Privacy, in plain English

What we collect

Only what the Index needs: what you type in and, in the app, what you choose to let it read from your phone’s health data — see Apple Health and Health Connect.

Your account

Your email address and a password, held by our authentication provider. We never see your password — it is stored as a one-way hash.

Your measurements

The values you enter: age, sex, bodyweight, VO₂ max and whether it was taken on a treadmill or a bike, heart-rate recovery, grip strength and the dynamometer it was taken on, fat-free mass index and how it was measured, lower-body power and how it was measured, dead hang, sit-rise, single-leg stand, deep squat hold, and optionally resting heart rate and heart-rate variability. In the app, the heart-rate figures, your weight and your height can come from your phone instead of being typed, and so can your watch’s own VO₂ max and the exercise minutes it counted.

Your results

The scores calculated from those measurements: your Index, band, Capacity Age, domain scores, confidence interval and priority intervention, with the protocol version that produced them.

Your consents

Which consents you gave, the moment you gave each one, and the version of the wording you agreed to.

The quick test on the front page

When you finish the eyes-closed balance test on the front page, we keep the time, whether it reached the 45-second limit, the age band and the sex you chose, and the day — nothing else. No name, no account, nothing that identifies you or links the attempt to anything else. It tells us how people do on the test. It never appears in anybody’s Index and is never used as reference data.

If an organisation invites you

A record that you joined, the sentence you agreed to and when, and, if you leave, when. Not your address: see If your employer invites you.

If you contact us

For a booking: your name, email, phone if you give it, preferred times and anything you tell us about injuries or illness. For a company enquiry: your name, company, team size and email.

What we do not collect: we do not run advertising trackers, we do not sell anything to anyone, we do not build a profile of you across other websites, and the measurements at /your-index are scored entirely in your browser, and nothing is sent anywhere until you are signed in and choose to save a result.

What your device keeps: a copy of this site’s pages, so the test opens without a connection — it holds no measurements; your sign-in, so you stay signed in; a few settings, such as a suggestion you have dismissed; and, if you take the test before signing in, what you typed, for up to seven days or until you save it to your account. None of it is sent to us. Clearing this site’s data in your browser removes all of it.

Why we hold it, and on what basis

We ask for two separate consents, because they are two separate things and you are entitled to say yes to one and no to the other.

Required — processing

“Process the health data I enter to calculate and store my Evolution Index.” This is the one that makes the product work. Without it there is nothing we are permitted to calculate, so we will not let you past it. You can withdraw it at any time by deleting your account, which deletes the data.

Optional — research

“Include my anonymised results in Evolution research to improve the norms.” Anonymised means your name, email and account identifier are stripped before the data reaches any analysis. Saying no changes nothing about your own results or what you can use. You can withdraw it whenever you like, from your account page, and it takes effect immediately for future analysis.

For bookings and company enquiries the basis is simply that you asked us to get in touch, and we use your details for that and nothing else.

You must be 18 or over. The Index is normed from age 18; below that the thresholds are not measured. We do not knowingly hold data on anyone younger.

Apple Health and Health Connect

In the app only, and only if you turn it on. The app asks your phone first, and your phone asks you. Nothing is ever written to Apple Health or Health Connect: the app only reads.

What it reads

Your resting heart rate, as an average over the last 30 days; your weight and height; your heart-rate variability; the VO₂ max your watch works out; and, on an iPhone, the exercise minutes your watch counted over the last four weeks.

What it is used for

Working out your own Index. Your resting heart rate, weight and height fill in the fitness estimate, marked as coming from your phone, and you can type over any of them. Your resting heart rate and heart-rate variability also narrow the range around your Index without changing it. Your watch’s VO₂ max is kept beside your measurements and never scored. The exercise minutes suggest an answer to the question about how much you train; the answer stays yours to choose.

What it is never used for

Marketing, advertising, or building a profile of you. It is never sold, never licensed to anyone, and never given to anyone else for their own use.

Research, only with a separate yes

Permission to read this data is not permission to use it in research, so the app asks separately, and only if you already take part in research. Each reading saved from your phone records whether you had said yes when it arrived. Without that yes, readings from your phone are left out of research and out of the anonymised figures the team sees about members as a whole. You can change your answer on the Account tab at any time, and withdrawing your research consent withdraws this too.

What is kept about the device

Which kind of device each reading came from — an Apple Watch, an iPhone, a Withings scale — and never the name you gave it, which is often your own.

Stopping it

To stop the app reading: Stop using Apple Health (or Health Connect) on the New result tab. To take away the permission itself, which only your phone can do: on an iPhone, Settings, then Health, then Data Access & Devices, then Evolution Index; on Android, Health Connect, then App permissions, then Evolution Index. Readings already saved are part of the measurements they were saved with, and are deleted with your account.

If your employer invites you

An employer, a club or a practice can invite its people to take part in the Index and pay for figures about the group. It cannot add anybody, and it never sees anybody.

