Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Polar enables data transfers to countries with different privacy standards and collects telemetry data, including device IDs, which cannot be deleted on request. It also uses tracking for targeted advertising upon user consent, which may include sharing device and network information with advertising partners.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
2 findings
Critical issues and red flags that could lead to significant harm.
medium95% confidence
Data transferred to countries with lower privacy standards
Your information may be processed outside the country that the service you are using is based in, including countries outside the European Economic Area (EEA), where the standard of protection of privacy does not necessarily meet the requirements set by the European Commission, such as the U.S.
Why it matters: Your personal information may be transferred and processed in countries outside the European Economic Area (EEA), such as the U.S., where privacy protection standards may not match those set by the European Commission, potentially exposing your data to lower privacy safeguards.
Therefore, your information may be processed outside the country that the service you are using is based in, including countries outside the European Economic Area (EEA), where the standard of protection of privacy does not necessarily meet the requirements set by the European Commission (such as the U.S.).
Handling of personal information and its transfer outside the EU, paragraph 2 · Citation strength: strong
low85% confidence
Collection and retention of error logs
The service stores error data on its devices, copied to its server during synchronization and saved for a maximum of two years. The only personal identifier on the Error log is the device ID, which is needed to link the log to the correct device.
Why it matters: Error logs containing your device ID are collected and stored for up to two years, potentially linking error data to your specific device.
To offer the best possible service in the event of a problem, we store error data on our devices (“Error log”). When you synchronize your device with Polar’s service, the Error log is copied onto our server and saved there for a period of two years at maximum.
How your data is collected, processed, and shared.
medium80% confidence
Telemetry data collection with Device ID
Some devices may collect telemetry data, which includes device functions, status, and mobile phone information, with the Device ID as the only personal identifier. This data is used for development and customer care, and while the Device ID is hashed, the data cannot be deleted on request.
Why it matters: Your device may collect telemetry data, including device functions, status, and mobile phone info, tied to a hashed Device ID. This data, used for development and support, cannot be deleted upon request, limiting your control over its retention.
Some Polar devices may collect telemetry data from the device. The legal basis for collecting telemetry data is our legitimate interest. Telemetry data includes data about the functions and status of the device such as battery life, statistical data about synchronization, statistics about USB connections, display, OHR usage etc. It also contains data about your mobile phone (its manufacturer, model, and operating system version) that may be relevant when investigating an error or malfunction. The only personal identifier in the telemetry log is the Device ID.
Use of cookies and tracking for targeted advertising
The service uses web and mobile tracking techniques and targeted advertising. With your consent, these methods collect device and network information, track your service use, and may provide targeted advertising on their sites or through advertising partners. Analytics data is also used to improve services.
Why it matters: If you consent to cookies, your device and network information, along with your service usage, will be collected to track your activity and deliver targeted advertisements from the service and its partners.
Polar uses web and mobile tracking techniques and targeted advertising. When you access sites under the Polar.com domain, you will be asked to consent to cookies and other tracking methods. Should you provide us your consent these methods will be used to collect device and network information, track your use of our services and possibly provide targeted advertising to you in our other sites or through our advertising partners. The analytics data will also be used to improve our services.
Cookies and third parties, paragraph 1 · Citation strength: strong
Cancellation and Renewal
All clear
Terms related to subscription, cancellation, and renewal.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Other noteworthy clauses that may be unexpected or overlooked.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
10 findings
Commitments and features that protect user rights and privacy.
Protection95% confidence
No sale or disclosure of data without legal requirement
Polar does not disclose, give, or sell your data to anyone unless required by a mandatory provision of law.
Why it helps: This commitment helps protect your personal data from being shared or sold to third parties without your explicit permission or a legal mandate.
Polar does not disclose, give or sell your data to anyone unless we are required to do so pursuant to a mandatory provision of law.
Using Polar services in short, paragraph 1 · Citation strength: strong
Protection90% confidence
Consent required for certain sensitive data collection
Some collected data, such as heart rate data, requires your explicit permission to collect or process. This permission is requested separately for each service that processes such data.
Why it helps: This ensures that you have control over the collection and processing of your sensitive health data, as explicit consent is required.
Some of the collected data (such as heart rate data) is such by nature that we must ask for your permission to collect or process it. This permission is requested separately for each service that processes data that requires specific permission.
How we handle sensitive personal information, paragraph 1 · Citation strength: strong
Protection95% confidence
Data under Polar's control and user ownership during transfer
When data is transferred, it is done only for the purpose of providing the service, and your data is not disclosed or given to any third parties; it remains under Polar’s control and your ownership.
Why it helps: This commitment assures you that your data remains under Polar's control and your ownership even when transferred, preventing unauthorized third-party access or disclosure.
