Privacy

Last updated 7 October 2026

Heading is a dashboard for Suunto watches. It reads your training and sleep from Suunto, with your permission, and shows it back to you. This page says what it stores, why, where, and how to remove it.

Who runs it

Heading is run by Michael Eaton, who is responsible for the data described here. Questions and requests go to michael@heading.run. Heading is independent of Suunto and Amer Sports.

What Heading stores

When you sign in with Suunto, Heading stores:

• Your Suunto username, which Suunto sends at sign-in and which ties your account here to your account there. Suunto does not share your name or email, and Heading does not ask for them.
• The authorisation Suunto issues, encrypted, so the sync can keep reading new workouts without you signing in each time.
• Your workouts: times, sport, distance, climb, pace, heart rate, power, load, the feeling you rated, the watch that recorded them, and the samples recorded during them — GPS positions, heart rate, speed, altitude, cadence and power.
• Your sleep and recovery: sleep stages, HRV, overnight heart rate, blood oxygen where recorded, and Suunto's recovery and stress readings.
• Routes you have saved in Suunto, and the routes Heading infers from your repeated GPS tracks.
• What you set here: a display name, zones, units and route names, and which page tours you have already seen.
• Sign-in sessions: when each began and the browser it was opened in, so that signing out ends it.
• A sync log: when your data was last read from Suunto, and any error.

Heading only reads from Suunto. It never writes to your Suunto account, and nothing you change here reaches your watch.

Why

Only to show your own data back to you. Heading does not sell, share or advertise with it, does not use it to train models, and does not combine it with anyone else's. No one else signed in to Heading can see your data.

Where it is kept

In a database run on Fly.io in London, with backups kept in Tigris, Fly's object storage. Backups are kept for up to eight days.

Cookies

Two, both essential and neither used for tracking: one holds your sign-in session, and one lasts ten minutes to protect the Suunto sign-in from forgery. There are no analytics and no advertising scripts.

Other services your browser contacts

• Suunto, when you sign in. Suunto's own privacy policy covers what happens there.
• Google Fonts, which serves the typefaces. Google sees your IP address and that a page asked for these fonts.
• OpenStreetMap, which serves the map tiles on workout and route maps. Its servers see your IP address and which map tiles were asked for, which shows roughly where the workout was.

Deleting your data

Settings → Privacy → Delete account deletes your account and everything listed above, straight away. That includes the Suunto authorisation, so Heading cannot read anything more. It does not touch your data in Suunto.

Deleted data leaves backups as they expire. Until then it can only be restored as part of recovering the whole database after a failure.

If you stop using Heading without deleting your account, your data stays until you delete it. You can export it as CSV from Settings → Export at any time.

Your rights

You can see everything Heading holds about you, export it, correct what you set here, and delete all of it, from Settings. For anything else — including a copy of what is held, or a question about how it is used — write to the contact above. If you are unhappy with the answer, you can complain to the data protection regulator where you live.

Changes

If this policy changes, the date at the top changes with it.