Privacy policy

Spurt is a training app. It holds the training data you enter, and nothing else. There is no advertising, no analytics and no tracking of any kind, and your data is never sold or shared with anyone.

Last updated 12 October 2026.

Who is responsible

What we store

• Your account: email address and an encrypted password.
• Your profile: the details you choose to enter — name, sex, date of birth, height, body weight, training experience, injuries and preferences — used to calculate your training loads, paces and daily energy targets.
• Your training: planned and completed sessions, logged sets, distances, durations, heart rate, perceived effort, morning check-ins, races and personal records.
• Food and energy entries, if you turn calorie tracking on.

We process this to provide the app itself: the legal basis is the contract between you and Keisa Oy (GDPR Article 6(1)(b)). Health-related data such as body weight, injuries and heart rate is processed on your explicit consent (Article 9(2)(a)), which you give by entering it and can withdraw by deleting it or your account.

Where it is stored

In a PostgreSQL database operated by Supabase Inc. on Amazon Web Services in Ireland (eu-west-1), inside the EU. The web app is delivered by Vercel Inc. Both act as processors for Keisa Oy and may not use your data for their own purposes. Each row is protected by database-level rules that allow only your own account to read it.

Apple Health

With your permission, Spurt reads workouts, active and resting energy, sleep and heart-rate variability from Apple Health, and writes your finished sessions back as workouts. Health data is read on your device; a workout you import becomes a training record in your account, the rest is used on the device and not uploaded. You can change or revoke this permission at any time in the Health app under Sharing → Apps, and Spurt keeps working without it.

Connections you choose

If you connect a third-party training service such as Strava, Spurt exchanges data with it only while the connection is active and only to import or export your own activities. Disconnect it in Settings → Connections at any time.

How long we keep it

For as long as you have an account. Delete your account in Settings → Account → Delete account and your profile, sessions, sets and energy entries are deleted permanently, normally immediately and in any case within 30 days, including from backups within 90 days. Export your data first from Settings → Export if you want to keep a copy.

Your rights

You have the right to access, correct, delete and port your data, and to object to or restrict its processing. The app gives you most of this directly: Settings → Export for a copy, Settings → Account for deletion. For anything else, write to privacy@keisa.fi. If you believe we handle your data unlawfully you may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Children

Spurt is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you, we will say so in the app before the change takes effect. The date at the top always shows the current version.