Privacy Policy

Last updated: July 21, 2026

1. Information We Collect

This policy covers Hyprform’s website and our iOS and Android mobile apps (together, the “Service”).

Personal Information

• Account Information: Username, email address, password (encrypted)
• Profile Information: Fitness goals, experience level, preferences, and optional profile photos
• Workout Data: Generated workout programs, exercise preferences, training history, and logged sessions
• Usage Information: How you interact with our service, features used, time spent
• Trainer Information: For trainer accounts, we collect professional bio, photos, documents, training methodology preferences, and program generation history
• Coach Selection Data: If you select a trainer as your coach, we store this relationship to filter programs
• Messages: Coach–athlete messages and related content you send through the Service (including voice dictation converted to text on your device when you use the microphone)
• Email Preferences: Your choices about product and reminder emails (account-critical messages may still be sent)

Automatically Collected Information

• Technical Data: IP address, browser type, device information (such as platform and app version)
• Device Identifiers: A device ID we generate or store to manage secure sign-in, session refresh, and push notification delivery
• Push Notification Tokens: When you allow notifications, we store a push token (for example via Apple Push Notification service or Firebase Cloud Messaging) bound to your account and device
• Analytics Data: Page views, click patterns, session duration (on the website, analytics cookies load only with your consent where our cookie banner applies)
• Cookies: Essential cookies for login, preference cookies, analytics cookies
• Timezone Information: We automatically detect and store your timezone (e.g., "America/Los_Angeles") and timezone offset to ensure accurate date and time display for your workout logs and activity. This is collected from your device's system settings and does not require permission. You can update or override your timezone in your profile settings.

Mobile App Permissions and On-Device Data

• Health and Fitness Data (optional): With your permission, the mobile app may read limited metrics—such as steps, sleep duration, resting heart rate, and active calories—from Apple Health (HealthKit) on iOS or Health Connect on Android. We use this to personalize recovery guidance in the app. Hyprform does not write data back to Apple Health or Health Connect. Health snapshots are processed and cached on your device for this purpose; we do not use this optional health data for advertising.
• Photos / Media Library: With your permission, to set or update a profile photo
• Microphone: With your permission, so you can dictate messages to your coach; audio is used to create the message text and is not retained by Hyprform as a separate voice archive beyond normal message content
• Biometric Unlock (Face ID / device biometrics): Optional local unlock of the app. Biometric templates stay on your device and are not sent to Hyprform
• On-Device Storage: The app may store workout drafts, program snapshots, and cached profile data locally (for example in on-device databases or secure storage for refresh tokens) to support offline use and faster loading

2. How We Use Your Information

• Service Provision: Generate personalized workout programs using AI; sync and display workouts, programs, and messages on web and mobile
• Account Management: Create and maintain your account, authentication (including mobile session and device registration)
• Communication: Send service updates, support responses, important notices, and product emails (such as onboarding reminders, workout absence check-ins, and optional daily workout previews). You can manage most reminder preferences in your account settings; billing and security notices may still be sent
• Push Notifications: Deliver workout reminders and other in-app alerts you enable
• Recovery Guidance: Use optional on-device health metrics to show recovery hints in the mobile app
• Improvement: Analyze usage patterns to improve our AI algorithms and product experience
• Legal Compliance: Meet legal obligations and protect our rights
• Date and Time Accuracy: Use your timezone information to ensure workout logs, activity dates, and scheduled notifications display correctly according to your local time
• Trainer Profiles: Display trainer profiles in our public catalog when activated, generate AI summaries of trainer programming styles
• Coach Matching: Enable users to select trainers as coaches and filter programs by trainer focus
• Program Analysis: Analyze trainer-generated programs to create AI summaries and identify programming patterns

3. Third-Party Services

We use the following third-party services that may process your data:

