Privacy notice

Version 2026-10-08-beta-v1. This notice covers the invited Shuen beta for adults (18+), distributed through Apple TestFlight. The app also shows a short version of this notice before you start. If anything here changes materially, we will update this page and its version, and ask again where your choice is needed.

Who is responsible

Hidde van Hall and Julian Kroon jointly decide how Shuen processes personal data. Email support@shuen.app for privacy, security, support, and access or deletion requests.

What the app handles

With your permission, Shuen reads measurements from your compatible WHOOP band over Bluetooth. Depending on the band, this can include heart rate, beat intervals and HRV, movement, sleep and workout information, temperature, battery and connection state. The app calculates wellness estimates such as Sleep, Readiness, Load and Body Activation. You may also enter profile details, habits, journal entries or corrections. Measurements and estimates can reveal health information. Shuen does not ask for your WHOOP password or read your WHOOP cloud history.

Your choices and legal bases

Each of these is a separate choice, and you can change it later in the app.

• Health tracking on your iPhone needs your explicit consent to processing health data (GDPR Articles 6(1)(a) and 9(2)(a)). Bluetooth permission is separate.
• A Shuen account is optional and uses Sign in with Apple. Apple gives us an account identifier and an email address, which can be a private relay address. Signing in alone does not upload health data.
• Cloud history is a separate, optional consent. It stores supported summaries, scores and their calculation context, your entries and recent detail in your account. The raw band stream is not routinely uploaded.
• Sync diagnostics are an optional consent, described below.

Withdrawing a consent does not affect processing that happened before. We do not use your information for advertising, sale, research, model training or third-party AI services.

Sync diagnostics

Sync diagnostics are not health data. They only describe how the app works: app build and band generation, app start and Bluetooth connection events, sync progress and errors, storage maintenance results and duration, whether sleep analysis ran or failed, and roughly how far behind your data is. Event times are rounded to the minute. They contain no heart rate, sleep or other measurements, scores, names, email addresses or band identifiers.

Reports carry a random code created on your phone when you turn diagnostics on, not your name or account. We use them only to find and fix connection and sync problems. They are stored in Frankfurt and deleted after 7 days. Diagnostics are off by default. Turning them off stops future reports and removes the code from your phone; turning them on again creates a new code. Withdrawing health consent also stops them.

Where data go

Health tracking stores your data in protected storage on your iPhone. If you choose cloud history, it goes to Shuen's account archive, run on Supabase (Auth, Postgres and private Storage) in Frankfurt, Germany. Sync diagnostics go to the same Frankfurt service. The operators and Supabase can technically access stored data; this is not end-to-end encryption.

Service providers handle data for us: Supabase (archive and diagnostics), Apple (TestFlight distribution and Sign in with Apple), Cloudflare (this website and forwarding of our email addresses) and Google (our support mailbox). Some of them are based in the United States and may process data outside the EEA under their data-protection terms, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. Ask us for details of these safeguards.

When you visit this website, the host handles ordinary connection data such as IP address and request time to deliver and secure the pages. The site has no analytics, advertising trackers or nonessential cookies. If you email us, please do not send health screenshots, detailed measurements or passwords.

Retention and control

The retention guide lists what is kept and for how long. In the app's Data & Privacy screen you can export, correct and delete data, withdraw cloud consent, delete your account, or withdraw all health consent, which stops collection and calculations and deletes applicable health data. We cannot remotely erase a phone that stays offline or copies you exported yourself.

Your rights

You may request access, correction, deletion, restriction and portability of your personal data, object where applicable, and withdraw consent at any time. We normally respond within one month and verify identity proportionately. You can complain to a data-protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens. Contact support@shuen.app to exercise a right or raise a concern.

Limits

Shuen is a beta for personal wellness use. It is not a medical device and does not diagnose or treat anything. It is independent of WHOOP.