← Back to treadpilot.app

Privacy Policy

Last updated 25 August 2026

The short version: TreadPilot's developer collects nothing. There are no accounts, analytics, advertising, third-party SDKs or app internet requests, and TreadPilot has no server. Workout records and settings are stored locally on the iPhone or iPad running the app. With your permission, completed workouts are written to Apple Health. If you explicitly enable Heart-rate bridge on an iPhone, its current fresh Apple Watch reading is made available over local Bluetooth to a nearby device that connects to it, normally your iPad. It is never sent to us or to an internet service.

Who we are

TreadPilot is developed by Backlog Fejlesztő Kft., Budapest, Hungary. You can reach us at hello@backlog.hu.

TreadPilot is coming soon to the App Store. This policy describes the release currently in preparation and the data handling built into the app.

What the app stores, and where

When you use TreadPilot, it records your workouts: speed, incline, distance, duration, calories, step count, elevation gain and, when available, heart rate from Apple Watch, a paired standard Bluetooth heart-rate sensor or the treadmill's grip sensor. It also stores your workout programs, profile values used for calorie and heart-rate-zone calculations, and the display name and app-scoped Bluetooth identifier of a heart-rate sensor you choose so that it can reconnect.

Workout history, programs, settings and pairing details are stored locally on the iPhone or iPad running TreadPilot. They may be included in system-managed iCloud or local device backups. TreadPilot does not send them to its developer, a backend or an internet service. The live heart-rate transfers described below are direct, local device-to-device transfers.

Apple Health

All Apple Health access is optional. Without profile access, TreadPilot uses values you enter or documented defaults. Without heart-rate access, Apple Watch heart rate is unavailable, but the app and standard Bluetooth heart-rate sensors continue to work.

Reading — body mass, height, date of birth and biological sex are used for on-device calorie estimation. Resting heart rate and heart-rate samples from the previous 12 months are used on device to calculate training zones; TreadPilot excludes heart-rate samples it wrote itself when deriving an observed maximum. During an active Apple Watch workout session, the Watch companion reads the current live heart rate and mirrors it locally to the paired iPhone. You can override profile and zone values manually.

Writing — completed workouts, with active energy burned, distance and heart-rate samples. This happens only for real treadmill workouts, only after you permit it, and workouts recorded in Demo Mode are deliberately never written to Health.

Health data is never used for advertising or marketing and is never sent to us, analytics providers, advertisers or an internet service. Apple Watch heart rate is mirrored locally to the paired iPhone; if you explicitly enable Heart-rate bridge, the current fresh reading can also be relayed over local Bluetooth to the nearby device that connects to the bridge. Once a workout is in Apple Health, Apple's own privacy terms govern it and you control it from the Health app.

Bluetooth

TreadPilot uses Bluetooth only for workout hardware you choose: to connect to a compatible treadmill, read its live data and send speed and incline commands; to discover and connect to standard Bluetooth Heart Rate Service sensors such as chest or arm straps; and, on iPhone only when you enable Heart-rate bridge, to present the current fresh Apple Watch reading as a standard Bluetooth heart-rate sensor for another nearby device, normally your iPad.

Heart-rate sensor discovery is limited to the standard Heart Rate Service. TreadPilot stores the selected sensor's display name and app-scoped Bluetooth identifier locally so it can reconnect, but does not infer location, scan for beacons or build a history of nearby devices. Heart-rate bridge is off by default. It sends live heart-rate measurements only over local Bluetooth and never uploads them or stored workout history to the internet.

Apple Watch

The Apple Watch companion reads live heart rate during an active workout session and mirrors it locally to the paired iPhone using Apple's workout-session link. The Watch discards its own workout copy; the iPhone or iPad running the treadmill workout writes the completed record to Apple Health only with permission. If Heart-rate bridge is enabled, the iPhone can relay the current fresh Watch reading over local Bluetooth as described above. No Watch data is sent to TreadPilot's developer or an internet service.

What the app does not do

Deleting your data

TreadPilot stores its own data locally on each device. Deleting the app from a device removes its local database, settings and saved sensor pairing details from that device. It does not delete records stored separately on another device or workouts already written to Apple Health.

Children

The app is not directed at children and collects no data from anyone, regardless of age. It does control a motorised treadmill belt, so it should not be used by children unsupervised — the app says so on first launch.

Your rights

Data protection law (including the GDPR) gives you rights of access, correction, erasure and portability over personal data a company holds about you. We hold none. We have no database of users, because the app never sends us anything. If you would like this confirmed in writing, or have any question about it, write to hello@backlog.hu and we will answer.

Changes to this policy

If the app ever gains a feature that changes any of the above — for example an optional cloud backup or a Strava upload, which would necessarily involve sending data somewhere — this page will be updated before that feature ships, and the change will be reflected here with a new last-updated date.

Contact

Backlog Fejlesztő Kft., Budapest, Hungary — hello@backlog.hu