Privacy Policy

• Your email (for your account and one-time-code login).
• Your display name (optional).
• The tracking data you enter: commitments/“resists” (which may include potentially sensitive abstinence items), training logs, habits, Tred 75 and other challenge data, goals, optional notes or reasons, and optional money-saved figures.
• The health profile you optionally enter — height, weight, sex, age or date of birth, activity level, and goal — used to calculate your calorie and training-day targets.

App preferences (theme, week start, haptics, day rollover, notifications) are stored locally on your device.

We do not use third-party advertising or analytics trackers.

With your permission, Tred reads a limited set of metrics from Apple Health — sleep, steps, active energy, heart rate, resting heart rate, flights climbed, workouts, and exercise minutes — to show your training load inside the app. This access is read-only and optional; you can grant or revoke it any time in iOS Settings → Privacy & Security → Health.

These metrics are read on demand and shown to you in the app — we do not store them on our servers. As Apple requires, we never use Health data for advertising or marketing, never sell it, and never share it with third parties.

Abstinence data may reveal health information, which is “special personal information” under POPIA and “special category data” under GDPR. We process it only to provide the service, on your explicit consent, and we never sell it or use it for advertising.

The health profile you enter and the Apple Health metrics we read are also special category data under POPIA and GDPR, processed only to provide the service on your explicit consent.

To run and secure your account, store and show your tracking, send login codes, send reminders you turn on, maintain and improve the app, and meet legal obligations. No selling, no third-party ads.

• Performance of a contract.
• Your consent (for sensitive data and notifications).
• Our legitimate interests (security).
• Legal obligations.

Data is stored in Supabase (EU region, eu-west-1), with row-level security so you only access your own records, encrypted in transit (TLS). Login emails are sent via Resend.

The health profile you enter is stored in Supabase (EU); Apple Health metrics are not stored on our servers.

We share data only with service providers needed to run Tred, never sold:

• Supabase (database/auth)
• Resend (email)
• Vercel (hosting)
• Apple/Google (app distribution)

Plus any disclosures required by law.

Your data may be processed outside South Africa (for example, in the EU). It remains protected under POPIA and GDPR.

We keep your data while your account is active. Deleting your account deletes your personal data and tracking records, except where limited retention is legally required.

You can access, export (in-app CSV), correct, and delete your data (in-app account deletion is permanent), withdraw consent, object to or restrict processing, and complain to a regulator (the SA Information Regulator or your EU/UK data protection authority). Use the in-app tools or email hello@tred.co.za.

Profile → Account → Delete account permanently removes your account and all your data.

Tred is intended for users 18 and over and is not directed to children.

We will update the “Last updated” date and notify you of material changes in-app or by email. Questions: hello@tred.co.za.