpO2. |
| Entered by you | Manual weight entries, goals, and the pace you choose. |
Not all of it, always. What is actually recorded depends on which devices you have paired and what those devices support. Where a device does not produce a value, we do not estimate it and we do not store it.
3.3 Technical data
- Device model, operating system version, app version, language and time zone.
- Bluetooth pairing identifiers for your Herz P1 devices, their firmware versions and battery levels.
- Sync timestamps and error logs, so we can tell you when your data is out of date and can diagnose failures.
- Crash reports and basic usage events, if enabled. These do not contain your health readings.
3.4 What we do not collect
- We do not collect precise location. Where distance is estimated, it is calculated from your steps and your height, not from GPS tracking of where you go.
- We do not access your contacts, photos, microphone or camera.
- We do not buy personal information about you from data brokers.
4. How we use it, and what we never do
| Purpose | Examples |
|---|---|
| Run the service | Show your readings and trends, keep them in sync across your phones, remember your goals and settings. |
| Interpret your readings against your own history | Herz P1 compares a reading to your own baseline, visualizing trends in your health and fitness journey. |
| Keep your account secure | Sign-in, email verification, optional two-factor authentication, fraud and abuse prevention. |
| Support you | Answer your questions, diagnose a sync or pairing problem. |
| Improve the product | Aggregate, de-identified statistics about which features are used and where the app fails. |
| Meet legal obligations | Tax, accounting, responding to lawful requests. |
What we never do
- We never sell your personal information.
- We never use your health data for advertising, ours or anyone else's, and we never share it with advertising networks.
- We never share your health data with an employer, an insurer or a credit provider.
- We never store your health data in iCloud.
- We never use your health data to make an automated decision that has a legal or similarly significant effect on you.
5. Who we share it with
We share personal information only with the categories below, and only as much as each one needs.
| Who | Why | What they receive |
|---|---|---|
| Microsoft Azure (European Union region) | Runs our servers and database. | All account and health data, encrypted in transit and at rest. |
| Smart Scale SDK | The Smart Scale encrypts its raw sensor output. The manufacturer's service decodes it into body-composition values. | The encrypted measurement payload and the profile attributes the calculation needs (age, sex, height). |
| Smart Band and Smart Ring SDKs | Read data from the device over Bluetooth. | Device data on your phone. |
| Analytics | Crash reporting and usage statistics. | Technical and usage data. No health readings. |
| Apple Health / Health Connect | Only if you turn it on. | The metrics you choose. See §6. |
| Professional advisers and authorities | Legal and accounting obligations, or a lawful request. | Only what is required. |
| A buyer, in a business sale | If the business is sold or merged. | We would tell you first, and this policy would continue to apply until replaced. |
6. Apple Health and Health Connect
Connecting Apple Health or Health Connect is optional and off unless you turn it on.
- You choose which metrics are shared, in your phone's own settings, and you can withdraw that at any time.
- Data you decide to send to external apps (Apple Health, Health Connect, etc.) is governed by their respective terms and conditions, not ours.
- We do not use data obtained through these platforms for advertising or share it with third parties for their own purposes.
7. Payments
The current version of Herz P1 has no subscription, no in-app purchase and no paid tier. We collect no payment information through the app. If that changes, this policy will be updated before any payment feature ships, and the payment provider will be named here.
8. How long we keep it, and how to delete it
| Data | Kept for |
|---|---|
| Account and profile | As long as your account is open. |
| Health and device readings | As long as your account is open, so your trends and history work. You can delete individual readings at any time. |
| After you delete your account | Your account enters a 30-day recovery window first, in case the deletion was a mistake. You can restore it by signing in during that period. After 30 days your profile and health history are permanently removed and cannot be recovered. |
| Technical logs | Kept briefly for diagnostics, then deleted. |
| Records we must keep by law | Kept for the period the law requires, and nothing longer. |
You can delete your account from Settings in the app, or by writing to support@herzp1.com. Deleting the account of a device owner does not delete the accounts or data of adults they invited - those are separate accounts and belong to those people.
9. Households, invited adults and managed users
The Smart Scale can be shared. How that works matters for privacy.
- An invited adult has their own Herz P1 account. The device owner can see that the person exists and can remove them from the device. The device owner cannot see their measurements, their profile or their history.
- A managed user is a child or dependent whose data sits inside the device owner's app. The device owner can see it, because they manage it.
- Managed users have a reduced data model - we collect only what is needed - and are never shown social or sharing features.
- The minimum age for a managed user is 6 years old. A parent or guardian sets up and consents on their behalf.
- Where a reading cannot be attributed with confidence, the app asks who it belongs to before saving it. It is never assigned silently.
10. Security
- Data is encrypted in transit (TLS) and at rest.
- Passwords are stored only as salted hashes.
- Access rules are enforced at the database level, so one user cannot read another user's data.
- Access by our staff is limited to what a job requires and is logged.
11. Your rights
11.1 If you are in the United States
Under the California Consumer Privacy Act as amended, and comparable laws in other states, you have the right to:
- Know what personal information we have collected, used and disclosed.
- Access a copy of it, in a portable format.
- Correct inaccurate personal information.
- Delete your personal information.
- Limit the use and disclosure of sensitive personal information. Health data is sensitive personal information, and we already limit its use to providing the service.
- Not be discriminated against for exercising any of these rights.
We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front. To exercise a right, write to support@herzp1.com. We will verify your identity before acting.
11.2 If you are in the United Kingdom
Under the UK GDPR you have the rights to access, rectification, erasure, restriction, portability and objection, and the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Our legal bases for processing your information are:
| What we do | Legal basis |
|---|---|
| Provide the app and your account | Performance of a contract (Art. 6(1)(b)) |
| Process your health data | Your explicit consent (Art. 9(2)(a)). You give it during onboarding as a separate consent, and you can withdraw it at any time. |
| Keep the service secure and prevent abuse | Our legitimate interests (Art. 6(1)(f)) |
| Improve the product using aggregate statistics | Our legitimate interests (Art. 6(1)(f)) |
| Meet legal obligations | Legal obligation (Art. 6(1)(c)) |
To exercise a right, write to support@herzp1.com. We will verify your identity before acting.
11.3 If you are elsewhere
You may have additional rights under the law of the country you live in, including Canada (PIPEDA) and Australia (Privacy Act). To exercise a right, write to support@herzp1.com.
11.4 Where your data is stored
Our servers run on Microsoft Azure in the European Union. Personal information you provide is transferred from your country to the European Union for processing and storage. The transfer is protected by encryption in transit and at rest, and by access controls and other safeguards described in §10.
For users in the United Kingdom, the transfer of personal information from the UK to the European Union is covered by the UK's adequacy decision for the EU, which recognises EU data protection as equivalent to UK GDPR.
12. Children
Herz P1 is not intended for children to use on their own. An account holder must be at least 16 years old. Children may appear only as managed users, from age 6, set up by a parent or guardian, with the reduced data model in §9. We do not knowingly collect personal information from a child outside that arrangement. If you believe we have, write to support@herzp1.com and we will delete it.
13. Changes to this policy
If we make a material change we will tell you in the app or by email before it takes effect, and update the date at the top. Continuing to use Herz P1 after a change means the updated policy applies. When you accept an updated policy, we record which version you accepted.
14. Contact
| Controller | Herz P1, Inc |
| Address |
470 W Broad St, Unit #5116, Columbus, OH 43215, United States (no returns please!) |
| Email (privacy and support) | support@herzp1.com |