Privacy Policy

1Who we are

INTERO (the TERO app, "the app") is made by INTERO Performance, LLC, 155 Hillview 1, Eugene, OR 97408 ("INTERO", "we", "us"). This policy covers the iOS app, the backend it talks to at app.tryintero.com, and the parts of osrp.tryintero.com the app uses when you take the SRP. It does not cover purchases on tryintero.com, LiveLabs, or the SRP website when you use them directly; those have their own terms. Our servers and database are in the United States.

2The short version

• The app reads your body's signals (heart rate, beat-to-beat timing, sleep, skin temperature, activity) from your Polar device, and, if you connect it, from Apple Health. It turns them into reads against your own baseline. It is developmental. It is not a medical device and does not diagnose, treat, or prevent anything.
• TERO is an AI coach. To answer you, it sends your messages and a summary of your data to Anthropic, the company that makes the Claude AI model.
• Your continuous record is yours. Today, no coach, employer or organization can see your TERO data. Only you and a small number of INTERO staff (for support and to keep the service working) can.
• We do not sell your data. We do not use it for advertising. We do not use Apple Health data for advertising, ever.
• You can delete your account, and everything in TERO with it, from inside the app.

3What we collect

You give us

• Account: email, name, password (we store only a scrambled hash), timezone.
• Onboarding: date of birth, sex at birth, height, weight. Optional: your work role, 90-day goal, relationship status, number of children, where you work, how active you are, and your own words about where you feel pressure, what recovery looks like, your daily environment and your sleep.
• Daily calibrations: how ready you feel, and your answers to the daily check-in (for example hydration, alcohol last night, training, whether you feel ill, sunlight), plus any notes.
• Things you log: load events, day marks (including MARK THIS MOMENT), workouts and set-by-set results, and anything you tell TERO in chat.
• The SRP, if you take it: your answers, a short intake (birth year, height, weight, experience), and how you rate yourself afterward.

Your devices give us

• Polar devices (360 band, H10 strap, Verity Sense), over Bluetooth. Continuous beat-to-beat intervals and heart rate (with the band's own quality flags), sleep and sleep stages, overnight recovery (Nightly Recharge), breathing rate, skin temperature, steps and activity, band-recorded training sessions, and device details (model, ID, firmware, battery, storage). The data goes from the band to the app to our servers. It is not sent to Polar's cloud. After our server confirms it has a day's data, the app clears it from the band. If you tap Update firmware, Polar's software downloads the update from Polar.
• Apple Health (optional). If you connect it, the app reads heart rate, resting heart rate, heart rate variability, heartbeat series, ECG recordings, sleep, workouts, steps, walking/running distance, active energy and respiratory rate. Most of this is used on your phone only. The one value that leaves the phone is the heart rate variability reading used for a calibration, which is stored with that calibration on our server. The app does not write to Apple Health.
• Calendar (optional). The app reads your calendar on your phone. When TERO plans your day, only the start and end times of your events are sent to our server. Event titles never leave your phone. With your OK, the app adds recovery blocks to a calendar you choose.
• Location (optional). Two uses. (1) Named zones: you can name places (Home, Work, Gym). The app uses your phone's region monitoring, including in the background if you allow "Always", to label your hours with the zone name. The coordinates stay on your phone. (2) Workouts: GPS during a workout for distance, pace and route, kept on your phone.
• Motion (optional). Your phone's walking/driving/still classification labels your hours. Processed on your phone.
• Push notifications (optional). A device token so we can send you notifications.

Created by the service: TERO's reads of you (baselines, overnight reads, the Five Capacities, sleep estimates, the INTERO Protocol), TERO's messages to you, and in-app notifications.

Automatically: our hosting provider records standard request logs (IP address, time, request path) to run and secure the service. The app has no advertising or analytics trackers.

4How we use it

• To give you your reads, your baseline, your Protocol and your workout program.
• To run TERO the coach, including messages TERO starts on its own during the day.
• To keep your account secure and send account emails (password reset, email confirmation, deletion confirmation).
• To fix problems and improve how the app reads data. This is done against your own data, by staff, when needed.
• For research, only if you choose to take part (section 7).

We never use your data to make, or to help anyone make, an employment decision about you.

5TERO is an AI. Here is what that means.

TERO runs on Claude, made by Anthropic, PBC. When you talk to TERO, or TERO prepares a message, a plan or your Protocol, we send Anthropic: your recent conversation (up to the last 24 messages), your display name, your age (not your birth date), sex, your onboarding answers, and summaries of your data (for example your HRV baseline, last night's read, today's calibration and short excerpts of your notes). We do not send your email address or your account ID. If you take the SRP, the SRP service sends your written answers to Anthropic to read them. Anthropic does not use this data to train its models, and deletes it within 30 days. It may keep content longer, up to 2 years, only if its safety systems flag it as breaking Anthropic's usage policy.

