Privacy Policy

Last updated: 18 September 2026 · Effective date: 18 September 2026

1. Who We Are

This Privacy Policy explains how the Luris app for iPhone ("Luris" or the "App") handles your data. Luris is developed and provided by Cirjan Darius ("we", "us" or "our"), who is the data controller for the personal data described here. You can reach us at iosallapps@gmail.com.

Luris has no account of its own and we run no servers. The App sends nothing to us. It is built only with Apple's own frameworks, and the only outside services it uses are Apple services, described below.

2. Privacy at a Glance

3. Apple Health

3.1 What Luris asks to read

Luris asks Apple Health for permission to read the data types below. iOS lists each one in the permission sheet, and you decide which ones to allow.

• Steps, walking and running distance, cycling distance and flights climbed
• Active energy and resting energy
• Exercise minutes and stand time
• Heart rate and resting heart rate
• Sleep
• Body measurements: weight, body fat percentage, lean body mass and height
• Workouts

Luris uses this data to show your activity, trends, streaks, achievements and progress charts. When you first connect Apple Health, Luris copies up to a year of daily totals, such as steps, energy, exercise minutes, distance and floors, into its own storage on your iPhone, so that your history, streaks and achievements work straight away.

3.2 What Luris saves to Apple Health

If you allow it, Luris saves each workout you finish in the App to Apple Health: the type of workout, when it started and ended, and an estimate of the active energy you burned. For GPS walks and runs it also saves the distance you covered.

Luris writes nothing else to Apple Health. In particular, it does not write your body weight or any other body measurement, heart rate, sleep or your route.

3.3 Our commitments for health data

In line with Apple's rules for apps that use HealthKit (App Review Guideline 5.1.3):

• Health data is used only to provide the fitness features of Luris to you.
• It is never used for advertising, marketing or data mining, and it is never sold.
• It is never shared with third parties, including advertisers and data brokers. The only exception is one you choose: if you join the leaderboard, your weekly step total goes to Apple's Game Center (section 7). A card you decide to share is also your choice (section 6).
• Luris does not store health data in iCloud. It keeps its copy in its own storage on your iPhone.
• It is never sent to us.

3.4 Your control

You can change what Luris may read or write at any time in Settings > Privacy & Security > Health > Luris. Apple does not tell apps whether read access was refused, so Luris simply shows no data for a type it cannot read. Workouts Luris saved stay in Apple Health until you delete them (section 13).

4. Location

4.1 During walks and runs

When you start a walk or a run, Luris asks for permission to use your location while you use the App. It uses GPS to draw your route and measure distance and pace. For as long as the session runs, tracking continues while your iPhone is locked or you switch to another app, and iOS shows that the App is using your location. Location updates stop when you pause or finish.

Your route is saved with the workout in Luris's storage on your iPhone. It is not written to Apple Health and it is never sent to us.

4.2 Maps

The maps in Luris are Apple Maps. To show the map around you during a session, and around your route afterwards, your iPhone loads map data for that area from Apple. Apple's Apple Maps privacy information applies.

4.3 Choosing kilometres or miles

Luris starts with the units that match your iPhone's region settings and then checks the country you are actually in. To do this, it sends one location to Apple's map service, which returns the country. Only the country code is kept, on your iPhone, and Luris sets your units to match it.

The location used is either the first GPS position of a walk or run, or, when you open the App, the last position iOS already holds for Luris. Either way it exists only if you have allowed Luris to use your location. Luris never asks for location permission for this purpose and never switches location on to get one.

Once a country has been found, Luris does not look it up again. If a lookup fails, for example without a signal, Luris tries again later, at most once each time you open the App. The lookup does not happen at all if you have already chosen your units in Luris, or if you have changed the measurement system in iOS Settings yourself. You can change your units at any time in Profile > Preferences.

4.4 Your control

You can change or turn off location access in Settings > Privacy & Security > Location Services > Luris. Without it, Luris cannot record walks and runs, and it does not look up your country.

5. Camera and Photos

5.1 Camera

Luris uses the camera only in the Share Studio, when you choose to take a photo as the background of a share card. Luris does not keep the photo. It becomes part of a card only if you save or share that card yourself.

5.2 Choosing photos

To add a progress photo, a profile picture or a background for a share card, you choose photos with Apple's photo picker. The picker runs outside Luris: Luris receives only the photos you select and cannot see the rest of your library.

• Progress photos are saved as files in Luris's private storage on your iPhone. You can delete each one in the Progress tab.
• Your profile picture is reduced in size and saved in Luris's storage on your iPhone. It is not shown to other players on the leaderboard.

Neither is uploaded anywhere or sent to us.

5.3 Saving to your photo library

If you save a share card, Luris asks for permission to add photos to your library. This permission lets Luris add images. It does not let Luris read your library.

