Who we are and what this policy covers
OxyBoost is operated by Artem Verbat. This policy explains how we handle personal data when you use the OxyBoost iOS and Android apps, our web training app and the oxyboo.st website. For privacy questions or requests, contact support@oxyboo.st. You can also reach us at artem.verbat@gmail.com.
Delete your OxyBoost account and data
Email support@oxyboo.st to request permanent deletion of your OxyBoost account and its associated data. Send the request from your account email address where possible, or include that address so we can locate the account. You can request deletion here without reinstalling the app or signing in.
On Android, Settings → Account → Request Account Deletion opens an email request. You must send the email to submit it. Opening the email composer does not send the request or delete your account. Support may need to verify that the account belongs to you before processing the request; do not send your password or payment-card details.
An account-deletion request covers your OxyBoost authentication account and profile, music favorites, saved exercises, and training history, including notes, reactions and stored sensor readings. You can also contact us to request deletion of particular records without closing your account.
Some billing records may need to be retained for accounting, tax or other legal obligations. Backup copies may remain after active records are removed, until those copies are replaced or deleted. When handling your request, we will explain any information that must be retained and any relevant backup handling. We do not promise immediate deletion of every stored copy.
Account deletion does not cancel a subscription or request a refund. Cancel separately through Google Play, Apple or the website billing service where you purchased it, following our subscription instructions. Contact support if you need help with your request.
Accounts and information you provide
When you create or use an account, we process your account identifier, email address and any name or profile information supplied by you or your sign-in provider. Available sign-in methods depend on the platform and include Apple, Google and email with a password. Apple or Google determines which profile information it shares with us.
If you choose to upload a profile photo, we store the selected image and associate it with your account. We use it to display your avatar and keep your profile photo available across devices signed in to that account.
We also process the exercises you create, settings, training history, notes, reactions and messages you send to support. Session history can include exercise configuration, dates, timings, phases, repetitions and your recorded results. We use this information to provide your training tools, restore your account and synchronize your records across your devices.
Optional sensors and health data
If you choose to connect a supported Bluetooth sensor, OxyBoost receives the heart rate and/or blood oxygen saturation (SpO₂) supplied by that device. Saved exercise history may include these readings, their timestamps, elapsed session and phase time, repetition, and the source sensor name and identifier. These records are stored on your device and synchronized to your account so you can review them later.
On platforms with My sensors, saved sensor names and Bluetooth identifiers are also kept on your device to help you reconnect. Removing a saved sensor removes it from that list and stops its saved connection; it does not remove readings already saved in training history.
Connecting a sensor is optional. You can disconnect it or revoke Bluetooth permission to stop receiving new readings. This does not erase earlier records. Contact us if you want stored readings permanently deleted.
We use sensor readings and exercise history to provide training and history features. We do not use them for advertising, advertising measurement, data-broker sharing or medical research, and we do not sell them. OxyBoost displays measurements from external sensors as part of a training diary. It does not measure blood oxygen using the phone itself, diagnose conditions, recommend treatment or determine whether a breath hold is safe.
Music and favorites
Where background music is available, saving a favorite stores its track identifier, title, artist, source and license information, download availability and synchronization status with your OxyBoost account. This lets your favorites appear on devices signed in to the same account, including through sign-in methods linked to that account.
Playback preferences and downloaded audio files are stored locally and are not uploaded by OxyBoost to your account. Where supported, saving a favorite also downloads it for offline listening when the artist permits public downloads. Tracks without that permission can remain in your favorites for online listening.
Music searches, requested tracks, and streaming or download requests are sent to our music provider. These requests do not include your OxyBoost account identifier, email address, training history or sensor readings.
Artist and license links open external websites, where those sites’ privacy policies apply. See the music provider’s privacy policy for its data practices.
Subscriptions and payments
App Store purchases are processed by Apple, and purchases made through Google Play are processed by Google Play. See Google’s Privacy Policy for its handling of Google Play account and payment data. Website purchases are processed by billing and payment providers. These providers process checkout, payment and billing information under their own privacy policies. OxyBoost does not store your full payment-card number or card security code.
