PATHIUM
Privacy Policy
1. Summary
Pathium is a fitness app that runs primarily on your device. It's local-first: your training data lives on your device and, where you enable it, in your own Apple iCloud account. We don't operate user accounts, and we don't sell your personal information. This policy explains what data the app handles, where it goes, and your choices.
2. Information the app handles
Depending on the features you use and the permissions you grant, the app may process:
- Health & fitness data (Apple Health / HealthKit): with your permission, the app reads data such as heart rate, step count, body mass, date of birth, sleep, and resting heart rate, and writes data such as workouts, active energy, distance, flights climbed, workout routes, and mindful minutes. HealthKit data stays under Apple's framework and your control.
- Location data: with your permission, the app uses GPS to record routes, distance, pace, and elevation for outdoor activities, and to find nearby trails, resorts, and parks in Explore. Location is used only while you're recording an activity or actively browsing Explore.
- Motion & fitness sensors: device motion (pedometer, altimeter) to estimate steps, cadence, flights climbed, and elevation.
- Camera, photo library, and microphone: with your permission, to scan food barcodes, attach exercise or journal media, save progress photos, and record voice memos for journal entries.
- Face ID: used only on-device through Apple's own Face ID framework, to lock private journal entries and progress photos. Pathium never sees or stores any biometric data — Apple's system handles the match and only tells the app "yes" or "no."
- Content you create: workouts, programs, timers, habits, goals, journal entries, saved locations, voice memos, and progress photos, all stored on your device.
- App settings and preferences.
- Notifications & Live Activities: if enabled, the app schedules local notifications and shows Live Activities on your lock screen / Dynamic Island. Home Screen widgets share data with the main app only through a private, on-device App Group container — nothing leaves your device for this.
We don't require you to create an account, and we don't collect your name, email, or password to use the app.
3. How data is stored, and where it goes
- On your device: your training content, photos, and settings are stored locally.
- In your iCloud (only if/when you enable it): if you turn on iCloud backup/sync, your data is stored in your private iCloud account under Apple's terms. We don't have access to your iCloud data.
- Apple Health: data you authorize is read from/written to Apple Health and governed by your device's Health permissions, which you can change or revoke anytime in iOS Settings → Privacy & Security → Health, and in Pathium's own Settings → Permissions.
Pathium does not operate its own servers and does not transmit your personal or health data to us. Apple food analysis described below runs on the device. The other optional services listed below can send the data needed for a feature directly from your device to the named third party — never through a Pathium server:
- AI Meal Logging (optional): on a supported device, Apple Intelligence can analyze a description or photo on the device without sending it to a third-party AI provider. You can separately enable your own OpenAI or Anthropic API key; only when you select that method is the description or photo sent directly from your device to that provider under its privacy policy and terms. Pathium does not operate a relay server or receive the request. The copy-and-paste method is also optional and sends content only when you choose to share it. A failed Apple analysis never automatically sends content to another provider.
- Food database lookups (Find Food / Scan Barcode): searches and barcode scans are sent to public food databases (USDA FoodData Central, Open Food Facts) to look up nutrition info. Only the search term or barcode is sent — no personal information.
- Explore trail/resort data: when you browse Explore or view a resort/trail map, your selected location (not your precise live location) is sent to OpenStreetMap/Overpass and Apple Maps (MapKit) to fetch trail, lift, and amenity data for that area.
4. Apple HealthKit — required disclosures
Because the app uses HealthKit, we specifically affirm:
- We will not use HealthKit data for advertising, marketing, or other use-based data mining beyond providing you health and fitness features.
- We will not disclose HealthKit data to third parties without your authorization.
- We will not sell HealthKit data.
- HealthKit data is used only to provide features of the app you choose to use.
5. How we use information
We use the data described above only to:
- provide and operate the app's features (tracking, programs, timers, history, Nourish, journal, etc.);
- compute and display your stats, routes, and summaries;
- write your completed sessions to Apple Health, where you authorize it;
- show notifications and Live Activities you enable;
- fulfill the specific, opt-in third-party requests described in Section 3 (AI meal logging, food lookups, Explore maps).
We do not use your data for advertising, and we do not sell it.
6. Permissions you control
You can grant or revoke these anytime in iOS Settings, or from Pathium's own Settings → Permissions: Health, Location, Motion & Fitness, Notifications, Camera, Photos, Microphone, and Face ID. Revoking one disables the related feature — the rest of the app keeps working.
7. Children's privacy
Pathium is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information through the app, contact us and we'll address it.
8. Your rights and choices
- Access/Export: your data resides on your device (and your iCloud, if enabled); you can view it in the app and export a full backup from Settings → Data & Backup.
- Deletion: you can delete individual items, use the app's "Clear All Data" feature, or delete the app to remove its local data. Data you wrote to Apple Health is managed separately in the Health app.
- Region-specific rights: depending on where you live (for example, the EEA/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of personal data. Because we don't collect or hold your data on our own systems, most of these are already satisfied by the on-device controls above. For anything else, contact us.
9. Data security
Data stored on your device is protected by iOS device security — passcode, encryption, and app sandboxing. iCloud data, if enabled, is protected by Apple's iCloud security. No method of storage or transmission is 100% secure.
10. Third-party services
- Apple (iOS, HealthKit, iCloud, MapKit, App Store) processes data per Apple's own terms and privacy policy.
- OpenStreetMap / Overpass API — trail, lift, and resort map data for Explore.
- USDA FoodData Central and Open Food Facts — public nutrition databases for food search and barcode lookup.
- OpenAI and/or Anthropic — only if you enable your own API-key method and choose that provider for a food estimate, or separately use an AI Workout/Plan feature that you configured to call it.
11. Changes to this policy
We may update this policy. Material changes will be reflected by updating the effective date above and, where appropriate, an in-app notice. Continued use of the app after changes means you accept the updated policy.
12. Contact
Questions or requests: [email protected]