6. Sharing Cards

Luris can turn a workout, a route, a streak, an achievement, your progress or your day into an image. Nothing is shared unless you choose to share it. When you do, the card goes to the app or person you pick in the iOS share sheet, or to Instagram Stories if you tap Stories, and that app's privacy policy applies to it. Luris does not receive a copy.

Details that could identify you, such as your name, your body measurements and the start and end of a route, are hidden on cards by default. You can choose to show them before you share.

7. The Leaderboard and Game Center

7.1 Joining is your choice

The weekly steps leaderboard is optional and runs on Apple's Game Center. Nothing is sent to Game Center unless you join the leaderboard in Luris. To take part, you need to be signed in to Game Center with your Apple Account.

7.2 What is shared

Once you have joined, Luris submits one number to the Luris leaderboard in Game Center: your step total for the current week, calculated from your Apple Health steps. It updates this score from time to time while you use the App, for example when you open the Home tab or the leaderboard. Apple stores the score with your Game Center account, and other players see it with your Game Center alias and your rank.

Luris sends nothing else to Game Center: no daily breakdown, no workouts, no heart rate, no sleep, no routes, no location, no photos and no name you typed into Luris.

7.3 What Luris reads from Game Center

To show the board, Luris loads the current week's top 100 entries: each player's Game Center alias, rank and weekly step total. It does not store them, and it does not store your Game Center identifiers.

7.4 Leaving

You can leave at any time with Leave leaderboard in the leaderboard menu. Luris stops submitting straight away. Game Center does not let apps delete a score that has already been posted, so this week's score stays on the board until the weekly reset. Signing out of Sign in with Apple in Luris also ends your membership.

Apple keeps Game Center records under its own privacy policy, and you manage your Game Center profile and alias in Settings > Game Center. See Apple's Game Center privacy information.

8. Sign in with Apple

Signing in is optional. It lets Luris greet you by name. Luris asks Apple only for your name, never for your email address.

When you sign in, Luris receives from Apple an identifier that is unique to Luris and, the first time only, the name you choose to share. Both are stored in the iOS Keychain on your iPhone and are not synced to iCloud Keychain. Your name also becomes your profile name in Luris, where it appears on the Home tab and in Profile, and on share cards only if you choose to show it. There is no Luris account on any server, and nothing about your sign-in is sent to us. Luris may ask Apple whether your sign-in is still valid, so that it can sign you out if you have stopped using Sign in with Apple with Luris.

Sign Out in Profile removes the identifier and the name from the Keychain. The Keychain can keep them after the App is deleted, so sign out first if you want them gone. Your profile name stays until you change it in Profile or delete the App. You can stop using Sign in with Apple with Luris in Settings > your name > Sign-In & Security > Sign in with Apple. See Apple's Sign in with Apple privacy information.

9. Other Data on Your iPhone

Luris keeps the following in its own storage on your iPhone. We have no access to it there.

• Your answers during setup and in Profile: name, age, gender, height, weight, goal, training days, the watch you use and your units
• Workouts, sets and routes, your weekly plan, habits, goals, challenges and achievements
• Daily activity summaries copied from Apple Health (section 3)
• Progress photos and your profile picture (section 5)
• Settings, such as your units and whether you joined the leaderboard

9.1 Widget and Live Activity

Luris shares today's steps, goal, calories, active minutes, distance and streak with its widget, through storage on your iPhone that only Luris and its widget can use. A walk or run in progress shows its timer, distance and pace in a Live Activity on the Lock Screen and in the Dynamic Island. Both are updated on your iPhone and neither uses a server. Anyone who can see your Home Screen or Lock Screen can see what they show.

9.2 Notifications

If you allow notifications, Luris schedules one on your iPhone to tell you when a rest between sets is over. These are local notifications: Luris uses no push notification service. You can turn them off in Settings > Notifications > Luris.

9.3 Device backups

Like any app's data, Luris's data on your iPhone is included in your iCloud Backup or computer backup if you use one. Those backups are controlled by you and Apple and are covered by Apple's privacy policy. Luris itself does not copy your data to iCloud or anywhere else.

10. What We Never Do

11. Every Connection Luris Makes

Luris connects to the internet only for these purposes:

• Apple Game Center: only if you join the leaderboard (section 7).
• Apple Maps: to show maps, and for the one-time country lookup that sets your units (section 4).
• Sign in with Apple: only if you use it (section 8).
• Exercise images: every exercise image ships inside the App. Only if one were missing would Luris download it from the public, open-source Free Exercise DB on GitHub. That request contains no personal or health data, but as with any web request, GitHub can see your IP address.

Apple Health, the widget, the Live Activity and notifications work entirely on your iPhone. Links in the App, such as the one to this policy, open in your browser.

