Privacy Policy

Thank you for using HyperGrit! This Privacy Policy explains how Hyper Grit LLC ("HyperGrit," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our fitness tracking application and related services (collectively, the "Service"). By using HyperGrit (mobile apps on iOS/Android or our website), you agree to the collection and use of information in accordance with this Privacy Policy. We are committed to safeguarding your personal information and being transparent about our practices.

If you do not agree with this Privacy Policy, please do not use the Service. We may update this Policy from time to time (for example, to reflect changes in our practices or for legal reasons), and we will notify you of any material changes by updating the "Last Updated" date and, if appropriate, by additional notice within the app or via email. We encourage you to review this Policy periodically.

1. Information We Collect

We collect personal data and usage data in order to provide and improve the HyperGrit Service. This includes:

1.1 Information You Provide Directly: When you create a HyperGrit account or use certain features, you provide us with personal information, including:

• Profile Data: such as your name, email address, and in some cases your age or date of birth, gender, and other basic profile details. We also collect physical attributes you choose to enter for tracking purposes, such as your height, weight, fitness goals, and similar metrics.
• Fitness and Nutrition Data: the workout and nutrition information that you log into the app. This can include exercises performed, sets, reps, weights, workout duration, calories burned, heart rate (if you manually input or connect a device), foods eaten, macro nutrients, and other fitness or wellness data you choose to track. This may be considered health-related information; by entering it, you consent to our processing of this data to provide the Service.
• Payment and Subscription Data: If you subscribe to HyperGrit Premium or purchase content (like workout templates), you may provide payment information. Note: HyperGrit itself does not collect or store your full payment card details. Payments are handled by third-party processors (e.g., Stripe, Apple, Google). We receive records of your transactions (e.g., that you subscribed or made a purchase and for what amount) but not your sensitive card numbers. For subscriptions, we may store your subscription status, plan, and renewal dates.
• Communications and Support: If you contact us directly (e.g., via support email or in-app feedback), we will receive your name, email, and the contents of your message, as well as any other information you choose to provide. If we implement community or messaging features in the future, any information you disclose through those features (such as messages to a trainer or posts in a forum) would also be collected.

1.2 Information We Collect Automatically: When you use HyperGrit, certain data is collected automatically by our systems or third-party services integrated into our app:

• Usage Data: We collect information about how you interact with our app. This includes your app settings and preferences, features you use, pages or screens you visit, workouts or activities you log, clicks on links, and other usage patterns. For example, we may log when you complete a workout, view a progress graph, or share a workout link.
• Device and Technical Data: We receive data about the device and software you use to access HyperGrit. This may include the device type (e.g., iPhone, Android phone, web browser), operating system and version, device identifiers or advertising ID, browser type (if using web), app version, language preference, and IP address. We also collect log information such as the dates/times of access, app performance data, error/crash reports, and referral information.
• Location Data: HyperGrit may collect or derive location information from your device, with your permission. Specifically, we may use your phone's location services or network provider data to get an approximate location (e.g., city or region) for certain backend processing (such as localization of content or analytics). We do not continuously track your GPS coordinates during workouts at this time; any location data is generally coarse and used for service functionality (for instance, to display content relevant to your region or to help you share your location in a workout summary if you choose). You can control location access via your device settings. If you opt not to share location, the app will still function but certain location-based features may be disabled.
• Cookies and Similar Tech (Web): If you use our website or web app, we may use cookies or similar tracking technologies to remember your preferences and gather analytics. These cookies might collect information such as your browser type, pages visited, time spent on pages, and other web analytics. You can control cookies through your browser settings.

