Privacy Policy

1Who we are

Keely is made by Metrica Fit LLC (“Metrica Fit”, “we”, “us”), 1 Park View Avenue, Jersey City, NJ 07302, United States. This policy covers the Keely app for iPhone (“Keely” or “the app”) and our website, meetkeely.com. Metrica Fit is responsible for the personal data described here: in the words of European data protection law, we are its controller.

Keely is an iPhone app for iOS 26 or later. It connects to the Polar Loop band over Bluetooth and turns the band’s signals into Recovery, Load, Stress and Sleep scores. The Polar Loop is made by Polar Electro Oy. Keely is independent and isn’t affiliated with or endorsed by Polar Electro, and Polar’s own apps and services have their own privacy policies.

For anything about your privacy, write to support@metrica.fit.

2What stays on your iPhone

Keely does its work on your phone. These stay on your iPhone and are never uploaded:

• The raw data your Loop records: every heart-rate reading, beat-to-beat (PPI/RR) intervals, and movement, activity and skin-temperature readings.
• Your stress readings through the day and night.
• Every calculation. Recovery, Load, Stress and Sleep are all computed on your iPhone.

This data is kept in the app’s database on your iPhone, protected by iOS data protection. Your account backs up a summary of each night and day, such as your sleep stages and scores (section 3), but never the raw data itself.

The data on your iPhone is removed when you use Erase this iPhone’s data or Delete account in Settings, or when you delete the app.

3What your account backs up

You need an account to use Keely. You sign in with your email address: we email you a one-time link, and there’s no password. Your account backs up the following, so that when you sign in on a new iPhone, Keely can restore your profile and your last 30 days.

Each record also carries technical details, such as when it was computed and which version of Keely’s formulas was used.

Why. To back up these summaries and restore them when you sign in on a new iPhone.

Where. Supabase hosts your account and backup on Amazon Web Services in Canada (ca-central-1, Montréal).

How it’s protected. Row-level security means only your account can read your rows. Everything is encrypted in transit (TLS) and at rest.

Your consent. When you create your account, you agree to back up your daily summaries as this policy describes. Because these summaries relate to your health, we treat that as your explicit consent. You can withdraw it at any time by deleting your account. Keely needs an account to work, so deleting it also ends your use of the app.

Like any server, Supabase receives your IP address and basic request details when the app connects to it, and uses them to deliver and secure the service.

4Sign-in emails

To sign in, we email you a one-time link from hello@meetkeely.com. We send it through PostHog Workflows, which delivers it with Amazon SES in the EU (Frankfurt). Supabase prepares each email in a small server function, which may run outside Canada, and hands it to PostHog. Your email address and the link go to these services only to deliver the message.

PostHog keeps a copy of each email it sends for 30 days. The link inside works once and expires after an hour, so a stored copy can’t be used to sign in.

5Anonymous usage statistics

To learn which parts of Keely are used and where it can be better, the app sends anonymous usage statistics to PostHog (EU Cloud, Frankfurt, Germany). They’re on by default, and you can turn them off.

What is sent

Only events from a fixed list:

• the app was opened;
• a screen was viewed: Today, Recovery, Sleep, Stress, Training, a workout, zones, Settings or the band sheet;
• an onboarding step was reached, and onboarding finished;
• a band was paired or forgotten;
• a sync finished, and whether it worked;
• how a firmware update turned out;
• the morning reveal was shown.

Each event carries the app version and build, the iOS version, the device type, a random install ID created on your phone, and a session ID. The install ID isn’t linked to your account or your email.

What is never sent

Health data or metric values, sleep or wake times, your email address, your account ID, your band’s identifier, or your location. The analytics project discards IP addresses, and events aren’t geolocated.

How to turn it off

In Keely, go to Settings › Privacy and turn off Share anonymous usage. Keely stops sending at once, drops anything waiting to be sent, and forgets the install ID.

How long it’s kept

Only as long as we need it to understand and improve how Keely is used. It’s never linked to an account.

6Permissions and notifications

Keely asks for two permissions:

• Bluetooth, to connect to your Loop.
• Notifications, which are optional: your morning Recovery, a bedtime reminder, and band care. They’re scheduled on your iPhone as local notifications. There’s no push server, so nothing about them passes through us.

In this version, Keely doesn’t use your location, contacts, photos, camera, microphone or Apple Health. You can change permissions at any time in your iPhone’s Settings.

7Firmware updates from Polar

Keely keeps your Loop’s firmware up to date. When you set up your Loop, and when you open your Loop’s page in Keely, the app asks Polar’s firmware server whether an update is available. That request goes straight from your iPhone to Polar. It carries your band’s identifier, firmware version and hardware code, and, like any internet request, your IP address. If you install an update, the app downloads it from Polar.

