Privacy Policy

HealthKit data

When you authorize Health access, the app reads only the following fields from workouts stored in Apple Health on your device:

• Workout type
• Duration
• Distance
• Calories (active energy)
• Average heart rate
• Time of day

The app reads these values on your device when you fill your lane, from workouts recorded today. They fill your lane on today’s card. We never read steps, sleep, weight, location, routes, or any other HealthKit category. The app does not write any data back to HealthKit.

Turning Health access off. You can stop Volley reading Health at any time. In the Health app, tap your profile picture, then Apps (under Privacy), then Volley, and turn off the categories. The same switches are in Settings > Privacy & Security > Health > Volley, and in the Health settings under Data Access & Devices > Volley. The exact path can differ between iOS versions. Turning access off stops future reads. It does not erase cards Volley has already saved, which stay on your device until you delete the app.

Photo lanes

If you have no workout in Apple Health, you can fill your lane from a photo of a gym machine’s display instead. You take the photo with the camera (Volley asks for camera access the first time) or choose one from your Photo Library with Apple’s Photos picker, which gives Volley only the photo you pick and nothing else from your library. A photo you choose must be from today.

• Read on your iPhone. The numbers on the display (time, distance, calories, heart rate) are read on your device by Apple’s Vision framework. The photo is not uploaded, and the app makes no network request to read it. You check and can correct every number before it counts.
• Kept on this device only. When you volley, a copy of the photo is saved as proof inside Volley’s private storage on your iPhone, as a new image file with the camera metadata, including any location, removed. It is excluded from iCloud and computer backups, is never placed in the widget data or a rally link, and is deleted automatically after 30 days or when you delete the app.
• Labelled on the card. A lane filled this way says PHOTO on your card, and in a rally link it carries only that label, so the people you send it to see where the numbers came from. They never receive the photo.
• When you share. If you choose a photo design in Share Studio, the photo is part of the image you share, in the same way as any card, through the destination you choose.

On-device storage and sharing

• Your name and member ID. The app creates a random member ID for this install and stores it, with the optional name you choose for your lane, on your device.
• Day history. Your cards are kept in a file on your device: for each day, the lanes on that day’s card (names, member IDs, rest or workout fields including average heart rate, whether the lane came from Health or a photo, and any note), your pact, and your heat counts. The file is excluded from iCloud and computer backups, so your cards stay on this device: they are not restored from a backup and do not move to a new iPhone. Your name and member ID are stored separately and may be restored. The file is removed when you delete the app.
• Widget data. A minimal heat snapshot (heat number, a short status line, the date and how many lanes are in) is stored in the Volley App Group on your device so the widget can display it. It contains no names and no Health values.
• Photo Library (add only). Used only when you choose to save a finished card to Photos. We never browse your existing photos; Volley sees a photo only when you choose it for a photo lane.
• Sharing a card. A card leaves the app only when you choose to share it: through Apple’s share sheet (for example Messages, Mail or AirDrop), by saving it to Photos, by sending a rally link (which carries the lanes on today’s card, including workout details; see Rally links), or with the Instagram Stories button in Share Studio where it is offered.
• Instagram Stories. When you tap Instagram Stories in Share Studio, Volley places the card image on this iPhone’s pasteboard, marked local only (it is not synced to your other devices) and set to expire after five minutes, then opens Instagram, which reads the image from the pasteboard so you can post it. Volley sends nothing to Meta itself. What happens after Instagram opens is covered by Instagram’s own terms and privacy policy.

Deleting your data. Deleting the app deletes Volley’s data on this device: your name and member ID, your cards and counts, and the widget snapshot. It does not remove copies you made outside the app. Cards saved to Photos stay in your Photo Library, and cards, messages and rally links you sent, and stories you posted to Instagram, stay with the people and services you sent them to. Remove those separately in Photos, Messages, Instagram or the app you used. Volley cannot reach a copy on someone else’s device, so a card or link you sent cannot be recalled from its recipients.

The current release has no account system, advertising SDK, analytics SDK, developer server, or live pact sync. It does not request Contacts or notification permission. It asks for the camera only when you choose to photograph a display (see Photo lanes).

Rally links

A rally link (“Send the volley”) is created only when you choose to share one. It carries today’s card so a friend’s Volley can add their lane to it. For each lane on the card, including lanes friends sent you, it contains:

• The display name and the member ID for that install
• The pact ID and the day of the card
• Whether the lane is in, a rest day, or still open
• For a workout: the type, start time (to the minute), duration, distance and calories
• Average heart rate, only if you turn on Include heart rate in Share Studio. It is off by default
• The optional note on a lane

The data is written into the part of the link after the # sign, which browsers do not send to servers, so volley.day never receives or stores it. The volley.day page and the app read it on the device that opens the link. Anyone who has the link can read what is in it, so share it only with people you mean to play with.

What we never do

We do not sell data, show ads, build profiles, or train models on your workouts. Health data is processed on your device and is not sent to Slim Software Limited. Your numbers remain yours.