Privacy Policy

HyperFit ("we", "the app") is a personal workout and nutrition tracker. This policy explains what data we collect, why, and what control you have over it.

What we collect

• Account info — name and email, supplied by Apple Sign-In or Google Sign-In when you create an account. We never see your Apple/Google password.
• Account identifier — an opaque user ID generated by Supabase, used to scope your data to your account.
• Workout logs — the sets, reps, weights, exercises, plans, and rest-timer data you enter, cardio you log in HyperFit (activity, time, optional distance), stretch and follow-along sessions, your readiness check-ins, workout notes, exercise notes, your plans, and workouts you import from Strong or Hevy files. Stored server-side so they sync across devices.
• Fitness self-tests — results you enter on the Fitness page (e.g. pull-ups, a timed hold, a balance test). Stored with your account so you can compare with your last result.
• Nutrition logs — meals, macros, water taps, goals, and the foods you log, remembered with their numbers and how often you use them so you can log them again ("your foods"). Same storage model.
• Sex (optional) — female, male, or "prefer not to say", if you choose to answer during sign-up, in Profile, or on the Fitness page. Stored in your account profile and used for one thing only: choosing which coach's benchmark lines to show on the Fitness page. It isn't used for calorie targets or anything else, and "prefer not to say" (or not answering) simply hides those lines. You can change it in Profile at any time.
• Training buddy (optional) — if you link with one person by invite, each of you can see the other's first name (or chosen display name), training days for the last three weeks, weekly goal, and last workout name and time, and you can send each other at most one nudge a day. Anyone you send an invite code to sees your name before accepting. Nothing else is shared, and either of you can end it at any time.
• Profile and preferences — your name, goal, equipment, weekly goal, units, theme, reminders and similar settings, stored in your account profile.
• Health-adjacent inputs — body weight you log in HyperFit, and units (kg/lb, ml/oz) you set in Profile. Stored only with your account.
• Apple Health (optional, iPhone only) — only if you turn it on in Profile → Apple Health, and only what iOS lets you allow:
  • Written to Health: each workout you finish, with its start and end time — as strength training, or as the matching type for cardio (and its distance, if you gave one), stretching (flexibility), and follow-along routines. Nothing else beyond HyperFit's own workout ID and, for cardio typed in afterwards, a "user-entered" flag — HyperFit doesn't measure calories or heart rate, so it never claims any.
  • Read from Health and stored with your account: body weight, to fill in days you haven't logged a weigh-in in HyperFit. A weigh-in you typed always wins; a day you delete stays deleted.
  • Read from Health and kept on your iPhone only: your daily step count, cardio workouts (runs, rides, walks, rows, swims, from your Watch or other apps), cardio fitness (VO2 max) and resting heart rate — shown on Home, in last week's recap, on the Activity page and on the Fitness page. These are never sent to our servers, never used for advertising, and never shared.
  • Biological sex: read only if Apple Health is turned on in HyperFit and you open the sex question in Profile or on the Fitness page, and only to offer it as a one-tap suggestion. If you confirm it, the answer is stored in your account profile like any answer you'd tap yourself (see "Sex" above); if you don't, nothing is kept.
  Turn it off at any time in HyperFit (Profile → Apple Health → Turn Off) or in the Health app (your picture → Privacy → Apps, or Apps and Services → HyperFit). What's already in Health stays yours there.
• Product usage events — which screens you visit and which actions you take in the app (e.g. workout started, meal logged, water tapped). Sent to PostHog (US region) so we can see which features people use and where they get stuck. Linked to your account ID after you sign in; anonymous before that. We do not send the contents of your workouts or meals — only event names and a small set of metadata fields like meal slot or set count.
• Photos of a meal or nutrition label — read on your device by Apple's on-device text and image recognition to fill in the meal form. The photo is never uploaded and the app's copy is deleted right after reading; only the meal you choose to save is stored, like one you typed.
• On-device AI — where your iPhone has Apple Intelligence, describing a workout, a meal or a plan, and the weekly coach note, are processed by Apple's on-device model. That text isn't sent to us or to any AI service; only what you choose to save is stored.
• Siri and Shortcuts (iPhone) — when you use a HyperFit shortcut with Siri, Apple processes what you say under Apple's own privacy terms; HyperFit receives only the request (e.g. "log 500 ml of water") and stores only the resulting log, like one you entered in the app. A request waiting for the app is kept on your device until HyperFit next opens; it's logged then if it's within 14 days, otherwise dropped. The phone also keeps which account is signed in and your units, so Siri can take requests. On Android, Google Assistant processes what you say under Google's terms, and HyperFit receives only the request.
• On your devices only — the Home Screen / Lock Screen widget's summary (written to the app's own shared storage; the widget has no network access), the workout in progress passed between your iPhone and Apple Watch, the lock-screen rest countdown, and workout CSV files you export or import (read or written on the phone, shared only where you send an export, and cleared at sign-out and account deletion). None of these is sent to our servers.
• Crash diagnostics — uncaught JavaScript errors are sent to PostHog so we can fix what breaks. Includes the error message and stack; does not include your data.

What we don't collect

• No advertising IDs, no device fingerprints. Health data only with your explicit permission, as described above — and steps, Health cardio workouts, VO2 max and resting heart rate never leave your iPhone.
• No meal or label photos — they're read on your device and deleted.
• No cross-app tracking. We do not link your data to data from other companies for advertising or share with data brokers.
• No advertising SDKs (no Google AdMob, no Facebook SDK, no Firebase Analytics).
• No location data.

How we use it

Solely to operate the app: render your dashboard, compute your streak and PR badges, populate the muscle heatmap, sync across your devices. We do not sell, share, or rent your data to third parties.

Where it lives

Account, workout, and nutrition data are stored in Supabase (PostgreSQL hosted on AWS, US region). Access is fenced by row-level security keyed to your account ID, no other user can read your rows, except what you choose to share: your training buddy's view (above) and plans you share by code. Product usage events and crash diagnostics are stored in PostHog (US region) and accessible only by HyperFit's developer.

Account deletion

You can delete your account at any time, fully in-app:

• Open HyperFit → tap the gear icon (top-right of Home) → Profile → Delete Account.
• Two-step confirmation prevents accidents.
• On confirm, we immediately delete: workout sessions and sets (including cardio, stretch and follow-along sessions), your own plans (including any you shared) and plan instances, custom exercises, exercise notes, readiness check-ins, fitness self-test results, body-weight entries (typed or imported from Apple Health), nutrition days and entries, your saved foods, water logs, a training-buddy link, invites and nudges, settings and profile answers (including sex), and the auth record itself. Steps, cardio, VO2 max and resting heart rate read from Apple Health, and any Siri requests still waiting on the phone, are cleared from the phone at the same time; what's in the Health app itself stays.

Deletion is irreversible. If you'd rather email us, write to hyperfocusedengineer@gmail.com and we'll handle it manually within 7 days.

Product usage events stored in PostHog are keyed to your account ID. After you sign out the app stops sending events tied to that id (subsequent events are anonymous). Historical events for a deleted account remain in PostHog until our next purge. To request immediate purge, email hyperfocusedengineer@gmail.com.

Children

HyperFit is not directed at children under 13 and we do not knowingly collect data from them.

Changes

If we materially change this policy, we'll update the date above and surface the change in-app on your next launch.

Contact

Questions, requests, or issues: hyperfocusedengineer@gmail.com