Privacy Policy

Effective 9 September 2026 · MAPLOFT LTD
Contents
  1. Overview
  2. The app runs on your devices
  3. Apple Health
  4. Contribute Workout Data (opt-in)
  5. What we never collect
  6. Infrastructure & third parties
  7. Data security
  8. Retention & deletion
  9. Your rights
  10. Changes to this policy
  11. Contact

1Overview

Restcue is a rest-timer app for Apple Watch and iPhone. It times the rest between your weightlifting sets and uses on-device sensors to detect when you resume lifting.

Restcue has no user accounts, shows no advertising, and contains no third-party analytics or advertising SDKs. The app functions entirely on your own devices.

The short version: Nothing about your workouts is sent to us unless you explicitly turn on Contribute Workout Data in Settings. That setting is off by default. When it is on, Restcue uploads anonymised wrist-motion and heart-rate recordings from your workouts, tagged only with a random ID, used solely to improve the app's set/rest detection. You can turn it off at any time.

2The app runs on your devices

Your rest durations, settings, and workout history are stored locally on your iPhone and Apple Watch and synced between them using Apple's WatchConnectivity framework. This data is not transmitted to us. We cannot read it, access it, or recover it if you lose your device.

If you have iCloud Backup enabled, Apple may include Restcue's local data in your standard device backup. That is governed by Apple's Privacy Policy, not ours, and we have no access to it.

3Apple Health

With your permission, Restcue reads your heart rate from Apple Health during a workout. This is used on-device to help detect when you have resumed lifting and, if you rest with heart-rate-based auto-extend enabled, to decide when to end a rest.

When you run a workout, Restcue writes a single standard Strength Training workout to Apple Health, recording the start and end time plus summary figures (duration, average and peak heart rate, calorie estimate, set count). Restcue does not write any per-set, per-rep, or weight data to Health.

Data held in Apple Health is controlled by you through the Health app and governed by Apple's Privacy Policy. You can revoke Restcue's Health access at any time in Settings → Health → Data Access & Devices.

4Contribute Workout Data (opt-in)

Restcue's set/rest detection is driven by a model trained on real workout sensor data. You can help improve it by contributing your own. This is entirely optional and off by default. You turn it on from Settings → Help Improve Restcue → Contribute Workout Data, after reading an in-app explanation screen.

What is collected when it is on

Recordings are transferred from the watch to the iPhone at the end of a session and uploaded from the iPhone shortly afterwards.

How it is identified

Each contribution is tagged only with a random identifier generated on your device the first time it is needed, and stored in the app. It is not your name, email, Apple ID, Apple's identifier for vendors (IDFV), advertising identifier, or any account. Deleting and reinstalling the app generates a new random identifier with no link to the previous one. The random identifier exists only so that recordings from one install can be grouped together and de-duplicated.

Purpose and legal basis

Contributed data is used only to train, test, and improve the machine-learning model that decides when a set has started or ended. It is not used for advertising, profiling, or any automated decision that affects you, and it is never sold.

Heart-rate data is health data and is treated as special category data under Article 9 UK/EU GDPR. Our legal basis for processing contributed data, including heart rate, is your explicit consent (Article 6(1)(a) and Article 9(2)(a) UK/EU GDPR), given by switching the setting on. You may withdraw that consent at any time by switching it off, which stops all further recording and upload. Withdrawal does not affect processing that already took place.

5What we never collect

Restcue does not use any analytics or crash-reporting SDK.

6Infrastructure & third parties

When you contribute workout data, the uploaded recordings are received by a small service we operate on Cloudflare and stored in Cloudflare R2 object storage. Cloudflare acts as our data processor and does not use the content for its own purposes. See Cloudflare's Privacy Policy. Storage and processing may take place outside the UK/EEA; where that is the case, transfers are made under the UK/EU Standard Contractual Clauses or an equivalent approved mechanism.

Payments are not part of Restcue. If in-app purchases are added in future, this policy will be updated before they ship.

App distribution, HealthKit, and (if enabled) iCloud Backup involve Apple and are governed by Apple's Privacy Policy.

7Data security

Data on your device is protected by your device's own security (passcode, Face ID / Touch ID, and iOS data protection). We recommend keeping iOS up to date.

Uploads to our contribution service are made over HTTPS. The stored recordings contain only sensor readings and the random identifier described above. If we become aware of a security incident affecting data subject to UK GDPR, we will assess our obligations and notify the ICO within 72 hours where required. To report a vulnerability, email hello@maploft.com; we aim to respond within 5 business days.

8Retention & deletion

Local app data stays on your device until you delete it in the app or remove the app.

Contributed recordings are retained for as long as they are useful for model development. Because they are not linked to your identity, we generally cannot isolate the recordings that came from a particular person after upload. You remain in control in two ways: switching Contribute Workout Data off stops any further recordings, and deleting the app severs the random identifier so nothing further can be associated with it. If you have a specific concern, contact us and we will help as far as the anonymised data allows.

9Your rights

UK & EU (UK GDPR / GDPR)

You have the right to access, correct, erase, restrict, or object to processing of personal data we hold about you, and to data portability. In practice we hold almost nothing that identifies you: the app's data is on your device, and contributions are anonymised. The main identifiable information we could hold is anything you send us by email. To exercise any right, or to withdraw consent to data contribution, contact hello@maploft.com; we respond within 30 days. You may also lodge a complaint with your supervisory authority — in the UK, the ICO.

California (CCPA / CPRA)

We do not sell or share personal information. The only data that reaches a third party (Cloudflare, as our processor) is anonymised sensor data that cannot reasonably be linked to you. Because we hold no identifiable user records, there is nothing to disclose, delete, or transfer at an individual level. Questions: hello@maploft.com.

10Changes to this policy

We may update this policy as the app changes or the law changes. Material changes will be noted in an App Store update description or an in-app notice. The effective date above always reflects the latest version.

11Contact

MAPLOFT LTD, registered in England & Wales.
hello@maploft.com