a) Data stored locally on your device (not transmitted to us): Your workout history, day streaks, unlocked color themes, selected training level, scheduled-training preferences, and app settings. This information stays on your device and is removed if you delete the app.
b) Subscription and purchase data (processed by Apple and RevenueCat): When you start a free trial or purchase a subscription, the transaction is processed by Apple through your App Store account. We use RevenueCat to manage and validate subscriptions. For this purpose, RevenueCat processes a randomly generated anonymous app user ID, your purchase and subscription status, and basic technical data (device type, operating system, app version, and country derived from your IP address). We do not receive your name, email, or payment card details — Apple handles payment.
c) Push notification token (only if you enable notifications): If you turn on scheduled-training reminders, your device generates a push token via Apple's Push Notification service so reminders can be delivered. You can disable notifications at any time in your device settings.
d) Diagnostic data: Apple may provide us with aggregated, anonymized crash and performance data through App Store Connect if you have enabled sharing in your device settings. This cannot be used to identify you.
We do not collect your name, email address, phone number, precise location, health records, contacts, photos, or payment card information. We do not track you across other apps or websites.
As we are established in Spain, EU data protection law (GDPR) applies. Where we (or our processors on our behalf) process personal data, we rely on:
We rely on a small number of trusted providers who act as data processors or independent controllers:
These providers may process data outside the EU (e.g., in the United States) under appropriate safeguards such as the EU Standard Contractual Clauses.
Local data remains on your device until you delete it or uninstall the app. Subscription data is retained by Apple and RevenueCat for as long as needed to manage your subscription and to comply with legal, tax, and accounting obligations.
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us at collabs@gohrdr.app. Because most of your data lives only on your device, you can also exercise erasure directly by deleting the app.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD, www.aepd.es).
HRDR is intended for adults (18+). It is not directed to children, and we do not knowingly process data from anyone under the age required in their jurisdiction. If you believe a minor has used the app, contact us and we will assist.
We rely on the security measures of Apple's and RevenueCat's platforms and on your device's own protections. No method of transmission or storage is 100% secure, but we keep the data footprint minimal by design.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, through an in-app notice.