1.3 Information from Third Parties: At this stage, HyperGrit's data collection from third parties is limited. However, in some cases:

• If you choose to sign up or log in via a third-party account (for example, Sign in with Apple, Google, or another platform in the future), we will receive your name and email address from that third party to facilitate account creation.
• If you link HyperGrit with other apps or wearable devices in the future (such as importing data from Apple Health, Google Fit, or a smartwatch), we will collect whatever data you authorize from those services. We will inform you at the time of linking what data will be accessed.
• We may also receive basic personal information from our payment processors about your transactions (as noted in 1.1) and from analytics or crash reporting services (which might provide general demographic or device info).

We will update this Privacy Policy or provide in-app notices if we begin integrating with additional third-party data sources in a way that expands what we collect.

Please Note: We do not collect any data about your race, religion, political views, or other sensitive categories unless you volunteer it (and the app does not request such information). We also do not collect any "chat" or message content between users currently, as the app's social features are not active yet. We only collect the data needed to offer our current tracking and analytics features.

2. How We Use Your Information

HyperGrit uses the collected information for the following purposes:

• Provide and Maintain the Service: We process your personal data so that you can track workouts and nutrition, view analytics, and use the app's features. For example, we use your inputs to update your progress charts and calculate statistics. We also use data to maintain your account and provide customer support.
• Personalization: To tailor your experience, such as recommending workout templates or content that fits your goals, or adjusting the display based on your locale (e.g., units of measurement).
• Payments and Subscriptions: To manage subscriptions, process transactions, send invoices or receipts, and keep track of Premium status. (Note: Actual payment processing is done by third parties, but we use your data to know whether you have paid and what access level you should have.)
• Communicate with You: To send you service-related communications, such as account verification, password changes, subscription confirmations, technical and security notices, or updates about new features. We may also send occasional promotional messages or newsletters about HyperGrit features or offers, but you can opt out of marketing emails at any time.
• Analytics and Improvements: To analyze usage trends and metrics in order to understand how our users interact with HyperGrit and how we can improve the product. We use third-party analytics tools (like Google Analytics or Amplitude) that help us with this, but these tools generally only receive aggregated or pseudonymized data (see Section 4 below).
• Ensure Security and Prevent Fraud: To monitor, investigate, and prevent any fraud, abuse, misuse, or security incidents. For example, we may use certain data to detect suspicious activity, enforce our Terms of Use, and protect the integrity of our platform.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Business Operations: In support of routine business operations such as auditing, finance, payment processing, billing, accounting, and improving our internal processes. We may also use data (typically in aggregate form) to conduct research and development for new products or services related to fitness tracking.
• With Consent: If we ever process your information for a purpose that is not covered above, we will explain it to you at the point of collection and, if required, obtain your consent.

We do not use your personal data for any automated decision-making or profiling that produces legal effects or similarly significant effects on you, without your consent.

3. How We Share or Disclose Information

We value your privacy. We do not sell your personal information to third parties. We only share your information in the following circumstances:

3.1 Service Providers (External Processing): We share information with third-party companies that perform services on our behalf, as necessary to run our business and provide the Service to you. These providers are bound by contractual obligations to process personal data only according to our instructions and in compliance with this Privacy Policy. Key service providers we use include:

• Hosting and Infrastructure: e.g., Amazon Web Services (AWS) or other cloud platforms where our databases and servers are hosted. Your data may be stored on their secure servers in the United States or other locations (with appropriate safeguards).
• Database and Backend Services: e.g., MongoDB Atlas and Supabase are used for storing user data and managing our backend. They have access to the data for storage and retrieval purposes.
• Payment Processors: Stripe (for web payments) and Apple App Store / Google Play (for in-app mobile payments) process financial transactions. We do not see your full credit card or payment account details; those are handled by the processor. HyperGrit is not responsible for the privacy practices of these payment providers.
• Analytics and Crash Reporting: We use third-party analytics tools (such as Google Analytics, Amplitude, or others) to collect usage data and app performance info. We also may use crash reporting services (e.g., Sentry, Firebase Crashlytics) that automatically send us diagnostic info in case of app errors.
• Communications Tools: If we send emails or notifications, we might use an email delivery service (like SendGrid or Mailchimp) which would have access to your email address and name to send the messages.
• Other Vendors: We may share minimal data with other vendors as needed for functions like user support, marketing, or other operational tools. We ensure any such vendors are obligated to protect your data.

