Privacy Policy
Effective date: 2026-06-28 · Last updated: 2026-06-28
This policy applies to the Verde mobile application ("Verde", the "App") operated by Xuchen Sun ("we", "us", "our").
1. Overview
Verde is a health, fitness, and social application. We built Verde to keep your most sensitive information — your health and activity data — on your device by default. This Privacy Policy explains what we collect, why we collect it, how it is stored, who we share it with, and the choices and rights you have, including how to delete your account and all associated data from within the App.
Health data, in short: Your Apple Health (HealthKit) data is used only to power features you ask for. We do not use it for advertising, we do not sell it, and we do not share it with third-party marketers or data brokers.
2. Information We Collect
2.1 Account information
Verde uses Sign in with Apple for authentication. When you sign in, we receive: your Apple user identifier (a stable, app-specific ID), your email address (which may be an Apple private relay address if you choose to hide it), and the display name or nickname you provide.
2.2 Health & fitness data (Apple HealthKit)
With your explicit permission, Verde reads from and writes to Apple HealthKit: steps, distance, active energy, body weight, height, and workout records. This data is used on your device to display your activity, progress, and goals. HealthKit data remains on your device and in your Apple Health store; we do not upload your raw HealthKit data to our servers except where strictly necessary to provide a feature you have enabled, and never for advertising. You can grant or revoke each HealthKit permission at any time in the iOS Settings > Privacy & Security > Health, or in the Health app.
2.3 Location data
With your permission, Verde uses your device location to record GPS routes during workouts and to help you discover nearby places. You control location access in iOS Settings > Privacy & Security > Location Services, and you can use most of Verde without granting location access.
2.4 User-generated content
When you use Verde's social features, we collect and store the content you create: posts, comments, group chat messages, and profile photos / avatars. Photos and media are stored using Cloudflare R2. Content you post to public or group areas is visible to other users according to your settings.
2.5 Social graph
We store your following and follower relationships so that the social features of Verde work as expected.
2.6 Technical & usage data
To operate and secure the service, our backend may process limited technical data such as device/app version, basic log data, and timestamps. We keep this to the minimum needed to run, troubleshoot, and protect Verde, and we do not use it to build advertising profiles.
3. Data Summary
| Data | Purpose | Stored where | Shared for ads / sold? |
|---|
| Apple ID, email, nickname | Account & sign-in | Our backend (Cloudflare) | No |
| HealthKit (steps, distance, energy, weight, height, workouts) | Show activity & progress | Your device / Apple Health | No — never |
| Location / GPS | Workout routes, nearby places | Device; routes you save | No |
| Posts, comments, chats, photos | Social features | Cloudflare D1 / R2 | No |
| Following / followers | Social graph | Cloudflare D1 | No |
4. How We Use HealthKit Data
- We use HealthKit data only to provide and improve health and fitness features that you have enabled within Verde.
- We do not use HealthKit data for advertising, marketing, or any use-based data mining.
- We do not sell HealthKit data, and we do not share it with data brokers or third-party advertisers.
- We do not share HealthKit data with third parties except as needed to provide a feature you have requested, or with your explicit consent, or where required by law.
- HealthKit data is not used for any purpose unrelated to your health and fitness, and is handled in accordance with Apple's requirements for health data.
5. How We Use Location Data
Location is used to draw and save the route of a workout you record, to calculate distance and pace, and to surface nearby places when you choose the "explore" feature. We do not continuously track your location in the background beyond what is needed for an active workout you have started, and we do not sell location data.
6. User Content & Photo Storage
Posts, comments, group chat messages, avatars, and photos you upload are transmitted over encrypted connections and stored on our infrastructure (Cloudflare D1 for structured data and Cloudflare R2 for media files). You are responsible for the content you share. You can edit or delete your content, and deleting your account removes your content as described in Section 9.
7. Third-Party Services
Verde relies on a small number of service providers to function. We do not use third-party advertising networks or analytics SDKs that build advertising profiles.
- Apple — Sign in with Apple: handles authentication. Apple's handling of your data is governed by Apple's Privacy Policy.
- Cloudflare — Workers, D1, and R2: our backend runs on Cloudflare Workers, with the D1 database and R2 object storage hosting your account data, social content, and media. Cloudflare acts as our processor/sub-processor and is subject to its own terms and security commitments.
8. Data Storage, Security & International Transfer
We use industry-standard measures to protect your data, including encryption in transit and access controls on our backend. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Our infrastructure provider operates globally; depending on your location, your data may be processed in or transferred to countries other than your own. Where required, we rely on appropriate safeguards for such transfers. The governing jurisdiction for this policy is Ontario, Canada.
9. Account & Data Deletion
One-tap deletion inside the App. You can permanently delete your Verde account and associated data at any time from within the App: open Settings > Account > Delete Account and confirm.
When you delete your account, we delete your profile, posts, comments, chat messages, photos/media (from Cloudflare R2), social graph, and other account data from our systems. HealthKit data that resided on your device is not deleted by us — you control it in the Apple Health app. We may retain a limited amount of data where necessary to comply with legal obligations, resolve disputes, or prevent abuse, for no longer than 30 days, after which it is deleted or anonymized. If you cannot access the App, you may also request deletion by emailing sunxuchen1991@gmail.com.
10. Children's Privacy
Verde is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your region, if higher) to use Verde. We do not knowingly collect personal information from children below this age. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Your Rights & Choices
Depending on where you live (for example under the EU/UK GDPR or the CCPA/CPRA in California), you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data (see Section 9);
- export / receive a copy of your data;
- object to or restrict certain processing, and withdraw consent (for example, by revoking HealthKit or location permissions);
- not receive discriminatory treatment for exercising these rights. We do not sell your personal information.
To exercise any of these rights, contact us at sunxuchen1991@gmail.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you within the App. Your continued use of Verde after an update means you accept the revised policy.
13. Contact Us
If you have questions about this policy or your data, contact:
Xuchen Sun
Email: sunxuchen1991@gmail.com
Address: Markham, Ontario, Canada
Effective date: 2026-06-28