Privacy policy
Zones Up shows each member's heart rate on the gym TV. This page says what it keeps about you, where, who can see it, and how to have it deleted.
The short version
- Your gym keeps your results. A small computer at your gym keeps your name, your paired straps or watch, and a summary of each minute you train.
- Our server keeps no heart rate and no names. If you use the Apple Watch app, your heart rate passes through our server on its way to the gym and isn't stored there.
- Never sold, never used for ads. We don't sell your data, share it for advertising, or put ad or analytics tools in the app.
- Adults only. Zones Up is for members 18 and over.
- You can stop, hide or delete. Take off the strap or end the workout. Tap Stop sharing in the watch app, ask a coach to unpair your device or hide your name, or ask us to delete everything.
Who we are
Zones Up is made by Zones Up LLC, a company in Arkansas, USA. "We" and "us" on this page mean Zones Up LLC.
Your gym chooses to use Zones Up and decides how it's used. The gym is responsible for your data, and we handle it on the gym's behalf, only to run Zones Up for that gym.
This policy covers the Zones Up board at your gym, the Zones Up Apple Watch app, and this website.
What we keep, and where
Your data is kept in up to three places. Most of it never leaves your gym.
-
At your gym
The gym's hub, a small computer that runs the board
- Your name as shown on the board, typed by a coach, and a nickname if you choose one
- Your max heart rate, worked out from your age unless you give your own
- The straps and watches paired to you
- For each minute you're heard: your average and highest heart rate, the seconds spent in each zone, and your points
Not kept: every reading. The board shows your heart rate live, and the hub keeps only the summary of each minute.
-
On our server
Only if you use the Apple Watch app
- Which watch is paired to which member at which gym, by a member number, not your name
- A key for each watch, so only paired watches can send
- Server logs with your internet address, its last part blanked out, used to spot abuse such as a flood of pairing requests. The logs hold no heart rate, names, codes or keys, and are kept for 30 days.
Not kept: your heart rate or your name. Readings are held in memory only until your gym's hub collects them, usually a few seconds later. If the hub is offline, they're held for up to 96 hours, then dropped. They're never written to disk.
-
On your watch
The Zones Up app
- Your heart rate during a workout you start in the app, until it has been sent
- With each batch of readings, the app also sends the watch's model, watchOS version and battery level, to help us find problems
- Each class, saved as a workout in your own Apple Health
Not sent to us: the workouts in Apple Health. They stay on your own devices.
Who can see it
- Everyone in the room sees the board: your name, heart rate as a percent of your max, your zone and your points. The day's, week's and month's boards show members' points and classes.
- Your gym's coaches see the pairing page, behind a PIN, and can change your name, max heart rate and devices.
- We log in to the hub over a private, encrypted connection only to maintain, update or fix it, outside class times where possible. Every visit is recorded.
If you'd rather not be named, a coach can show a nickname instead, or hide your name: your tile then shows "Athlete", and you're left off the day's, week's and month's boards.
What we never do
- Sell your data.
- Use your data, including anything from Apple Health, for advertising or marketing, or share it with anyone who would.
- Put advertising or analytics tools in the app.
- Use your data for anything except running Zones Up for your gym.
A few companies help us run Zones Up, and each sees only what it needs:
- DigitalOcean hosts our server.
- Apple delivers the watch app and runs Apple Health.
- Cloudflare runs our domain's DNS and hosts this website.
- Google runs our email, so messages you send us are kept there.
- Clerk, from when app accounts start, will keep the names and emails of members who have an account.
How long we keep it
- Your minutes and points are deleted from the hub automatically 12 months after they were recorded.
- Your name and paired devices stay on the hub until a coach removes them or you ask us to delete them.
- A watch's pairing is deleted from our server as soon as the watch is unpaired.
- Readings waiting for an offline hub are dropped after 96 hours.
- Server logs are kept for 30 days.
Deleted data also leaves our backups: the hub's encrypted backups within about 90 days, and our server's backups within 4 weeks.
Your agreement
Before a coach pairs your strap or watch, you confirm you're 18 or over and agree to how your heart rate is used. Members paired before this was added are asked at their next visit.
The hub records which version of the agreement you accepted and when. Once coaches sign in with their own accounts, it also records which coach paired your device.
Your choices
Stop at any time
Take off your strap, or end the workout in the watch app. Nothing is sent when no workout is running.
Stop sharing from your watch
In the watch app, Stop sharing asks you to confirm, then unpairs your watch, withdraws your agreement and deletes every minute recorded from that watch. Minutes from your straps stay. If the watch was your only device, your name is removed too.
The watch goes back to its first screen, which asks for your agreement again. To start again, you agree again and a coach pairs the watch.
Unpair a device
Ask a coach to unpair your strap or watch. An unpaired watch stops sending and goes back to its pairing screen; your agreement stays, so pairing it again needs only a coach.
Delete a visit
A coach can delete a visit, and it disappears from every board and total right away. It's erased for good after 30 days; until then, a visit deleted by mistake can be put back.
Delete everything, or get a copy
Write to hello@zonesup.com or ask your gym. We'll delete your name, pairings and minutes from the hub and our server, or send you a copy of your minutes. We answer within 30 days and tell you when it's done.
Keeping it safe
- The hub is at your gym, and nothing at the gym accepts connections from the internet. The hub connects out to our server.
- The watch app and the hub talk to our server over encrypted connections, and each watch has its own key, which unpairing cancels.
- The coaches' pairing page is behind a PIN.
Chest straps broadcast your heart rate openly, as they're designed to, so any receiver nearby can hear it. They don't broadcast your name.
If your data is ever exposed, we'll tell your gym within 72 hours of confirming it, and help tell the people affected without unreasonable delay, within 30 days.
Adults only
Zones Up is only for adults, 18 and over: the board, straps and the Apple Watch app. A coach pairs a device only for a member who confirms they're 18 or over.
If we learn that someone under 18 has been paired, we'll unpair their device and delete their data.
This website
This website uses no cookies and no analytics. Cloudflare, which hosts it, may keep standard server logs, such as your IP address and the pages you asked for.
Changes
Each version of this policy has a number and a date. When we change what we keep, for example if our server starts keeping results or members can sign in to an account, we'll publish a new version and ask you to agree again before the change applies to you.
Contact
Questions about your data, or a request to see or delete it: hello@zonesup.com.
Zones Up LLC
501 Commerce Dr #13205
Maumelle, AR 72113