Your data, kept small.
This policy covers every app Ripixel publishes. It says what each one collects, what it does with it, who else touches it, and how to get it deleted. Where an app reads data from Google, the Google section below applies too.
Who we are
Ripixel Ltd is a small software label based in Nottingham, UK. We are the data controller for the apps listed here. Questions, requests and complaints go to hello@ripixel.co.uk.
Apps covered: FitGlue. New apps are added here before they ask anyone for data.
The short version
- We never sell, rent or trade your data, and never use it for advertising.
- An app only reads the accounts you connect, and only what it needs for the feature you turned on.
- Nothing is made public unless you choose to publish it.
- You can disconnect an account or ask for everything to be deleted at any time.
FitGlue
FitGlue joins up your fitness apps: it takes a workout from where you recorded it, adds detail from your other connected services, and sends the finished activity where you want it.
What it collects
- Workouts from the apps you connect (for example Hevy or Strava): type, time, duration, distance, sets, reps and weights, route and elevation.
- Health data from Google Health, read-only, when you connect it: heart rate, resting heart rate and heart-rate variability, weight and body composition, sleep, steps and activity, and nutrition logs.
- Things you add: photos, notes, answers to its questions, and files you upload (such as a FIT file or a sweat-test export).
- Connection details: the access tokens each service gives FitGlue, so it can keep reading on your behalf.
What it does with it
- Adds heart rate, heart-rate zones, effort, calories, weather and location context to your workouts.
- Shows you your own sleep, weight, activity and nutrition trends.
- Writes a short description or summary of an activity or a week. To do this it sends that activity's figures (which can include heart-rate summaries) to an AI model provider. That provider processes it only to return the text, and it is not used to train models.
- Sends the finished activity to the destinations you choose, such as Strava.
- If you turn on public sharing, publishes the activities you choose (including any heart-rate chart) to a web page. Nothing is public by default.
Where it lives
FitGlue runs on Ripixel's own server in the UK and stores activity records in Google Cloud. Data is encrypted in transit and at rest, and access tokens are only readable by FitGlue itself.
Google user data
FitGlue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google data is used only to provide the user-facing features described above, for the person who connected it.
- It is never sold, never used for advertising, and never used to develop, improve or train general AI or machine-learning models.
- It is only transferred to others where needed to provide those features (the hosting and AI providers below, and the destinations and public pages you choose), for security, or where the law requires it.
- No person reads it, except with your permission, to investigate a security issue or abuse, or where the law requires it.
You can remove FitGlue's access at any time from your Google Account's third-party connections. FitGlue then can no longer read anything new from Google.
Who else touches it
- Google Cloud: storage of activity records and connection details.
- Anthropic: the AI model that writes activity and roundup text, from the figures for that activity only.
- Sentry, where enabled: error reports, so problems can be fixed. These carry technical details, not your health data.
- The services you connect (such as Strava, Hevy and Google Health) receive or send only what you asked FitGlue to move.
Keeping and deleting
Data is kept while you use the app. Disconnecting a service deletes its access tokens straight away. Email hello@ripixel.co.uk to have everything deleted; it is removed from our systems within 30 days. Copies already sent to a destination you chose (such as a Strava upload) are managed by that service.
Your rights
Under UK GDPR and the Data Protection Act 2018 you can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and take it elsewhere. We process it to provide the service you asked for, and health data only with your explicit consent, which you can withdraw by disconnecting. If you are unhappy with how we handle it you can complain to the Information Commissioner's Office.
Changes
When this policy changes, the date at the top changes with it. A change that affects how existing data is used will be told to you before it applies.