Privacy Policy

What we collect

• Account: your email address, a display name, and a password (stored only as a secure hash by our authentication provider) or your Google sign-in.
• Training profile: your goal, experience, training days and session length, equipment, cardio habits, muscle priorities and favourite or avoided exercises.
• Training data: your plans, the workouts you start and the sets you log (reps, loads, effort).
• Health and body data: body weight and, if you choose to enter them, body fat and waist; for nutrition targets, your sex, date of birth, height, activity level and nutrition goal; and the foods you log.
• Payments: whether you bought the unlock or Pro, its status and Stripe reference numbers. Card details are entered on Stripe's checkout page and never reach HybFit.
• Technical: sign-in session cookies and basic server logs (such as IP address and time of request) kept for security.
• Usage statistics: which pages are visited, counted without cookies and without identifying you, so we can see where the site is hard to use. Page addresses are recorded without search terms or account numbers.
• Before you sign up: if you build a plan without an account, your answers stay in your browser. They reach HybFit only when you create an account to save them.

Why we use it

• To build your plan, track your workouts and progress, and work out your nutrition targets — the service you asked for.
• To take payments and give you access to what you bought.
• To keep HybFit secure, prevent abuse and fix problems.
• To send account emails (confirming your email, resetting your password).

We do not sell your data, show ads, use advertising trackers or tracking cookies, or send your data to AI services. Plans are made by fixed, published rules.

Health data

Body measurements, nutrition details and training logs can reveal information about your health. We use them only to provide HybFit to you, you choose whether to enter them, and our administrators cannot view them through HybFit's admin tools.

Who processes it for us

• Supabase — database and sign-in (servers in Singapore).
• Stripe — payments.
• Hostinger — hosting the website.
• Umami — cookieless usage statistics: which pages are visited, with account details, IDs and search terms removed from addresses first.
• Google — only if you choose to sign in with Google.

These providers process data on our behalf under their own security and privacy commitments. Your data may therefore be stored or processed outside your country.

Cookies

HybFit uses only the cookies needed to keep you signed in. There are no advertising or analytics cookies: usage statistics are counted without cookies. Your theme choice and, before you sign up, your plan answers are kept in your browser's storage and never used to track you.

How long we keep it

We keep your data while you have an account. When your account is deleted, your profile, plans, workouts, body and nutrition data are deleted with it. We keep payment records for as long as tax and accounting law requires, and a minimal record of administrative actions (without your email address) for security.

Your choices and rights

You can view and update your training profile in the app at any time. To get a copy of your data, correct it, or delete your account, email [contact email] from the address you signed up with. Depending on where you live, you may have further rights under data-protection law, including to complain to your data-protection authority.

Children

HybFit is not intended for anyone under 16.

Changes

If we change this policy in a meaningful way, we will update the effective date above and tell signed-in users in the app or by email.