What it sees

Figures about the people taking part: how many were invited and how many have joined; how their Indexes are spread across the five bands; the mean and median Index and the average range around them; the three domain means; the same by age group; and how each has moved on a year before. Only where a figure describes at least ten of the people taking part, or more if the organisation’s contract says so, and never a figure that would let a smaller group be worked out from the others.

What it never sees

Your name, your email address, your Index, any measurement, whether you have joined or answered, or a list of anyone who has. It is told how many people take part, never who. No organisation has any way to read a person’s own record: the database refuses it, whatever page is used to ask.

The invitation

The organisation gives us your address so we can send the invitation. We use it to send that email and do not keep it; we keep a one-way fingerprint of it instead, which lets us recognise it if the organisation sends its list again — to remind you, at most once a week and three times in all, or to leave you alone if you have answered. You can say no from the link in the email without an account, and we will not write to you about it again. The organisation is not told who said no.

Saying yes

Joining is your choice, and the sentence you agree to is stored with your membership, word for word, with the date: that is the record of your consent. You join with an account, because it is your Index that goes into the figures. Taking part in research is a separate question and makes no difference to this.

Readings from your phone

An Index that rests on a reading from Apple Health or Health Connect is left out of an organisation’s figures for now. You still count as taking part.

Leaving

From the Account tab, at any time. Your figures stop counting from that moment, and your account, your history and your Index stay exactly as they are. Reports the organisation has already been given keep the figures they were issued with: they are never worked out again. If the organisation tells us your address has left it, your place ends the same way, and your Account tab says so.

Where it is held

Your account and your results are held in a managed Postgres database hosted in the European Union (eu-west-1, Ireland). Access is enforced at the database itself by row-level security: the rules permit each account to read and write only its own rows, so one member cannot see another's data even in principle.

The website itself is served from a content delivery network. Payment is handled by Revolut — we never see or store your card details; the card is entered on Revolut's own page, and all we receive back is confirmation that a payment succeeded.

Where it goes outside the UK and Europe

Not all of it stays in Ireland, and this notice used to leave that out. Being straight about it matters more here than anywhere else on this page, because what is being moved is health data.

The database — European Union

Your account, your consents and every result sit in Ireland and are not copied anywhere else.

The code that reads and writes it — United States

The small server-side functions that save a result, redeem a claim code or handle a purchase run in Ohio, and their temporary storage is in the eastern United States. Your measurements pass through them on the way to and from the database.

Email — United States and Ireland

Our mail provider is a United States company and the request that asks it to send a message goes to a United States address. The message itself is sent from Ireland. No email we send carries your health data — see What we collect above.

Moving personal data out of the UK needs a legal mechanism, not just a good reason. Each of these providers is engaged under written data protection terms that include the UK Addendum to the European Commission’s standard contractual clauses, and that is the mechanism we rely on. Ask us and we will tell you which providers these are.

How long we keep it

Your account and results

For as long as you keep the account. The point of the Index is the change over years, so we do not quietly delete your history — but the moment you delete your account, it goes.

If you delete your account

Your login, your profile, your consents, every measurement you have entered, the history of your Index, your training log, your purchase record and your memberships of organisations are deleted immediately and permanently. There is no thirty-day grace period and no archive copy. We send one email to the address on the account to say it has been done, and nothing after that.

Bookings and enquiries

Kept while we deal with them and for a reasonable period afterwards for our own records, then removed.

Anonymised research data

If you consented to research, results already stripped of anything identifying you may remain in the research set after your account is deleted — by then they are no longer your data, because nothing connects them back to you. If you would rather they were excluded, tell us before you delete and we will remove them first.

Getting your data back, or destroyed

Both are buttons, not a request form. Sign in and open Account at Your Index:

Export my data

Downloads a complete JSON file of everything held against your account — your profile, your consents, every measurement you have entered, the history of your Index, your training log, your purchase record and your memberships of organisations, each with the sentence you agreed to. Nothing is withheld.

Delete my account

Deletes your account itself — the login holding your email address and password — and with it your profile, your consents, every measurement you have entered, the history of your Index, your training log, your purchase record and your memberships of organisations, permanently, and signs you out.

Until 14 October 2026 that button deleted your data and left the empty login for us to remove by hand, and this notice said so. It now deletes the login too. If the deletion cannot be finished for any reason, the page says exactly what is left, and you can email us at the address below to have it finished.

An assessment you claimed is also the practice’s own record of an appointment, kept as it keeps every appointment. When you delete your account that record is no longer linked to it. You can ask us about it like anything else we hold, using the rights below.

You also have the right to ask us to correct anything wrong, to object to how we are using it, and to complain to the Information Commissioner's Office if you think we have handled it badly.

Who to contact

Matt Roberts Evolution
32 Grosvenor Square
London W1

Email: see below

Ask for the data protection contact and your message will reach the right person. We aim to answer any request about your data within one working week, and are required to within one month.