No health data, email address or account ID is sent. Polar Electro handles these requests as an independent company, under its own privacy policy.

8Emails to us and reports from Apple

When you email us. If you write to support@metrica.fit, we receive your email address and whatever you include, and use them to help you. Our email is hosted by Google Workspace. You never need to send us health data to get help.

From Apple. If you’ve chosen in your iPhone’s settings to share analytics with app developers, Apple may send us crash reports and aggregated statistics about Keely. Apple provides these without identifying you.

9Our website

Our website, meetkeely.com, is a simple site. We set no cookies on it and run no analytics on it.

• Hosting. Vercel hosts the site. It processes your IP address and request details in server logs, to deliver and secure the site.
• Fonts. The site’s typeface is served from meetkeely.com itself, so loading a page sends no request to anyone else.
• Buying a Polar Loop. The “Get a Polar Loop” link goes to meetkeely.com/loop. It picks a store using the country Vercel works out from your IP address, then sends you there. Your country isn’t stored.
• Amazon Associates. That store link is an Amazon Associates link: as an Amazon Associate, Metrica Fit earns from qualifying purchases. On its own site, Amazon may set its own cookies under its own privacy notice. We receive only aggregated reports from Amazon, never your identity or what you ordered.

We don’t collect consumer health data through the website.

10What we never do

• We don’t show ads, in the app or on the website.
• We don’t track you across other companies’ apps or websites, and Keely contains no advertising or tracking SDKs. That’s why Keely never asks for permission to track you (App Tracking Transparency).
• We never sell or share your personal information, as California law defines those words.
• We never use your health data for advertising.
• We don’t make decisions about you with your data. Keely’s scores are wellness information for you, not decisions about you.

11Service providers

We use a few service providers to run Keely. They process data only on our instructions, and only to provide their service to us.

Polar Electro receives the firmware requests described in section 7 as an independent company, not as our service provider. We may also disclose information when the law requires it, and then only what is required.

12Where your data is processed

Your data is processed in Canada (your account and backup), the European Union (sign-in emails and usage statistics) and the United States (our website host, and Metrica Fit itself). Your raw sensor data stays on your iPhone.

If you’re in the European Economic Area, the United Kingdom or Switzerland, transfers of your data to Canada rely on adequacy decisions, which recognize the protection Canada gives to data handled by commercial organizations. Where no adequacy decision applies, we rely on Standard Contractual Clauses where needed.

13How long we keep data

14How we protect data

• Encryption in transit (TLS) and at rest.
• Row-level security, so only your account can read your rows.
• Least-privilege access: people and systems get only the access they need.
• iOS data protection for the data on your iPhone.
• Sign-in by one-time email link, with no password.

No system is perfectly secure, so we can’t promise that your data will never be accessed without permission. If a breach affects your personal data, we’ll notify you and the authorities as the law requires.

15Your choices

In Keely’s Settings:

• Share anonymous usage (under Privacy): turn it off to stop usage statistics. Keely stops sending at once, drops anything waiting to be sent, and forgets the install ID.
• Your profile: review and change it at any time.
• Sign out: your history stays on this iPhone. Sign in again to see it and keep it backed up.
• Erase this iPhone’s data: erases your history on this iPhone and resets your Loop. Your cloud copy stays with your account.
• Delete account: deletes your account and everything Keely stored, in the cloud and on this iPhone, and resets your Loop. It can’t be undone.

In your iPhone’s Settings, you can turn Keely’s access to Bluetooth and notifications on or off. Without Bluetooth, Keely can’t sync with your Loop.

16Making a request

Depending on where you live, you have rights over your personal data. Sections 17, 18 and 19 describe them. You can do much of this yourself in the app (section 15). For anything else:

• Email support@metrica.fit, ideally from the address on your account.
• To protect your data, we verify requests by email: we reply to the address on your account and act once you confirm.
• Requests are free, and we won’t treat you differently for making one.
• We respond within one month under the GDPR, and within 45 days under US state laws.

17EEA, UK and Switzerland

If you’re in the European Economic Area, the United Kingdom or Switzerland, data protection law (the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection) gives you rights over your personal data and asks us to explain the legal basis for each use.

An account is required to use Keely. Without your email address and the backup, we can’t provide the app.

Your rights

You have the right to access your personal data, to have it corrected, to have it erased, to restrict how we use it, to receive it in a portable format, and to object to uses based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time. Withdrawing it doesn’t affect what we did with your data before. We respond within one month. Section 16 explains how to make a request.

You can also complain to a data protection authority, in particular where you live or work or where you think the problem happened. In the UK, that’s the Information Commissioner’s Office. In Switzerland, it’s the Federal Data Protection and Information Commissioner.

