Winded is a racing app that runs on your heart rate. That makes almost everything it touches health data, so this page is specific about what is collected rather than vague about it.
Winded never asks for an email address, a password, or a sign-in. You are identified by a random identifier generated on your device the first time you open the app, plus whatever name you type. Nothing links that identifier to you personally, and deleting the app discards it.
These are shared with the other people in the same race — that is the whole point of a leaderboard — and are stored on servers operated by Supabase in the United States so that a race survives a phone losing signal mid-class.
The camera is used for exactly one thing: reading a friend's race code from a QR code on their screen. No image is stored, recorded, or transmitted — the frames are examined for a code and discarded. Bluetooth is used to read the heart rate your Whoop or chest strap broadcasts, and connects to nothing else.
With your permission Winded reads your resting and maximum heart rate, and writes your race back as a workout so it counts toward your rings. Health data is read on your device and only the two baseline numbers above ever leave it. Apple Health data is never used for advertising and is never shared with third parties, as Apple requires.
Race data is kept so that recaps and past results keep working. If you want a race — or everything associated with your device — deleted, email the address below and it will be removed.
Winded is not directed at children under 13 and does not knowingly collect their data.
If this policy changes in a way that affects what is collected, the date at the top changes with it.
Questions, or a deletion request: hello@winded.fit