We associate purchases and subscription access with your OxyBoost account. This involves your account identifier, purchased plan, transaction and subscription status, and related purchase history. We use these records to enable paid features, restore access and resolve billing requests. See our subscription terms for cancellation and refunds.
Device storage, diagnostics and usage analytics
The apps store account sessions, settings and training records on your device. The web app uses browser storage and caches app resources for offline use. Music files cached by earlier versions may remain in device storage until the app’s data or the website’s stored data is cleared. Signing out does not necessarily remove all training data cached on that device. On a shared device, you can clear the website’s stored data using your browser settings; export or synchronize any records you want to keep first.
Our hosting, authentication and security providers process technical information such as network requests, IP addresses, browser or device details and security events to deliver and protect the service. We use security checks to protect sign-in and registration from automated abuse, and email delivery providers to send account confirmation and password recovery messages.
The iOS app sends reports about crashes and errors, including failures to synchronize account data. Reports can include details about the error and your device, together with your account identifier and email. We use these reports to investigate and resolve problems.
When you use the iOS app while signed in, we collect usage statistics linked to your account identifier: a randomly generated installation identifier, device type, operating system, available operating-system and app versions, app platform and usage date. We use them to understand which devices and app versions are used and improve compatibility. They do not contain sensor readings or exercise content and are not used for advertising tracking.
The website and web app collect page-view statistics to understand usage and improve the service. These statistics include visited pages, referrers, browser, device type and region. We do not send sensor readings or exercise records as analytics events.
Who receives data
We use service providers for hosting and data storage, including profile photos; account sign-in; subscription management and payment processing; account email delivery; protection against automated abuse; crash and error reporting; app and website usage statistics; and music searches and playback. They receive the information relevant to their services. Payment and sign-in providers may also process information for their own purposes under their policies.
If you enable sharing for an exercise, its name and configuration become available to anyone with its link. This does not publish your session history or sensor readings. You can stop sharing the exercise, but we cannot remove copies already saved by someone else.
We may disclose information when required by law, to respond to valid legal requests, or to protect users and the service against fraud or security threats. If the service changes ownership, relevant data may transfer with it, subject to applicable law and notice of any material change.
Why we process data and international processing
Where laws such as the GDPR apply, the legal bases for processing depend on the purpose: providing the service you request, our legitimate interests in securing and maintaining it, meeting legal obligations, and consent where required, including for health data. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Our providers may process data in countries other than where you live. The protections available there may differ. Where applicable law requires safeguards for an international transfer, those requirements apply to our use of the providers. Contact us for information about the processing and safeguards relevant to your data.
Retention and deletion
We retain account and training information for as long as it is needed to provide your account and history. Retention also depends on legal obligations, resolving disputes, protecting the service and maintaining backups. Purchase records may need to be retained for accounting or legal reasons even after an account is closed.
Deleting an exercise or history entry, or removing a music favorite, hides it from the app and synchronizes that change. The underlying record may remain in local or cloud storage until it is permanently removed; the delete action is not an immediate erasure of every stored copy. For permanent deletion, use the OxyBoost account and data deletion request above. That section explains how to submit a request, account verification and possible retained records or backup copies.
Account deletion, clearing browser storage and uninstalling an app do not cancel a paid subscription. Cancel through the service where you purchased it, as described in our Terms of Use.
Your choices and rights
Depending on the law that applies to you, you may have rights to access, correct, delete or receive a portable copy of your personal data; restrict or object to processing; and withdraw consent where processing relies on it. You may also complain to your local data protection authority. Contact us at support@oxyboo.st to exercise these rights. We respond within the period required by applicable law.
You can choose whether to connect a sensor, share an exercise or make a purchase. Where available, the web app’s backup export lets you download your stored training data. Exports may include records previously marked as deleted, so keep exported files private.
Children, security and policy updates
OxyBoost is not directed to children under 13. If you believe a child has provided personal data without the necessary authorization, contact us so we can investigate and remove it where required.
We use measures intended to protect personal information, but no network or storage system is completely secure. Protect access to your device and account, and avoid sending unnecessary health information in support messages.
We may update this policy when the service or our practices change. The current version and update date will remain on this page. We will provide additional notice or seek consent for material changes where required by law.