[Optional] BurstReps Health Data Collection and Use Consent
BurstReps asks for your separate consent before collecting and using the health information you choose to connect from Apple Health or Android Health Connect. Some of this information is sensitive personal information under Korean law and may be protected as health data in other places. This consent is separate from your review of our general Privacy Policy.
1. Health data covered
We read and process only data types you allow on the operating system’s permission screen. Availability varies by device and OS.
| Category | Data types |
|---|---|
| Body measurements | Weight, body-fat percentage |
| Energy and activity | Active energy, basal energy, step count, walking and running distance and other movement distance |
| Cardiovascular and recovery | Heart rate, resting heart rate, heart-rate variability (HRV), blood oxygen saturation, estimated VO₂ max |
| Workouts | Workout type, start and end time, duration, energy burned, distance, and other workout details supplied by the OS |
| Sleep | Sleep sessions, sleep and wake times, duration, and available awake, REM, light, and deep sleep stages |
Blood oxygen saturation, VO₂ max, and some sleep stages may be available only on particular devices or operating systems.
2. Why we use this data
With your consent, we use connected health data to:
- Synchronize Apple Health or Health Connect data to BurstReps and display it in your Records.
- Provide statistics, trends, and summaries about weight, body fat, activity, heart rate, sleep, and exercise.
- Personalize workout, nutrition, and recovery features using your goals and Records.
- When you use AI Coach, supply the health data needed to answer your questions or create or adjust workout, meal, body, goal, or schedule Records and plans.
- Evaluate quality, errors, and safety, and improve the prompts and algorithms of the health, fitness, and AI coaching features we provide to you.
This improvement is part of the disclosed purpose of the connected-health and coaching features covered by this consent.
Only designated privacy personnel may inspect identifiable source records when necessary to investigate errors or safety, or to improve these features. We restrict and log that access. We do not send original values from connected health records to external development and analysis tools. When development or evaluation needs examples, we review their provenance and use synthetic or de-identified examples.
We do not sell this data or provide it for ad targeting, data brokerage, or a third party’s independent marketing. We seek separate optional consent before using an identifiable member’s health-progress story in promotion.
3. How long we keep it
We keep and use connected health data until the earliest of account closure, withdrawal of this consent, or a request to delete that data. We then stop consent-based use, delete records under our control without undue delay, and use deletion controls or request procedures for records held by outside processors. Backups that cannot be individually erased, provider security records, and legally retained information follow the periods, exceptions and procedures in Sections 5–7 of our Privacy Policy. Not every copy disappears at the same instant; remaining backups are not reused for ordinary Service operations.
4. Outside processors and international processing
Cloud and AI processors may process health information outside Korea where needed for the connected features and AI Coach. The recipients, countries, data categories, purposes, transfer timing/method, and retention are described in Sections 4 and 5 of our Privacy Policy, including Section 5’s explanation of destinations and global processing. Each provider receives only information needed for the feature; not every provider receives connected health data. The rule in Section 2 against sending original connected-health values to external development and analysis tools also applies.
We apply paid-API terms and training opt-out controls. Processing and retention exceptions for safety, abuse investigations and legal obligations are described in Sections 1 and 5 of the Privacy Policy. This consent does not separately authorize outside providers to use your data for advertising or general model training.
5. Your choice and effect of refusal
You may decline this optional consent. In that case, you cannot use Apple Health or Health Connect synchronization, trends or summaries based on connected data, or personalized and AI Coach features that require that data. You may still create an account and manually log meals and workouts, and you may use other features that do not need connected health data.
6. Withdrawing consent and changing OS permission
- Changing Apple Health or Health Connect permission in device settings can stop future synchronization or narrow the data types shared.
- Turning off OS permission does not necessarily delete health data already stored by BurstReps.
- Use the app’s connection/privacy controls or email company@burstreps.com to withdraw this consent and request deletion of data already stored by BurstReps.
- We handle deletion and provider deletion requests under Section 3 and Section 7 of the Privacy Policy, and explain the outcome and any limits on deletion.
OS permission and your consent to BurstReps are distinct. We obtain separate consent when you first connect and record the consent document’s version and the time of consent. We notify existing connected users of changes by email, push notification, or an in-app notice, and separately request additional consent where required by applicable law.
7. Controller and contact
- Company: BurstReps (버스트렙스)
- Representative and privacy officer: Hyojun Choi
- Business registration number: 596-10-02401
- Email: company@burstreps.com
The Korean version is the master text to the extent applicable law permits. This does not limit nonwaivable rights where you live.
Effective date: October 9, 2026