Privacy Policy

Rigor is a health and fitness app for iPhone and Apple Watch covering training, cardio, fasting, food, sleep and recovery. It needs no Atlas Peak Media account. Atlas Peak Media runs one server for Rigor, and it receives data only while you share your location live, as described below.

What you record in Rigor (workouts, sessions and routes, fasts, meals, sleep, measurements, notes) is stored on your iPhone, and on your Apple Watch when you use it there.

With your permission Rigor reads from Apple Health: body weight, height, heart rate, heart rate variability, resting heart rate, cycling and running power, VO2 max, blood glucose, sleep, active and resting energy, dietary energy, and workouts.

With your permission Rigor writes to Apple Health: body weight, dietary energy, and the workouts you finish with their distance, energy, heart rate and power. A workout's route is written to Apple Health only if you turn that on in Settings; it is off by default.

Rigor does not send Health data to Atlas Peak Media or anyone else, and does not use it for advertising. You can review and revoke these permissions in the Health app at any time.

Rigor reaches out only when a feature you use needs public data. Each of these services receives your device's internet address with the request, and each has its own privacy practices.

Barcodes: when you scan a product, Rigor sends the barcode number to Open Food Facts, and to USDA FoodData Central if Open Food Facts has no match. Searching for a food by name stays on your phone. Product photos load from Open Food Facts.

Maps: Apple's map service receives the area a map is showing. When you plan a route, its points go to Apple's directions service so the line can follow roads and trails.

Terrain and imagery: to draw 3D terrain, Rigor asks the U.S. Geological Survey for the one-degree square of elevation around a route (a region about 100 kilometers across), for imagery tiles around a route or a session (each about a kilometer of ground), and, during a live session, for a 4 kilometer box of finer elevation around where you are.

Apple Music: when you open music in Rigor, catalog and library requests go to Apple under your Apple ID.

Weather: when the weather feature is available, Apple Weather receives a location rounded to about a kilometer and a time range.

Purchases: Apple's App Store handles Rigor Pro subscriptions. Atlas Peak Media never receives your payment details.

Live sharing is off until you turn on Share location for an outdoor session, or for every outdoor session, and choose people from your contacts. Rigor reads those people through Apple's contact picker, keeps them on your phone, and gets no other access to your contacts.

When the session starts, Messages opens with a link and you choose whether to send it; Rigor never sends a message for you. While the session records, Rigor sends Rigor's live-share server, every 30 seconds and at once when you pause or resume: your position rounded to about a meter, the session's elapsed time and distance, whether it is running or paused, and your phone's battery level. When the share begins it also sends the kind of session and whether you use miles or kilometers.

The server keeps no name, account, contact or device identifier, and like any server it receives your device's internet address with each update. It runs on Supabase, a database host that stores the share on Atlas Peak Media's behalf.

Anyone with the link can see that one session on a page at rigor-app.com/live: the route, the latest position, the time, distance and pace, and the battery level. The page draws its map with tiles from OpenFreeMap. The link stops working, and the positions are deleted, one hour after the session ends, and every share is deleted 24 hours after it began.

You can stop sharing at any time from the session screen while the recording goes on. Finishing or discarding the session ends the share, and turning on Operational Security in Settings ends it at its next update and keeps it off.

Rigor's Operational Security setting closes almost every path above: weather, route planning, imagery, the live 4 kilometer elevation box, Apple's maps, remote pictures, music browsing, live location sharing, routes written to Apple Health, and route files or route pictures you share. By default it also stops barcode lookups, workouts written to Apple Health, and Rigor's records in your iCloud Backup, and you can reopen each of those three. The one request it leaves open names which one-degree square of terrain to download, which describes a region and not a place.

Like most apps, Rigor's records are included in your iPhone's iCloud or computer backup unless you turn on Operational Security. A backup is managed by Apple under your Apple ID; Atlas Peak Media cannot read it.

Your iPhone and Apple Watch exchange your Rigor data directly through Apple's watch connection.

If you send feedback from Rigor, your email app sends us your message along with the app version, iOS version and device model, so we can answer you.

Crash and slowdown reports and the heart rate check stay on your phone (Settings, About) unless you choose to share them.

Rigor does not sell your data, show ads, or contain analytics, advertising or tracking software. It does not track you across other companies' apps or websites, so it never asks for tracking permission.

The Rigor pages on atlaspeakmedia.com set no cookies and run no analytics.

Rigor does not provide medical advice, diagnosis, or treatment.

Fasting features require a date of birth confirming you are 18 or older, and training plans that put load on you require 17 or older. Unloaded plans are available from 13.

You can delete individual entries in Rigor, or everything at once with Settings, Delete All Data. Deleting the app also removes its data from your phone. Anything Rigor wrote to Apple Health stays there until you delete it in the Health app.

For privacy questions, contact privacy@atlaspeakmedia.com.