Levend

Privacy notice

Version 2026-11-04-beta-v16. This notice covers the invited Levend beta for adults (18+), distributed through Apple TestFlight. The app also shows a short version of this notice before you start. If anything here changes materially, we will update this page and its version, and ask again where your choice is needed.

Who is responsible

Hidde van Hall and Julian Kroon jointly decide how Levend processes personal data. Email support@shuen.app for privacy, security, support, and access or deletion requests.

What the app handles

With your permission, Levend reads measurements from your compatible band over Bluetooth. Depending on the band, this can include heart rate, beat intervals and HRV, movement, sleep and workout information, temperature, battery and connection state. The app calculates wellness estimates such as Sleep, Readiness, Load, Body Activation and the calories you burn, and shows your daily steps from your band's own step counter. You may also enter profile details, habits, journal entries, corrections, check-ins on how you feel (rested, focus, stress, energy and satisfaction), your weight, the calories you ate and a Nutrition goal. Measurements, estimates and these entries can reveal health information. Levend does not ask for any other account's password or read data your band's maker keeps online.

Instead of a band, you can choose Apple Health, for example with an Apple Watch, as your source. With the access you allow in iOS, Levend then reads from Apple Health your heart rate, heart-rate variability and beat-to-beat readings, resting heart rate, breathing rate, blood oxygen, wrist temperature during sleep, sleep and its stages, steps, active and resting energy, and workouts, and works out the same kinds of estimates from them. Levend only reads; it never writes to Apple Health. You enter your profile yourself, as with a band.

Your choices and legal bases

Each of these is a separate choice, and you can change it later in the app.

Withdrawing a consent does not affect processing that happened before. We do not use your information for advertising, sale, research, model training or third-party AI services. The one exception is band data you choose to share for testing, described below.

Sync diagnostics

Sync diagnostics describe how the app works: app build and the band model when it can be established, app start and Bluetooth connection events, sync progress and errors, storage maintenance results and duration, whether sleep analysis ran, was deferred or failed; fixed reasons why sleep detection or a score is unavailable; roughly how much input is available, roughly how far behind your data is and how much recording is still waiting on your band, whether the band's clock had to be reset, and whether another app collected your band's data. Event times are rounded to the minute. They contain no heart rate, sleep or other measurements, scores, sensor sample times, names, email addresses or band identifiers. Technical status can indicate that tracking is missing.

Reports carry a random code created on your phone when you turn diagnostics on, not your name or account. We use them only to find and fix connection and sync problems. They are stored in Frankfurt and deleted after 7 days. Diagnostics are off by default. Turning them off stops future reports and removes the code from your phone; turning them on again creates a new code. Withdrawing health consent also stops them.

Sharing band data for testing

During the beta you can turn on Share band data for testing in Settings. It is off by default. When it is on, the app uploads each day, starting a week before the day you turn it on: everything your band recorded, second by second all day (heart rate, movement, heartbeat timing, whether it was worn, its optical, light and skin temperature readings and its step counter); everything the app worked out for that day (sleep times and stages, naps, the Sleep score, Readiness, Load, steps, activities and suggested activities, burn and the other results, with the profile values the app calculates with: age, sex, height and weight); and what you logged or changed yourself for that day (activities, journal answers and notes, check-ins, meals, weight, and sleep and nap times you changed or added), with the app build, band model and time zone. It does not include your name, email, account, or anything that identifies your band or your account. Days are linked to a random code created on your phone, not to your name or account. If you agreed to an earlier wording (sleep and naps only), the app keeps sharing what you agreed to until you agree to this one; every day from a week before you agree is then shared again in full.

We use this data during testing to check and improve anything Levend measures or works out, such as sleep and naps, steps, activity detection, Readiness, Load and burn. We, the founders, analyse it, and may do so with an AI assistant (Anthropic's Claude); Anthropic keeps data under its own terms. It is stored in Frankfurt and each day is deleted 14 days after upload, and so are our own working copies. Turning the choice off, or withdrawing health consent, stops uploads and deletes your stored data within 7 days; if your phone is offline, the app asks again when it can reach us. This choice ends when Levend launches publicly; stored data is then deleted.

Where data go

Health tracking stores your data in protected storage on your iPhone. What Levend reads from Apple Health, and everything worked out from it, stays on your iPhone: it is never sent to cloud history, sync diagnostics or sharing for testing, and never used for advertising or sold. If you choose cloud history, it goes to Levend's account archive, run on Supabase (Auth, Postgres and private Storage) in Frankfurt, Germany. Sync diagnostics and band data shared for testing go to the same Frankfurt service, kept apart from account history. The operators and Supabase can technically access stored data; this is not end-to-end encryption.

Service providers handle data for us: Supabase (archive, diagnostics and band data shared for testing), Anthropic (AI-assisted analysis of band data shared for testing), Apple (TestFlight distribution and Sign in with Apple), Cloudflare (this website and forwarding of our email addresses) and Google (our support mailbox). Some of them are based in the United States and may process data outside the EEA under their data-protection terms, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. Ask us for details of these safeguards.

When you visit this website, the host handles ordinary connection data such as IP address and request time to deliver and secure the pages. The site has no analytics, advertising trackers or nonessential cookies. If you email us, please do not send health screenshots, detailed measurements or passwords.

Retention and control

The retention guide lists what is kept and for how long. In the app's Data & Privacy screen you can export, correct and delete data, withdraw cloud consent, delete your account, or withdraw all health consent, which stops collection and calculations and deletes applicable health data. We cannot remotely erase a phone that stays offline or copies you exported yourself.

Your rights

You may request access, correction, deletion, restriction and portability of your personal data, object where applicable, and withdraw consent at any time. We normally respond within one month and verify identity proportionately. You can complain to a data-protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens. Contact support@shuen.app to exercise a right or raise a concern.

Limits

Levend is a beta for personal wellness use. It is not a medical device and does not diagnose or treat anything.