Privacy Policy

Hybrid Training Tracker (“the app”) is developed and operated by Oskar Berg-Buan (“we”, “us”). This policy explains what data the app handles, where it is stored, and what choices you have. The short version: the app has no user accounts, and your training data stays on your device and in your own iCloud. We cannot see it.

1. No account, no sign-in

The app does not require — or offer — any registration. We do not collect your name, e-mail address, or any other contact information. The name you can enter in the app is stored only on your device and is used solely to greet you.

2. Your training data

Workouts you run, log, or import — including results, exercises, weights, notes, and effort ratings — are stored:

• locally on your device, and
• in your private iCloud database (Apple CloudKit), if you are signed in to iCloud, so your history syncs across your own devices.

This data is protected by your Apple ID. We have no access to it and no copy of it. Deleting the app removes the local copy; your iCloud copy can be managed in iOS Settings → Apple ID → iCloud.

3. Health data (Apple Health)

With your explicit permission, the app:

• reads workouts, heart rate, distance, and energy data from Apple Health, to show statistics and let you import workouts recorded by watches and other apps;
• writes workouts you complete in the app back to Apple Health.

Health data is processed on your device and stored only in the places described in section 2. Health data is never used for advertising or marketing, is never sold, and is never shared with third parties. You can revoke access at any time in the Health app → your profile → Apps and Services → Hybrid Training Tracker.

4. Suunto (optional)

If you choose to connect a Suunto account, you authenticate directly with Suunto (OAuth). The resulting access token is stored only on your device, and the app fetches your workout data (summaries and workout files) directly from Suunto’s service to your device. We do not receive or store this data on our servers. Suunto’s own privacy policy governs their processing. You can disconnect at any time in Settings, which deletes the token.

5. Fitness machines over Bluetooth (optional)

If you connect a Concept2 rower, SkiErg, or bike, or a Bluetooth fitness machine that uses the standard FTMS profile (such as many treadmills), the app pairs with the machine’s monitor over Bluetooth to read live workout metrics (distance, pace, calories) while you train. This happens entirely on your device — there is no machine account, and nothing is sent to the machine’s maker or to our servers. This data is stored only in the places described in section 2. You can disconnect at any time in Settings.

6. AI photo import (optional)

If you use “Import from photo”, the photo or screenshot you select is sent over an encrypted connection to our server function and forwarded to Google’s Gemini API, which converts the visible workout into structured data. The image is used only to generate the workout, is not used to identify anyone, and is not stored by us after processing. Do not submit images of people or personal information you do not want processed. Google’s API terms govern Gemini’s processing.

7. Usage statistics and diagnostics (Mixpanel)

To understand which features are used, whether workouts get completed, and to diagnose problems, the app sends usage and diagnostic events to Mixpanel, our analytics provider, which processes them on our behalf (on Mixpanel’s EU servers). This includes:

• a random identifier generated on first launch (not your Apple ID, not linked to your identity),
• the event name and coarse properties (e.g. workout format and duration in seconds) and the app version,
• error and diagnostic logs and basic device configuration (such as device model and operating-system version) when something fails or the app is used,
• your device’s IP address, which Mixpanel collects automatically and may use to estimate an approximate (coarse) location such as country or city. We do not collect precise or GPS location, and no street-level position is stored.

We never include your name, health values, or the content of your workouts. This data is used solely to improve the app and diagnose errors — never for advertising, and never sold — and the app performs no cross-app tracking (no ATT prompt is required). Mixpanel’s own privacy terms govern their processing.

8. Workout library

The app fetches its shared workout library (including the workout of the week) from our server. These requests contain no personal data.

9. Notifications

The weekly-workout reminder is a local notification, scheduled on your device, and only if you switch it on. Nothing is sent to us.

10. Purchases and subscriptions (Apple + RevenueCat)

Optional Pro features are sold as in-app purchases and subscriptions processed by Apple; we never see your payment details, and Apple’s privacy policy governs the transaction. To determine whether Pro is active and keep it in sync across your devices, the app uses RevenueCat as our purchase provider. RevenueCat receives your App Store transaction/receipt information and an app-specific identifier (not linked to your name or e-mail) to manage your entitlement on our behalf, under RevenueCat’s own privacy terms.

11. Data retention and deletion

• Local data: deleted when you delete the app.
• iCloud data: managed by you via iOS Settings → Apple ID → iCloud → Manage Storage.
• Usage and diagnostic data: retained by Mixpanel; because it is not tied to your identity, it cannot be looked up or deleted per person.
• Purchase/subscription data: retained by Apple and RevenueCat as needed to manage your entitlement.

12. Children

The app is not directed at children under 13, and we do not knowingly collect any personal data from anyone, including children.

13. Changes

If this policy changes materially, the updated version will be published at this address with a new effective date.

14. Contact

Questions about privacy: post@hybridtrainingtracker.com