Opens in a new tab

Privacy Policy: DualGoals App

Last updated: 10th October 2026

This policy covers the DualGoals iPhone app. The website has its own section at https://dualgoals.app/privacy-policy/.

1. In short

  • Your health data and your readings stay on your iPhone. We never receive them.
  • There is no account and no cloud storage.
  • With your consent, we collect usage statistics to improve the app. They are tied to a random ID, not to your name or email. You can switch this off at any time.
  • We collect crash reports so we can fix errors. They contain no health data.
  • We don’t sell data, show ads or track you across other apps and websites.

 

2. Who is responsible

DualGoals is operated by Jakob Gehring, Breitscheidstrasse 43, 16348 Wandlitz, Germany.

Email: support@dualgoals.app.

3. Data that stays on your device

To provide readiness, nutrition, and weight-trend recommendations, the app uses the following data. It processes and stores all of it only on your iPhone. None of it is sent to us or to anyone else.

From Apple Health (read-only, with your permission): workouts; activity (active and resting energy, distances, speed, cycling cadence, power and FTP, running power and speed, swimming distance and strokes, walking speed); VO2 max; heart rate, resting heart rate, heart rate variability and heart-rate recovery; sleep; body measurements (weight, height, BMI, body fat, lean body mass, waist circumference); nutrition (energy, protein, carbohydrates, fat) and water; date of birth and sex.

From your chest strap (via Bluetooth): heart rate and beat-to-beat (RR) intervals during your morning reading.

What you enter in the app: for example, your goals, training preferences and settings.

DualGoals never writes to Apple Health. You can change or withdraw Apple Health access at any time in the iPhone Settings app (Health → Data Access & Devices → DualGoals). Bluetooth access can be changed in Settings → Privacy & Security → Bluetooth.

Device backups. If you back up your iPhone (for example with iCloud Backup or on a computer), iOS may include the app’s data in that backup. You and Apple control this backup; we don’t have access to it.

Deletion. Deleting the app deletes all its data from your iPhone. Data in Apple Health stays there; it belongs to Apple Health, not to DualGoals.

4. Usage statistics (only with your consent)

Provider: PostHog Inc., using its EU cloud (servers in Frankfurt, Germany).

What is collected:

  • which screens and features you use, for example “onboarding completed” or “morning reading completed” (with technical details such as the reading’s duration and how far your baseline has progressed, but never the reading’s result);
  • app lifecycle events (installed, updated, opened, backgrounded);
  • a random ID generated for this app installation, and the install date;
  • device model and type, iOS version, app version and build, language, time zone, screen size and network type (Wi-Fi or mobile);
  • whether the app was installed through an Apple Search Ads campaign. To find out, the app asks Apple’s attribution service, only after you’ve consented;
  • your answers, if you choose to answer one of our occasional short in-app surveys.

PostHog keeps one profile per app installation, holding the latest device and app details listed above. It is not linked to your name or email.

We don’t collect your name, email or health values, and nothing you type, apart from survey answers you choose to give. IP addresses are discarded and not stored.

Why: to understand which parts of the app are used and where people get stuck, so we can improve it.

Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). We ask for it when you first open the app. You can withdraw it at any time in Profile → Privacy & legal. Withdrawal doesn’t affect the lawfulness of processing before it. We record the date and wording version of your decision so we can show it was given.

Retention: usage events are deleted automatically after 12 months. If you ask us to delete your data, we delete your profile and its events immediately.

Transfers: PostHog Inc. is a US company. Data is stored in the EU. Any access from the US is covered by PostHog’s certification under the EU–US Data Privacy Framework, including the Swiss and UK extensions (adequacy decision, Art. 45 GDPR). As a fallback, PostHog’s data processing agreement includes the EU Standard Contractual Clauses (Art. 46 GDPR).

Your analytics ID is shown in Profile → Privacy & legal. Include it if you ask us to access or delete your usage data; without it, we can’t find your data.

5. App configuration (without consent)

When the app starts, it asks PostHog for its current configuration, for example, whether a minimum app version applies or a feature must be switched off for safety. This request contains the random installation ID, app version and build, iOS version, device type and time zone, and no usage events. It is needed to operate the app safely.

Legal basis: our legitimate interest in operating the app securely and reliably (Art. 6(1)(f) GDPR; § 25(2) no. 2 TDDDG).

6. Crash reports (without consent)

Provider: Functional Software, Inc. (Sentry), using its EU region (servers in Germany).

What is collected: when the app crashes or an error occurs, a technical report: where in the code it happened, the error type and code, app version, device model and state (for example, memory, battery, orientation), iOS version, language, time zone, a random installation ID, and a trail of recent technical events (screens opened, network requests made by the app, app going to the background). Sentry also records app sessions, so we can see how often the app runs without crashing. Reports are designed to contain no health data: error messages are reduced to technical codes before sending. No IP address is stored.

Why: to find and fix errors.

Legal basis: our legitimate interest in a working, stable app (Art. 6(1)(f) GDPR; § 25(2) no. 2 TDDDG). 

Retention: crash and error reports are deleted automatically after 30 days.

Transfers: Sentry is a US company; data is stored in the EU. Any access from the US is covered by Sentry’s certification under the EU–US Data Privacy Framework, including the Swiss and UK extensions (adequacy decision, Art. 45 GDPR). As a fallback, Sentry’s data processing agreement includes the EU Standard Contractual Clauses (Art. 46 GDPR).

7. Apple

The app is distributed through the App Store. Apple processes data for downloads, purchases and App Store analytics under its own responsibility; see Apple’s privacy policy. Apple Health data is stored by Apple on your device and, if you choose, in your iCloud. DualGoals has no access to Apple’s copy.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time (Art. 7(3)).

To exercise these rights, email support@dualgoals.app and include your analytics ID from Profile → Privacy & legal.

You also have the right to complain to a data protection supervisory authority. Ours is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany (www.lda.brandenburg.de).

9. Age

DualGoals is intended for people aged 18 and over.

10. Not a medical device

DualGoals is a wellness and fitness app. It does not diagnose, treat or monitor any medical condition.

11. Changes

We’ll update this policy when the app changes. The date at the top shows the current version. If a change requires new consent, the app will ask for it.