Rebuild - Privacy Policy

Last updated: September 7, 2026

Rebuild ("the App") is a personal health and training application that helps athletes track recovery from injuries and surgeries using data from connected fitness services. This policy describes what data the App collects, how it is used, and your rights over it.

1. Your Account

You sign in with Sign in with Apple. We store the anonymous identifier Apple issues for your account, and your name and email only if you choose to share them. The App never sees your Apple password. All data described below is stored under your account and is visible only to you: users cannot see each other's data.

2. Data We Collect

With your explicit consent, the App collects the following data on your behalf:

• Apple Health (HealthKit): with your permission, the App reads workouts, heart rate, sleep (including stages), steps, energy, distance, blood oxygen, respiratory rate, and related metrics that your other apps (such as Garmin Connect or WHOOP) deposit there, and uploads daily summaries to your account. Access is read-only and controlled per data type in the Health app.
• Garmin (optional, coming soon): if you connect Garmin through the official Garmin Connect consent flow, the App retrieves daily summaries (steps, calories, stress, Body Battery), sleep (including Sleep Score), HRV, pulse ox, respiration, and activity summaries. Access is read-only, we never see your Garmin password, and you can disconnect at any time in Settings or from your Garmin account.
• WHOOP (optional): if you connect WHOOP, you authorize the App on WHOOP's own sign-in page (we never see your WHOOP password) and it retrieves recovery scores, sleep, strain, workouts, HRV, resting heart rate, and profile information.
• Data you enter manually: pain levels, physical therapy sessions, notes, planned training sessions, and medical documents you choose to upload.

3. How We Use Your Data

Your data is used solely to provide the App's features to you: unified dashboards, trend charts, recovery and training insights, AI coaching recommendations, and progress reports you can export. We do not sell your data, share it with advertisers, or use it for any purpose unrelated to the App's functionality.

4. AI Processing

To generate coaching insights, relevant summaries of your health data may be processed by third-party AI providers (such as Anthropic) under their API terms, which do not permit training on your data. Only the minimum data needed for a given insight is sent.

5. Storage and Security

Data is encrypted in transit (TLS) and at rest. OAuth tokens for connected services are stored encrypted and are never shared with third parties. Your session credential is kept in your device's Keychain. Every request is checked against your account, and security-relevant events (sign-ins, connections, deletions) are logged without personal details.

6. Data Deletion and Your Rights

You may revoke Apple Health access in the Health app or disconnect WHOOP in Settings at any time, which stops further collection. Settings > Account > Delete Account permanently erases your account and all associated data (health summaries, workouts, chats, documents, logs, and connection tokens) immediately. You may also request deletion at the address below.

7. Not Medical Advice

The App provides general wellness and fitness information only. It does not provide medical diagnosis or treatment, and it is not a substitute for advice from your physician or physical therapist.

8. Children

The App is not intended for users under 16 years of age.

9. Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated date above.

10. Contact

For privacy questions or data deletion requests, contact: muratzamir@rebuildandtrain.com