No automated decisions

Keely doesn’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Its scores are wellness information for you, not decisions about you.

18US state privacy rights

This section applies if you live in California or another US state with a consumer privacy law. It adds to the rest of this policy and serves as our notice at collection.

Sources. You (your profile and email address), your band (the signals Keely summarizes) and your device (usage events and technical details).

Purposes. Providing Keely, backing up and restoring your data, keeping Keely secure, and improving the app.

Who receives it. For business purposes, we disclose personal information only to our service providers (section 11), and your band’s identifier, firmware version and hardware code to Polar Electro to check for firmware updates (section 7).

No sale, no sharing, no targeted advertising. We don’t sell or share personal information, haven’t done so in the past 12 months, and don’t use it for targeted advertising. We don’t knowingly sell or share the personal information of anyone under 16. We don’t disclose personal information to third parties for their own direct marketing. Because there’s no sale, sharing or targeted advertising, there’s nothing for an opt-out preference signal such as Global Privacy Control to turn off.

Sensitive personal information. We use it only as necessary to provide Keely, the service you asked for, and for nothing else.

How long we keep it. See section 13.

Your rights

• Know and access: what personal information we collect, use and disclose, and a copy of it.
• Delete the personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We don’t sell or share it, so there’s nothing to opt out of.
• Limit the use of sensitive personal information. We already use it only to provide Keely.
• Non-discrimination: we won’t treat you differently for using these rights.

Depending on your state, you may also have the right to receive your data in a portable format and to appeal our decision on your request.

How to use them

Email support@metrica.fit, or delete your account in the app. We verify requests by email: we reply to the address on your account and act once you confirm. An authorized agent can make a request for you. We’ll ask for proof that you gave them permission, and we may ask you to confirm your identity with us directly. We respond within 45 days.

If we decline your request, you can appeal by replying to our decision. If we deny your appeal, we’ll tell you how to contact your state’s Attorney General.

19Consumer Health Data Privacy Policy

This section is our consumer health data privacy policy under Washington’s My Health My Data Act, Nevada’s consumer health data law (SB 370), Connecticut’s consumer health data provisions and similar laws. It covers consumer health data as those laws define it.

Effective: September 28, 2026

What we collect

The health-related summaries and profile details your account backs up (section 3):

• your Recovery scores and what contributed to them;
• measures derived from your heart rate: HRV, resting, lowest and average heart rate, and breathing rate;
• skin temperature and its deviation from your normal;
• sleep: when you slept, your sleep stages, time asleep, sleep need and schedule consistency;
• activity: Load, your target range and balance, steps, minutes in heart-rate zones, and detected workouts;
• stress: daytime and nighttime averages, minutes at each level, and the times when stress stood out;
• your profile: birth year, sex, height, weight and sleep goal, and your resting and maximum heart rate if you enter them.

The raw sensor data from your Loop stays on your iPhone. We don’t collect it.

Where it comes from

Your band, which records the signals Keely summarizes, and what you enter in the app.

Why we collect it and how we use it

To provide Keely: to back up your scores and summaries, and to restore them when you sign in on a new iPhone. We collect consumer health data only as necessary to provide Keely, the service you asked for, and with your consent, which you give when you create your account.

Who receives it

Only our service providers that host your account, Supabase and Amazon Web Services in Canada, and only to provide Keely. We don’t share consumer health data with third parties or affiliates, so there are no categories of it that we share, and we never sell it. No third party collects consumer health data about your activity across websites or apps through Keely.

Your rights

• Confirm and access: ask whether we collect your consumer health data, and get a copy of it, with a list of any third parties and affiliates we’ve shared it with. There are none.
• Withdraw consent at any time, by deleting your account or by emailing us.
• Delete it. Deleting your account deletes it from our systems and our service providers’ at once. Copies in our provider’s encrypted backups roll off on its regular cycle, typically within 30 days.
• Review and change your profile at any time in Keely’s Settings.
• Appeal if we decline a request.

How to use them

Email support@metrica.fit, or delete your account in the app (Settings › Delete account). We verify requests by email, respond within 45 days, and don’t charge for them. If we decline your request, you can appeal by replying to our decision. If we deny your appeal, we’ll tell you how to contact your state’s Attorney General.

The website

We don’t collect consumer health data through meetkeely.com.

Changes to this section

If we make a material change to this section, we’ll update its date and tell you in the app or by email.

20Children

Keely isn’t directed to children under 16, and we don’t knowingly collect their personal data. If you believe a child under 16 has given us personal data, email support@metrica.fit and we’ll delete it.

21Changes to this policy

When we change this policy, we’ll update the “Last updated” date at the top. If a change is material, we’ll also tell you in the app or by email.

22Contact us

For privacy questions, requests or complaints:

See also our Terms of Use and Support page.