Taper

Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how One Bright Studio ("we," "our," or "us") handles your information in the Taper iPhone app ("Taper" or "the app"). We've tried to keep it as plain as the app itself. If anything is unclear, email us at support@runtaper.com.

1. Health & fitness data (Apple Health)

If you grant permission, Taper reads the following from Apple Health to build and track your training:

• Running, cycling, walking and strength workouts (date, distance, duration, active energy)
• Workout routes and heart rate, shown on a workout's detail screen
• VO₂ max, resting heart rate, heart rate variability and step count, used for your fitness and morning readiness

This data is read only on your device and is used to tick off completed sessions, estimate your fitness, adapt your plan, and show your stats. Taper requests read-only access — it does not write data to Apple Health. With your permission, Taper may read a newly recorded workout in the background so a finished run is imported and confirmed even when the app is closed; this still happens on your device, and nothing is uploaded.

We do not sell your health data, use it for advertising or marketing, share it with data brokers, or upload it to our servers. You can review or revoke Taper's Health access at any time in the iOS Settings → Privacy & Security → Health.

2. Your training profile

Taper stores the details you enter to generate your plan — such as your race date, goal time, recent race result, training days and units. By default this stays on your device. If you choose to sign in (see below), a copy is backed up so you can restore your plan on another device or after reinstalling.

3. Account & cloud backup (optional)

Signing in is entirely optional — Taper works fully without an account. If you sign in with Google or Apple, we use Firebase Authentication (a service provided by Google) to create your account. We receive your name, email address and profile photo, which are used to identify your account and back up your plan.

When signed in, your training profile is stored in Google Firebase (Firestore) so it can be restored across your devices. Your raw Apple Health data is not included in this backup. You can delete your account and its cloud backup at any time from Settings within the app.

4. Notifications

If you allow notifications, Taper schedules reminders — your daily session, a confirmation when a workout imports, and a weekly coach check-in. These are local notifications generated on your device; we do not operate a push server and no data leaves your phone to deliver them. You can turn them off in the app's Settings or in iOS Settings.

5. On-device coaching

Taper's coaching insights are generated on your device. Your health and training data are not sent to a third-party AI service to produce them.

6. Usage analytics

We use Firebase Analytics to understand which features are used and to fix problems, through aggregated, non-identifying events such as screen views. This helps us improve the app. It is not linked to your Apple Health data and is not used to build an advertising profile of you.

7. Strava (optional)

Taper does not connect to Strava unless you ask it to. If you connect your Strava account from Settings, Taper sends your recorded activities to Strava on your behalf — the GPS route, timings, distance, heart rate, elevation and calories for each one, along with a name and a short description. Activities recorded with Taper are sent automatically while the connection is on; anything else is only sent when you tap "Send to Strava" on that activity.

Activity data travels from your device to Strava directly and is not stored on our servers. Our servers are involved only in the sign-in step: exchanging and renewing the access token that authorises Taper to post to your account. Your Strava tokens are stored in your iPhone's Keychain, not in the cloud.

You can disconnect at any time from Settings → Strava, or from your Strava account settings. Disconnecting stops all further sending; activities already on Strava remain there and are governed by Strava's own privacy policy.

8. How your information is shared

We do not sell your personal information. We share data only with the service providers that make the app work:

• Google Firebase (Authentication, Firestore, Analytics, Cloud Functions) — for optional sign-in, plan backup, usage analytics and the Strava sign-in step. See Google's Privacy Policy.
• Strava — only if you connect your Strava account, and only the activity data described in section 7. See Strava's Privacy Policy.
• Legal authorities — only if required by law.

9. Data retention & your choices

Health data is not retained on our servers at all. Your training profile lives on your device, and in the cloud only while you remain signed in. You can:

• Revoke Health access in iOS Settings
• Delete your plan from the app
• Delete your account and cloud backup from the app's Settings
• Disconnect Strava from the app's Settings
• Turn notifications on or off at any time

10. Children's privacy

Taper is intended for a general audience of adults training for endurance events. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this policy as the app evolves. We'll post any changes on this page and update the date above.

12. Contact us

Questions about your privacy or this policy? Email support@runtaper.com.

← Back to Taper