TERO can be wrong. It is software that writes text from patterns. It can misread your data, misremember what you said, or say something that does not fit you. Treat what it says as one input, not an instruction. It is not a doctor, a therapist, or a crisis service. If you think you may be in danger or unwell, contact a medical professional or emergency services.

6Who we share it with

We share your data only with companies that run the service for us, under contracts that limit them to that job:

Other INTERO services. INTERO runs several connected services. They use your email address as the shared key:

• The SRP hub (osrp.tryintero.com). When you take the SRP in the app, it is recorded on the hub under your email, and your results come back into TERO by email. An SRP you take in TERO is personal: it is never shared with an organization.
• LiveLabs. If an organization you work with uses LiveLabs and has an account for you under the same email, LiveLabs can pull SRPs that the organization invited you to take. It cannot pull your personal TERO data or your personal SRP.

Coaches and organizations. Not available today. If we add coach sharing, nothing will be shared until you invite a coach, and you will be able to revoke access at any time. An organization will never see your individual data; at most, aggregate reports across a group.

We may disclose data if the law requires it, to protect someone's safety, or as part of a merger or sale (in which case this policy keeps applying to your data). We do not sell your personal information and we do not share it for targeted advertising.

7Research

INTERO studies how the body responds to load. If you choose to take part, we compile summary features of your overnight data (for example how much of the night was covered, overnight HRV, average heart rate). Each row carries a coarse age bracket and the device type. It has no name, email, account ID, exact times or raw beats. It is keyed by a one-way code that only INTERO can recompute, so it is pseudonymous, not anonymous. You can stop at any time in Profile → Privacy → Contribute to research, and if you delete your account these rows are deleted. Apple Health data is never used for research without your separate permission.

8Apple Health (HealthKit)

Data from Apple Health is used only to provide the app's health and fitness features to you. We do not use it for advertising or marketing, we do not sell it, we do not give it to data brokers, and we do not store it in iCloud. We share it only with the service providers in section 6 that we need to run the features you use.

9How long we keep it

We keep your data for as long as you have an account, so your baseline and trends stay meaningful. You can delete individual TERO conversations and messages in the app at any time. When you delete your account, we delete your TERO data (section 10). Our database provider keeps a short restore history for recovery; deleted data leaves it within 30 days. SRP answers are deleted from the hub as soon as they are scored; SRP results and beat data on the hub are kept until you delete your account or ask us to remove them.

10Your choices and rights

Everyone, wherever you live, can:

• Access and get a copy of your data: email team@tryintero.com. We respond within 45 days.
• Correct your profile in the app, or ask us.
• Delete your account in the app: Profile → Account → Delete account. This permanently deletes your account and everything in TERO: profile, device data, calibrations, sessions, conversations, Protocols, workouts, notifications, push tokens and research rows. It also tells our team to remove your SRP records from the hub, which we do by hand within 30 days.
• Withdraw from research at any time.
• Turn off Apple Health, calendar, location, motion, Bluetooth or notifications in iOS Settings. The app keeps working with less.

US state rights (California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington, Nevada and others). Depending on where you live, you have the right to know what we collect and why, to access it, to correct it, to delete it, to get it in a portable form, and to opt out of sale, targeted advertising and profiling with significant effects. We do none of those three. Your health data is "sensitive" (in California, "sensitive personal information"); we use it only to provide the service you asked for. Washington and Nevada consumer health data: we collect consumer health data only with your consent and to provide the app, we share it only as described in section 6, and you may withdraw consent and request deletion at any time. We will not treat you differently for using these rights. You may use an authorized agent; we will verify your identity by email. If we decline a request you may appeal by replying to our decision; if we still decline, you may contact your state attorney general.

Outside the US. The app is offered in the United States only.

11Security

Passwords are hashed. Reset and confirmation links are stored only as hashes and expire. App login tokens are stored in your phone's encrypted keychain and expire after 30 days. Data travels over HTTPS. Access to production data is limited to a small number of INTERO staff. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

12Children

The app is for people 18 and older. We do not knowingly collect data from anyone younger. If you think a child has an account, email us and we will delete it.

13Changes

We will post changes here with a new version number. If a change is significant, the app will ask you to accept the new version before you continue.

14Contact

INTERO Performance, LLC · 155 Hillview 1, Eugene, OR 97408 · team@tryintero.com