Consumer Health Data Privacy Policy — Inspir

Version 1.0 — effective October 21, 2026

Legal · Health data · Version française · Delete your account

This page supplements our Privacy Policy and specifically describes how Inspir handles your health data. It is designed to meet, among others, the Washington My Health My Data Act and Nevada's consumer health data law, and it applies to all users wherever they live.

In short. We never sell your health data. We never use it for advertising. We only collect it with your explicit consent and only share it with your separate consent. You can withdraw your consent and delete this data at any time.

1. Who we are

Xomnify L.L.C., a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Contact: inspir@xomnify.com.

2. Health data we collect and how we use it

Physiological measurements: heart rate and oxygen saturation (SpO₂) measured during your sessions, as a per-session summary (minimum, average, maximum) and readings a few seconds apart. Use: to display them during the session, in your history and on your other devices.
Training data: breath-hold and recovery durations, reference time, tables and programs followed, feelings and notes. This information may reveal aspects of your physical condition. Use: to build your sessions, track your progress, and compute your score and badge.
Health-related consents: the date and time you granted or withdrew the authorizations described on this page, kept to demonstrate that your choices were respected.

This data is used solely to provide the service you use. It is never used for advertising, commercial profiling or any other purpose.

3. Sources

You, when you complete a session or write a note.
Your devices, if you connect them: Apple Health and Apple Watch (with the permission you grant in iOS), Health Connect on Android (with the permission you grant in Health Connect), and the Bluetooth heart rate straps or pulse oximeters you pair.
The app itself, which computes your score and badge from your practice.

4. Consent

Collection: physiological measurements are only stored on our servers if you agree, when you first turn on a measurement source. If you decline, they are still displayed during your sessions but never leave your phone.
Sharing: sharing with your team and in your posts requires separate authorizations, off by default, which you turn on in settings after a warning. Sharing a session with your team is a choice you make session by session.
Withdrawal: you can withdraw any of these authorizations at any time in settings. Withdrawing your collection consent deletes the measurements already stored on our servers.

5. Sharing

We do not sell your health data and do not share it with any advertiser or data broker. It may be accessible:

to members of your teams: the sessions you choose to share (date, type, durations) and, if you allow it, the summary of your heart rate and oxygen saturation for those sessions;
to the public: only what you post yourself on social networks from the app, and your measurements only if you have allowed it;
to our hosting provider, Supabase, which stores the data in the European Union (Ireland) and acts only on our instructions;
to the Health app on your iPhone or to Health Connect on Android, if you allow your sessions to be saved as workouts: the data stays there under your control.

We may have to disclose data to comply with a legal obligation; in that case, we would limit the disclosure to what is strictly required.

6. Your rights

Know and access: confirm whether we process your health data, obtain a copy, and get the list of third parties with which it has been shared. Exporting from the app gives you an immediate copy.
Delete: deleting your account from the app deletes your health data from our servers; it is then deleted from our backups within 7 days. We pass your request on to our hosting provider.
Withdraw consent: at any time, in settings.

To make a request, email inspir@xomnify.com. We verify your identity using your account email address and respond within 45 days, which we may extend once by 45 days where necessary, after informing you. Requests are free of charge.

Appeals: if we decline to act on your request, you may appeal by replying to the same message with the subject "Appeal". We will respond in writing within 45 days, explaining our decision. If you remain dissatisfied, you may contact your State Attorney General (Washington or Nevada) or the data protection authority of your country.

7. Security

Access to your health data is limited to those who need it to operate the service. Communications are encrypted, data is encrypted at rest, and each user can only access their own data through row-level access rules in our database.

8. Changes

Each version of this page is dated and archived. We will not start using your health data for a new purpose without your prior consent.

Inspir — Consumer Health Data Privacy Policy, version 1.0. In case of discrepancy between language versions, the English version prevails for United States residents.