• OpenAI: Your workout preferences are sent to OpenAI's API to generate personalized workouts. OpenAI's privacy policy applies to this processing. Trainer information and programs are also analyzed by OpenAI to generate AI summaries.
• MongoDB Atlas: Secure cloud database hosting for your account and workout data
• Amazon Web Services (AWS): Cloud hosting and infrastructure services
• AWS S3: Trainer photos and documents (and other user media we store for the Service) are stored securely in AWS S3 buckets with appropriate access controls
• Amazon SES: Transactional and product emails (for example account notices and training reminders) are sent using Amazon Simple Email Service
• Stripe: Payment processing for Hyprform platform subscriptions, coach access fees, invoices, and trainer payouts. When you subscribe, pay a coach fee, or onboard as a trainer, payment and payout data are processed by Stripe (including Stripe Connect for trainers). We store billing-related identifiers such as Stripe customer, subscription, and invoice IDs—not your full card number. Stripe’s privacy policy applies (stripe.com/privacy).
• Google Analytics: We use Google Analytics to understand how our website is used (page views, usage patterns). Analytics may use cookies with your consent. Google's privacy policy applies (policies.google.com/privacy).
• Apple / Google push services: Push delivery uses Apple Push Notification service (APNs) and/or Firebase Cloud Messaging (FCM), which process device push tokens
• Expo / app distribution tooling: Build and over-the-air update infrastructure may process limited technical metadata related to app versions and updates (not your workout content as a primary purpose)

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in these limited circumstances:

• Service Providers: With trusted third parties who help operate our service
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets
• Consent: When you explicitly consent to sharing
• Public Trainer Profiles: When trainers activate their trainer card, their profile information (name, bio, photo, AI summary, training focus, methodology) becomes publicly visible in our catalog. This is done with explicit trainer consent through the activation process.
• Coach Selection: When a user selects a trainer as their coach, the trainer's training focus is used to filter programs, but no personal contact information is shared.

5. Data Security

• Encryption: Data in transit and at rest is encrypted
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Security practices are regularly reviewed and updated
• Secure Infrastructure: Hosted on enterprise-grade cloud platforms
• Secure File Storage: Trainer photos and documents are stored in AWS S3 with restricted access policies and presigned URLs for secure uploads
• Profile Privacy: Trainer profiles are only publicly visible when explicitly activated by the trainer

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data (email support@hyprformai.com from your registered address, or use in-app / account deletion flows when available). We verify ownership, stop recurring billing where applicable, and purge personal workout data according to this policy
• Portability: Export your data in a machine-readable format
• Objection: Object to certain types of data processing
• Restriction: Request restriction of data processing
• Email and notification controls: Adjust product email preferences and mobile notification settings where offered; revoke OS-level permissions (Health, microphone, photos, notifications) in your device settings
• Trainer-Specific Rights: Trainers can deactivate their public profile at any time, update their AI summary, and request removal of uploaded photos or documents

7. Data Retention

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Deleted after 3 years of inactivity
• Deleted Accounts: Data purged within 30 days of account deletion
• Legal Requirements: Some data may be retained longer for legal compliance
• Analytics Data: Anonymized after 2 years

8. International Data Transfers

Your data may be processed in countries other than your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

9. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Cookies and Tracking

On our website, we use cookies and similar technologies to:

• Essential: Enable core functionality like login sessions
• Analytics: Understand how our website is used (with your consent via our cookie banner)
• Preferences: Remember your settings and preferences

You can manage cookie preferences through our cookie banner (including the footer “Cookies” link) or browser settings. Our mobile apps do not use the website cookie banner; mobile analytics or crash reporting, if enabled in a future release, will be disclosed here and controllable where required.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our service

12. Contact Us

If you have questions about this privacy policy or your personal data, please contact us:

• Email: support@hyprformai.com
• Address: Hyprform LLC. Mailing address available upon request to support@hyprformai.com.
• Data Protection Officer: support@hyprformai.com

13. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: For non-essential cookies, optional health-data access, push notifications, and optional product emails where consent applies
• Contract: To provide our workout generation service and related account features
• Legitimate Interest: For service improvement, security, fraud prevention, and certain product reminder emails (subject to your preference controls)
• Legal Obligation: For compliance with applicable laws