Privacy Policy
Last updated October 6, 2026
The short version
We collect what the app needs to work: your account, your training, and what you choose to share. We don't sell your data, show ads, or use your fitness information for marketing.
What we collect
Account: your email address and password (stored securely by our login provider; we never see your password).
Profile: username, display name, profile photo, whether your account is public or private, and your main lifts.
Private details: bodyweight, gym name, weight unit and time zone. Only you can see these.
Training and activity: workouts, sets, personal records, rest days, streaks, check-ins, photos, captions, comments, reactions, follows, crews, reports and blocks.
Device: a push notification token if you turn notifications on, so we can send alerts to your phone.
Your birthday is used once at sign-up to check you're 13 or older. We don't store it, only that the check passed.
We don't collect your location, contacts, or advertising identifiers, and we don't use analytics or ad trackers. Photos are re-saved on your phone before upload, which removes hidden location data.
Who can see what
Accounts are private by default: only people you approve as followers and members of your crews see your posts, workouts, streak and PRs. If you make your account public, anyone signed in can see them.
Your username, display name and profile photo are visible to anyone signed in, so people can find you.
People you block can't see your profile or content, and you won't see theirs.
How we use it
To run the app: show your history and suggested targets, your feed, crew leaderboards and streaks, and send the notifications you've turned on.
To keep people safe: review reports, remove content that breaks our rules, and stop abuse.
We never use your bodyweight, workouts or other fitness information for advertising or marketing, and we never sell your data.
Who we share it with
Service providers that run the app for us, only for that purpose: Supabase (database, file storage and login), and Expo, Apple and Google (delivering push notifications).
If the law requires it, or to protect someone's safety.
Nobody else.
Keeping and deleting your data
We keep your data while you have an account. Delete your account in Settings and your profile, workouts, posts, photos and records are permanently deleted.
If you report something, a copy of the reported content is kept so we can act on it, even if it's later deleted.
Your choices and rights
You can see and edit your profile, switch between public and private, choose which notifications you get, block people, and delete your account, all in the app.
You can ask us for a copy of your data or to correct it, or ask questions about your privacy: email us at support@hyprfitness.ca. Depending on where you live (for example, Canada's PIPEDA or US state privacy laws), you may have further rights, and you can complain to your privacy regulator.
Young people
HYPR is for ages 13 and up. If we learn that someone under 13 has an account, we delete it.
Security
Your data is sent over encrypted connections, and access rules in our database decide who can see each piece. No system is perfectly secure, so use a strong password and don't share it.
Changes
If we change this policy in an important way, we'll tell you in the app before it applies.