12. Legal Bases for Processing (GDPR)

Most of what Luris does happens only on your iPhone, where we cannot access your data. If you are in the European Economic Area, the United Kingdom or Switzerland, and to the extent the GDPR applies, these are the legal bases:

• Explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR) for health data, given in the iOS Health permission sheet, and for publishing your weekly step total, given when you tap Join after the App explains what other players will see.
• Consent (Article 6(1)(a)) for location, camera, photos and notifications, given in the iOS permission prompts.
• Contract (Article 6(1)(b)) for providing the features you choose to use under our Terms of Use, such as Sign in with Apple.
• Legitimate interests (Article 6(1)(f)) for the one-time country lookup that shows distances and weights in the units used where you live, and for answering your emails. You can object at any time by contacting us, and you can always choose your units yourself in Profile.

You can withdraw any consent at any time, as described in each section above. Withdrawing consent does not affect processing that took place before.

13. Keeping and Deleting Your Data

Data on your iPhone stays there until you delete it. We hold no copy of it, so apart from emails you sent us there is nothing for us to delete on our side.

• In the App: delete progress photos one by one in the Progress tab, sign out of Sign in with Apple in Profile, and leave the leaderboard from its menu.
• Everything Luris stored: delete the App. Touch and hold the Luris icon, tap Remove App, then Delete App. This removes Luris's storage, progress photos, settings and widget data from your iPhone. The Sign in with Apple details in the Keychain can survive this, so sign out first.
• Apple Health: workouts Luris saved stay in Apple Health until you delete them. In the Health app, tap your profile picture, then Apps, then Luris, and choose Delete All Data from "Luris".
• Game Center: a score already posted stays until the weekly reset, and Apple keeps Game Center records under its own privacy policy.
• Emails: we keep them only as long as we need to answer you and follow up, and then delete them.
• Backups: your iCloud or computer backups keep what they contain until you delete them.

14. Your Rights

14.1 European Economic Area, United Kingdom and Switzerland

You have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to complain to a data protection authority, for example in the country where you live or work. In Romania this is the ANSPDCP, at dataprotection.ro. The European Data Protection Board lists the authorities of every EU and EEA country, and in the United Kingdom it is the Information Commissioner's Office. We would appreciate the chance to help you first.

14.2 California residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• We do not sell your personal information and we do not share it for cross-context behavioural advertising.
• Sensitive personal information, such as health data and precise location, is used only to provide the App's features to you, on your iPhone, and never to infer characteristics about you.
• The App does not send personal information to us. The only personal information we receive is what you include in an email to us. The categories that Luris handles on your iPhone, and what Apple receives, are described in sections 3 to 8.
• You have the right to know about, access, correct and delete your personal information, and not to be treated differently for using these rights. You may use an authorised agent.

14.3 How to use your rights

Most of your data is on your iPhone, where you can see, change and delete it yourself, as described in section 13. For anything else, email us at iosallapps@gmail.com. We answer within one month, or within 45 days for California requests. We will never ask you to send us health data to handle a request.

Data that Apple holds for Game Center, Sign in with Apple and Apple Maps is managed by Apple. You can request a copy of it or its deletion at privacy.apple.com, and we are happy to help.

15. International Transfers

We do not transfer your data anywhere, because the App sends nothing to us. Apple may process the data it receives for Game Center, Apple Maps and Sign in with Apple in the United States and in other countries, under the safeguards described in Apple's Privacy Policy. If you email us, our email provider, Google (Gmail), processes your message and may do so outside your country. The rare exercise image download described in section 11 goes to GitHub, in the United States.

16. Children

Luris is not directed at children under 13, and you must be at least 13 to use it, as our Terms of Use say. We do not knowingly collect personal data from children, and because the App sends nothing to us, we hold none about any child. A parent or guardian can remove everything Luris stored by deleting the App, and can limit Game Center with Screen Time. If you have a concern, please contact us at iosallapps@gmail.com.

17. Security

Luris keeps your data in its private storage on your iPhone, protected by iOS app sandboxing and by the encryption iOS applies when your iPhone has a passcode. Sign in with Apple details are kept in the iOS Keychain. Connections to Apple's services, and the exercise image download, are encrypted. No method of storing or sending data is completely secure, so we recommend protecting your iPhone with a passcode.

18. This Website

lurisapp.com is a static website hosted on GitHub Pages. It sets no cookies and uses no analytics, advertising or tracking. As with any website, the host, GitHub, processes technical data such as your IP address to deliver the pages. See the GitHub Privacy Statement.

19. Changes to This Policy

We will update this policy when Luris or the services it uses change. When we do:

• We will update the dates at the top of this page.
• If a change materially affects you, we will tell you in the App or in the App Store update notes before it takes effect.
• If a change requires your consent, we will ask for it.

The current policy is always at https://lurisapp.com/privacy.html.

20. Contact Us

If you have any questions or requests about this Privacy Policy or how Luris handles your data, please contact us:

• Developer and data controller: Cirjan Darius
• Email: iosallapps@gmail.com
• Website: https://lurisapp.com
• Support page: https://lurisapp.com/support.html

We aim to reply within 7 business days.

Luris Privacy Policy, effective 18 September 2026. See also the Terms of Use. This page is served as a static file and sets no cookies.