When data is transferred it is done only for the purpose of providing the service. Your data is not disclosed or given to any third parties; it is still under Polar’s control and under your ownership.
Using Polar services in short, paragraph 3 · Citation strength: strong
Protection90% confidence
Permission requested for data transfer outside the country
When registering for a service that may require transferring information to another country for processing, the service requests your permission for the transfer.
Why it helps: This ensures you maintain control over your data by requiring your explicit permission before transferring your information outside your country for processing.
When you register for a service (for example, Polar Flow) which may require transfer of information to another country for processing, we request your permission for the transfer.
Handling of personal information and its transfer outside the EU, paragraph 3 · Citation strength: strong
Protection95% confidence
Right to access personal information
You always have the right to access your personal information, and in most services, direct access is possible. Customer Care can assist in providing a copy of your personal information.
Why it helps: Users can review what information has been collected about them, promoting transparency and control over their personal data.
**You always have the right to access your personal information**. In most of the services, direct access is possible, and when necessary, our [Customer Care](https://support.polar.com/en/contact) can assist you and deliver a copy of the personal information we have of you. You have the right to know what information pertaining to you has been collected, what this information is used for, and the parties, if any, that it has been disclosed to. To verify your identity in order to carry out your request, we may have to ask for additional information.
Your rights, paragraph 1 · Citation strength: strong
Protection95% confidence
Right to object to data processing for research and development
You have the right to object to the handling of your personal information for research and development purposes, and can opt out via Polar Flow or account.polar.com services, or by contacting Customer Care.
Why it helps: This allows users to prevent their data from being used for research and development if they choose, enhancing their control over their personal information.
**You have the right to object to the handling of your personal information for these purposes.** You can opt out from handling of your data for research and development purposes at Polar Flow or account.polar.com services, or by sending a request to our [Customer Care](https://support.polar.com/en/email_polar).
Your rights, paragraph 2 · Citation strength: strong
Protection95% confidence
Right to prohibit direct marketing and mailing list protection
You always have the right to prohibit direct marketing. If you have consented to marketing messages, you can unsubscribe via email instructions or directly through the service if you have an account. Polar will not provide or share any mailing lists to third parties for promotional purposes.
Why it helps: This protection ensures that you can opt out of direct marketing at any time and prevents your mailing list information from being shared with third parties for promotional use.
**You always have the right to prohibit direct marketing.** If you have given your consent to receive marketing messages from Polar, you can stop receiving them by following the "unsubscribe" instructions within each email communication. If you have created a user account, you can do this directly via our service. Polar will not provide or share any mailing lists to third parties for promotional purposes.
Your rights, paragraph 3 · Citation strength: strong
Protection95% confidence
Right to correct or delete information
You have the right to correct or delete any of your information either directly in Polar services or by sending a request to Customer Care. If you request deletion, your user credentials and all related data across all Polar services will be permanently deleted, making it unretrievable.
Why it helps: This ensures you have control over your personal data, allowing you to keep it accurate or have it permanently removed from the service.
**You have the right to have any of your information corrected or deleted** either by doing it directly yourself in Polar services or account.polar.com or by sending a request to our [Customer Care](https://support.polar.com/en/contact). If you want to have your information deleted, we will delete your user credentials and all information and data pertaining to you. This includes data in all Polar services that you have used (e.g. Polar Flow and support services). The deleted data is not retrievable.
Your rights, paragraph 4 · Citation strength: strong
Protection90% confidence
Right to refuse profiling and automated decision-making
You have the right to refuse profiling and automated decision-making. The service states that the profiling it performs for targeting marketing messages with your consent has no significant effects on you and does not make automated decisions about you or your behavior.
Why it helps: This provision helps protect users from potentially unfair or biased outcomes by granting them the right to refuse profiling and automated decision-making processes.
According to law, **you have the right to refuse profiling and automated decision-making.** We may do categorizing of data when, for example, targeting marketing messages to you with your consent. However, that type of profiling has no significant effects on you, so it does not qualify as profiling as defined e.g. in the General Data Protection Regulation of the EU 2016/679 (GDPR). We also do not make any automated decisions about you or your behavior.
Your rights, paragraph 5 · Citation strength: strong
Protection95% confidence
Right to withdraw consent
You have the right to withdraw your consent at any time within the service. Note that for some services, withdrawing consent may prevent the service from being offered to you.
Why it helps: This ensures you retain control over your data by allowing you to revoke consent for data processing at any time, even if it may impact service availability.
**You have the right to withdraw your consent** at any time. The consent can be withdrawn within the service. Note that for some services, the withdrawal of consent prevents us from offering the service to you.
Your rights, paragraph 6 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.