Privacy

Effective October 7, 2026

The Derived app has no account, no server that holds your data and no analytics. Your training and health data is read, stored and analyzed on your own devices. We never see it.

What the app collects

Nothing. The app contains no analytics, advertising, tracking or crash-reporting code, and it does not send us usage data, identifiers or diagnostics. Its App Store privacy label is “Data Not Collected”. If you write to us, we receive your email and use it only to answer you.

Apple Health

• Derived asks for access once, in a single Apple Health sheet listing every type it reads or writes. You can change any answer at any time in the Health app.
• Data read from Apple Health stays on your iPhone. It is never sold, never used for advertising and never sent to us.
• Derived writes to Apple Health only the types you approved, and only when you do something that calls for it: importing a workout file, or changing a value such as your height, weight or threshold power.

On your devices

• Everything Derived computes, it computes on your iPhone. The weekly summary is written by Apple’s on-device language model from numbers Derived already computed; it does not leave the device.
• Derived does not use iCloud to store your data. Your iPhone’s own backup, in iCloud or on your computer, may include the app’s data, as Apple handles it under your settings.
• A Mac or iPad you pair with Derived receives a read-only copy over your local network, in sessions you approve on the iPhone.
• You can export everything, at any time, as files you control. Deleting the app deletes its data from the device; what it wrote to Apple Health stays there until you remove it in the Health app.

Fitness platforms

Connections to third-party fitness platforms are coming. Each will be off until you turn it on, and data will move only when you ask, directly between your iPhone and the platform. We will not see it. What a platform does with data you send to it is governed by its own privacy policy.

Some platforms require an app secret when a sign-in is exchanged for a token. That secret cannot live inside an app, so the exchange passes through a small service at api.getderived.com, run on Cloudflare. It adds the secret, forwards the one-time code to the platform and returns the answer to your iPhone. It stores nothing and keeps no logs. Your activities and health data never pass through it.

Apple Weather

On request, for one outdoor workout, Derived asks Apple Weather for the conditions at its start. It sends the start location rounded to about a kilometer and the hour; no account is involved.

Sharing with a coach

Derived Pro, for coaches, is coming. Sharing with a coach will send an encrypted copy that you sign, limited to what you choose. Only you hold the key, so we cannot read it, and you can revoke it from your iPhone at any time.

This website

getderived.com uses Google Analytics to count visits and see which pages are read. Google Analytics sets cookies (_ga and _ga_YEP5RGMEME) and receives the pages you view, your browser and device type, and an approximate location derived from your IP address. Google Ireland Limited processes this data as its privacy policy describes. You can block these cookies in your browser or with Google’s opt-out add-on.

The site is served by Cloudflare, which processes your IP address to deliver the page and protect it from abuse. None of this involves the app: Derived sends nothing to Google Analytics, and nothing about your visits reaches it.

Children

Derived is not directed at children.

Changes and contact

If this policy changes, the new version appears on this page with a new date. Questions go to hello@getderived.com. Derived is made by Peakbits & Co.