3.2 When You Share Content or Grant Access: If you use HyperGrit to share information with others, we will share data at your direction. For example, if you explicitly share a workout or progress report with a friend, anyone with whom you share that information will be able to see the data you included. We are not responsible for what those third parties do with your information once you've shared it.

3.3 Legal Requirements and to Prevent Harm: We may preserve or disclose your information if required to do so by law or in a good-faith belief that such action is necessary to (a) comply with a legal obligation, such as a valid subpoena, court order, or government request; (b) protect and defend the rights, property, or safety of HyperGrit, our users, or the public; (c) investigate or assist in preventing any violation of law or our Terms of Use; or (d) respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing a death or serious bodily harm.

3.4 Business Transfers: If Hyper Grit LLC is involved in a merger, acquisition, investment, financing, reorganization, bankruptcy, receivership, or sale of all or a portion of our assets, your information may be transferred to the successor or affiliate as part of that transaction. We will ensure the new owner continues to be bound by terms that are at least as protective of your privacy as the terms of this Policy.

3.5 Aggregated or De-Identified Data: We may also share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

Apart from the situations listed above, HyperGrit will not disclose your personal information to third parties without your consent. We do not share your data with advertisers or social media companies for their independent use.

4. Data Storage and Security

4.1 Data Storage and Retention: Your data is stored on secure servers operated by our cloud service providers (such as AWS or other vendors mentioned). We are based in the United States, and as such, your information may be transferred to and stored on servers in the United States or other countries. If you are located in the European Economic Area (EEA) or UK, and we transfer data to a jurisdiction without an EU Commission adequacy decision, we will rely on appropriate safeguards such as Standard Contractual Clauses.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. If you delete your account or request deletion, we will initiate deletion of your personal data from our live systems. Even when we delete data, it may persist for a limited time in backups. We will securely erase or anonymize data once it is no longer needed.

4.2 Security Measures: HyperGrit takes reasonable and appropriate security measures to protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. These measures include:

• We use encryption in transit (HTTPS/TLS) for all communications between your app and our servers.
• We encrypt sensitive data at rest in our databases where feasible. Passwords are stored using secure hashing and not in plain text.
• Our servers are protected by firewalls and access controls; only authorized personnel or service processes have access to personal data as needed.
• We train our staff about the importance of privacy and security, and we require our service providers to also implement appropriate security.
• We monitor for potential vulnerabilities and attacks, and we regularly update our software and infrastructure. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee its absolute security.

In the event of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by law.

5. Your Rights and Choices

5.1 Access and Correction: You have the right to access the personal information we hold about you and to request correction or updates to any inaccuracies. Much of your basic profile and fitness data can be reviewed and edited directly by logging into your account.

5.2 Deletion of Data: You have the right to request deletion of your personal information. You may delete your account via the app's settings if that functionality exists, or by contacting us to request account deletion. Backup copies of your data might persist for a short period but will be purged in accordance with our retention practices.

5.3 Portability: In certain cases, you may have the right to request a copy of the personal data you provided to us in a structured, commonly used, and machine-readable format, and to have that information transmitted to another service provider.

5.4 Withdrawing Consent: If we process any of your personal data based on consent, you have the right to withdraw your consent at any time. For instance, you can opt out of marketing emails by clicking the "unsubscribe" link in them or changing your notification settings.

5.5 Objection and Restriction: Where legally applicable, you have the right to object to our processing of your personal information, or request that we restrict processing.

5.6 California Privacy Rights: If you are a California resident, you may have specific privacy rights under the California Consumer Privacy Act (CCPA) or other state laws, including the right to know what personal information we collect, the right to access and delete certain information, and the right not to be discriminated against for exercising privacy rights. HyperGrit does not sell personal information, so the opt-out of sale is not applicable.

