Hardy Fitness
Privacy Policy

Effective date: October 11, 2026. This policy covers the Hardy Fitness app, including its optional Apple Health / HealthKit integration, AI meal scanner and meal log. Stephen Oni, the operator of Hardy Fitness, is the controller responsible for the personal data described below.

Information we collect and why

We collect the information you provide or create when using the app: your name, email address, account ID and optional profile photo; fitness intake answers and goals; completed workouts and streak activity; optional daily sleep, hydration and step check-ins; food names, portions and estimated calories you choose to save; messages sent to your coach; community posts, photos, videos, replies, reports and blocks; and subscription purchase and entitlement status. We use this information to operate your account, personalize fitness programming, show your progress, recovery checks and meal log, provide coaching and community features, manage subscriptions, respond to support requests, and protect the service from abuse.

Meal photos and calorie estimates

Members may photograph a meal, choose a meal photo, or type a meal description to request an estimated food, portion and calorie breakdown. Beginner and Advanced members receive one AI estimate per UTC day; Professional members receive five. When you request an estimate, the selected photo and optional description are sent through our Supabase-hosted function to OpenAI for analysis. Hardy Fitness does not save the meal photo to your account or media storage, and the recognition request is sent with API response storage disabled. OpenAI states that API data is not used to train its models unless the API customer opts in, but it may retain inputs and outputs in abuse-monitoring logs for up to 30 days under its applicable data-use and retention terms. Do not include people, documents or other private information in a meal photo.

AI recognition and calorie results are estimates and may be wrong, including for regional dishes, mixed plates, hidden ingredients, oils, sauces and portion sizes. The app shows the result for you to review and edit before saving, and manual entry remains available when an estimate is wrong or the daily limit is reached. Only when you tap Save are the confirmed food names, portions, calories, meal type, source and estimate note stored in your Hardy Fitness account. You can delete an individual saved meal in the app. This feature is for general fitness tracking and does not provide medical or dietary advice.

Apple Health and HealthKit

Connecting Apple Health is optional. Only when you tap Import sleep and steps from Apple Health does Hardy Fitness request permission to read step count and sleep analysis. The app reads the current day's step total and recent sleep samples to calculate your sleep duration. It does not request access to other HealthKit data types, write data to Apple Health, or continuously import HealthKit data in the background. You can use manual recovery entries without granting Health access.

The imported totals appear in the recovery form for you to review or change. When you tap Save recovery, the selected sleep duration, step total, optional manually entered water intake, and check-in date are saved to your Hardy Fitness account in our Supabase database and cached on your device. Individual HealthKit sleep samples are not uploaded as part of this import. Saved recovery information is used to display your check-in and provide the fitness and recovery features you request.

We do not sell HealthKit data or use it for advertising, marketing, advertising measurement, or data mining unrelated to providing your requested health and fitness service. We do not disclose HealthKit data to advertising platforms, data brokers, or subscription billing providers. HealthKit-derived recovery data is processed by our hosting provider only to deliver the app's requested features. The app does not store personal health information in iCloud; its local app-data cache is excluded from iCloud backup.

You can refuse individual Health permissions or revoke them at any time in the Apple Health app or your device's Health privacy settings by selecting Hardy Fitness and turning off access. Revoking access stops future reads; it does not automatically remove check-ins you previously chose to save. To delete those records, use the account deletion option or contact us as described below. Deleting Hardy Fitness data does not delete the original records in Apple Health.

Service providers and sharing

We use service providers for authentication, cloud hosting, media storage, subscriptions, support, moderation, fraud prevention and security. These include Apple and Google for sign-in and platform services, Supabase for account and app-data hosting, OpenAI for the meal-analysis request you initiate, and RevenueCat and the applicable app store for subscription purchase and entitlement management. Providers receive the information needed for their function. We require providers that process personal data on our behalf to use it only for the authorized service and to protect it consistently with this policy and applicable privacy requirements.

Messages you send to a coach are available to the coaching service. Community content you choose to post is visible to members with access to that community. Avoid including health or other private information in posts you do not want those members to see. We may disclose information when required by law or necessary to address fraud, abuse or a safety issue. We do not sell personal data, use advertising identifiers, or link app data with third-party data for targeted advertising or advertising measurement.

Notifications

If you enable notifications, we store a device push token so Apple Push Notification service or Google Firebase Cloud Messaging can deliver them. The token is removed when you sign out or turn notifications off and is never used for advertising or tracking. Workout reminders are scheduled by your device and their contents are not sent to us. Core post notifications are sent through the relevant platform service and include the author's display name and the opening of their post. They are available to Professional members, exclude authors you have blocked, and can be disabled in the app or your device settings.

Storage, retention and deletion

Your saved account and app data, including recovery check-ins and meal entries you choose to save, are stored by our cloud providers. The app also keeps a local cache to operate its features. Data is retained while your account is active, then deleted or de-identified following a verified deletion request, except where limited retention is required for fraud prevention, safety, tax, dispute or legal obligations. We will explain any required retention when responding to a request.

To delete your account and associated personal data, open You (Profile) → Account & support → Delete account in the app. You can also email stephenooni@icloud.com to request access, correction, export or deletion of your data, including saved recovery check-ins and meal entries. We verify requests to protect your account. Deleting an account does not cancel an App Store or Google Play subscription; manage cancellation in the relevant store.

Contact and policy changes

Privacy contact: stephenooni@icloud.com. Controller: Stephen Oni, 95 N Emerson, Denver, CO 80218, United States. We will post policy updates on this page with an updated effective date.