HSRing App Privacy Policy

Effective date: September 21, 2026 · Version: 1.0

This policy covers the HSRing app, the HandSpring ring and the cloud services behind them. For orders, payments and browsing on this website, see our Store Privacy Policy. Your use of the app is governed by the HSRing App Terms of Service.

1. Introduction

HSRing is a smart-ring wellness app operated by Handspring Technologies Inc. (“HandSpring”, “we”, “us”). This policy explains what data the HSRing app and ring collect, how it is used, where it is stored, and the choices you have. It applies to the HSRing mobile app, the HandSpring ring, and the cloud services behind them. It does not cover third-party websites or services that we link to.

HSRing is a general wellness product. All health data and insights in the app are for reference only and are not intended to diagnose, treat, cure or prevent any disease.

Plain-language summary of how we operate:

Your health data is processed only with your explicit consent, asked for in plain words inside the app — never buried in a policy you scrolled past.
We do not sell personal data, and we do not use it for advertising. The app contains no advertising SDKs and no analytics SDKs. The only third-party SDK is Sentry, which we use to find and fix crashes (see Section 2.5).
The app works without the cloud. If you never enable cloud backup, your health data stays on your phone and your ring.

2. Data we collect

2.1 Account data

Email address, used to sign you in with one-time codes. We never store a password.
Account creation date and sign-in method.
An optional display name, if you choose to set one.

2.2 Profile data you provide

Sex, birth year, height, and weight. These calibrate calories, stride length, heart-rate zones and your personal baselines. You can edit them at any time.

2.3 Health and activity data from the ring

When you wear the ring, it records and the app stores:

Heart rate and resting heart rate
Heart rate variability (HRV), measured during sleep
Blood oxygen (SpO₂)
Skin temperature
Respiratory rate (during sleep)
Stress estimates (derived from HRV)
Sleep sessions, sleep stages and sleep scores
Steps, distance, calories and active minutes
Workouts you record, including heart-rate series and, for outdoor workouts where you grant location permission, the GPS route recorded by your phone

The ring itself buffers about seven days of readings when your phone is away; that buffer transfers to your phone when they reconnect.

2.4 Data from optional tools

Tools are off by default and collect nothing until you turn them on:

Medication tracking: medication names, doses, reminder schedules and the taken/skipped log you enter. The app never verifies intake; it records what you tap.
Cycle tracking: period dates, flow and symptoms you log. Cycle data is stored only on your phone. It is never uploaded to our servers, including when cloud backup is on, and it is never used for research.

2.5 Device and diagnostic data

Ring model, firmware version, Bluetooth address and battery level, used to operate the connection and show device status. Sync diagnostics are kept on your phone for troubleshooting and are not transmitted to us. When the app crashes or hits an error, it sends a crash report to Sentry, our error-monitoring provider. A crash report contains technical details such as the device model, operating system, app version and the error trace, and is used only to find and fix bugs.

2.6 Location

Location is used only while you record an outdoor workout and only if you grant the permission. It records your route, distance and pace. Recording stops the moment the workout ends. The route is saved as part of that workout's record; like other workout records, it is included in cloud backup when you have cloud backup enabled (see Section 4). We never use location for advertising, profiling or background tracking, and the app never scans for Bluetooth beacons.

2.7 The only permissions we request

Bluetooth — to talk to your ring. Nothing else.
Location — only for outdoor workouts, as described above. The “background” variant exists solely so route recording continues when you lock your screen mid-workout.
Notifications — only for reminders and alerts you turn on yourself (morning brief, medication, heart-rate alerts, move reminders).

HSRing never requests access to your camera, microphone, contacts, photo library, or calendar.

3. How we use your data

To provide the service: showing your readings, computing scores and personal baselines, sending the reminders you configure.
To back up and restore: with your consent, syncing health data to your account so a new phone or ring gets your history back.
To support you: answering your questions when you contact us.
To improve HSRing — only if you opt in to the separate research consent: anonymised, aggregated signals. Research data never includes cycle or medication data. Declining changes nothing about the app.

We do not use your data for advertising and we do not make automated decisions that produce legal or similarly significant effects about you.

4. Your consent controls

Health data is a special category under GDPR and similar laws. HSRing is built around explicit, revocable consent:

Health data storage (required for cloud features): allows heart rate, HRV, breathing, temperature, sleep and activity to be stored in your account. Asked in plain words during sign-up; withdrawable at any time in Settings → Privacy & data. While withdrawn, nothing new is uploaded — the app keeps working locally.
Research (optional): anonymised, aggregated improvement of HSRing.
New features that need additional data (for example features that upload raw sensor waveforms) will ask for their own separate consent before collecting anything and can be declined without losing the rest of the app.

Withdrawing a consent takes effect immediately and does not delete data already collected; deletion is a separate right described in Section 7.

5. Where your data lives

On the ring: roughly the most recent seven days of readings, until they transfer to your phone. Removing the ring from your account erases it over Bluetooth; a ring that could not be reached erases itself the next time it pairs.
On your phone: the full local database. It stays on the device and is removed if you delete the app.
In your account (cloud): only after you grant the health data storage consent. Hosted on servers in the western United States (California), operated by our infrastructure provider under a data processing agreement.

6. How data is shared

We do not sell personal data. Ever.
Service providers: cloud hosting, email delivery and crash reporting (Sentry) providers process data on our documented instructions under contract, and only as needed to run the service.
Legal requirements: we disclose data if required by valid legal process, and will notify you where the law allows.
Business transfers: if HandSpring is acquired or merged, data remains protected by this policy and you will be notified of any change in control.

The current version of HSRing has no third-party health platform integrations. If we add any (for example Apple Health), they will be strictly opt-in.

7. Retention and deletion

Health data is retained while your account is active, so your history and baselines keep working.
Deleting your account (in Settings → Privacy & data): the ring's copy is erased over Bluetooth first, then your account and all health data in it are scheduled for deletion. You have a 30-day window to change your mind — signing in again restores everything exactly as it was. After 30 days, your account and health data are permanently deleted from our online systems and cannot be recovered.
Consent records that we must keep by law, and copies inside system backups, are kept in isolation and deleted on a fixed schedule after that.
You can also export your data (JSON/CSV) — via the in-app entry once available, or by contacting us in the meantime.

8. Security

Data is encrypted in transit (TLS). Access to production systems is restricted, logged, and limited to what operating the service requires. Sign-in tokens are stored in your phone's secure storage (Keychain / Keystore). No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.

9. Your rights

Under the California Consumer Privacy Act (CCPA/CPRA) and, depending on where you live, other laws such as the GDPR, you have the right to access, correct, export, delete, and restrict the processing of your personal data, to withdraw any consent, and to lodge a complaint with your supervisory authority. Most of these are available directly in the app (Settings → Privacy & data); for anything else, contact us at privacy@hsring.com. We respond within the time required by applicable law, and we do not discriminate against you for exercising your rights.

10. Children

HSRing is for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if you believe a minor has created an account, contact us and we will delete it.

11. International transfers

HSRing is currently offered in the United States, and your data is stored on servers in the western United States (California). Your data is not transferred internationally in the ordinary course of the service. If we expand to other regions, we will update this section with the applicable transfer safeguards before doing so.

12. Changes to this policy

Material changes are announced in the app before they take effect, and changes that expand how your health data is used will ask for your consent again rather than assuming it. The effective date at the top always reflects the current version.

13. Contact

Handspring Technologies Inc.
1119 N Kraemer Blvd, Anaheim, CA 92806, USA
Privacy contact: privacy@hsring.com