5.7 European Privacy Rights: If you are in the European Economic Area (EEA) or UK, our processing of your personal data must have a legal basis, including your consent (where applicable), performance of a contract, compliance with legal obligations, and our legitimate interests. EU/UK users also have rights to lodge a complaint with a Data Protection Authority in their country.

Exercising Your Rights: To exercise any of your rights, please contact us (see Contact Information below). We may need to verify your identity before fulfilling certain requests. We will respond to your request within the time frame required by law (typically within 30 days).

6. International Users

HyperGrit is a global service. By using the Service, you acknowledge that your personal data may be transferred to and processed in the United States or other countries outside of your country of residence. These countries might have data protection laws that are different or less protective than those in your home country. For European users, we may rely on Standard Contractual Clauses approved by the European Commission to legitimize data transfers outside the EEA.

7. Security Practices

We have outlined our security measures in Section 4.2 above. You also play a role in keeping your data secure: please use a strong unique password, do not share your login credentials, and notify us if you suspect any unauthorized access to your account. If you ever discover a vulnerability or security issue in our Service, we appreciate you reporting it to us so we can act quickly.

8. Third-Party Links and Services

Our Service may contain links to other websites or services, or allow you to share data to third-party platforms. This Privacy Policy does not apply to information collected by third-party websites or services, which have their own privacy policies. We are not responsible for the privacy practices of any third parties.

If we integrate any third-party SDKs or APIs in the app (such as Google Fit, Apple HealthKit, or others in the future), we will do so in compliance with their policies and will disclose that to you. We will not share HealthKit or similar data with third parties without your consent.

9. Cookies and Tracking Technologies

If you use the HyperGrit website or web features, we (and our service providers) may use cookies, web beacons, and similar technologies. We categorize cookies as follows:

• Necessary Cookies: Essential for the website or service to function properly (e.g., authentication cookies, user input cookies).
• Analytics/Performance Cookies: Collect information about how users interact with our Service so we can improve performance and user experience. The information collected is usually aggregated and does not directly identify individuals.
• Preference Cookies: Allow our site to remember choices you make (like language or unit preferences) to provide a more personalized experience.
• Marketing Cookies (Currently None): We do not currently run third-party ads, so we don't use advertising cookies. If this changes, we will update our policy and obtain any necessary consents.

Your Choices: When using our website, you can typically manage your cookie preferences through a banner or settings on our site. Most web browsers let you control cookies through their settings. On mobile apps, cookies are less relevant, but there may be device identifiers or similar tracking for analytics — you can usually reset your device's advertising ID or opt out of personalized ads in your device settings.

10. Do Not Track

"Do Not Track" is a browser setting that requests that a web application disable its tracking of an individual user. At this time, HyperGrit's website does not respond to "Do Not Track" signals explicitly, because there is no consistent industry standard for compliance. However, we treat all users' data per this Privacy Policy and do not track users across third-party sites.

11. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this Policy and providing a prominent notice (such as an in-app alert or an email notification). Your continued use of HyperGrit after any changes to this Privacy Policy signifies your acceptance of the updated terms, to the extent permitted by law. If you do not agree to the changes, you should stop using the Service and may delete your account.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact us using the information below. We will do our best to address your inquiry promptly.

Hyper Grit LLC
Address: 1401 21st ST #10004, Sacramento, CA 95811, USA

Please include in your communication your contact details and a clear description of your request or privacy question. If you are contacting us to exercise a privacy right, please specify the right you wish to exercise.

We are dedicated to protecting your privacy and will respond to your concerns as soon as practicable. If you feel we have not adequately addressed an issue, you also have the right to lodge a complaint with a supervisory authority or regulatory agency in your jurisdiction.

Thank you for trusting HyperGrit with your fitness journey. We value your privacy and strive to keep your personal information secure. Happy training!