Privacy Policy

1. Information We Collect

We collect the following types of information to provide and improve the Human Performance app:

• Account Information: Email address and password when you register for an account.
• Health & Vitals Data: Weight, body fat percentage, heart rate, sleep duration, and energy levels that you manually enter or sync from Apple Health.
• Location Data: GPS coordinates collected during active hike tracking sessions.
• Photos: Body composition photos you upload for progress tracking, and food photos used for AI-powered nutrition recognition.
• Device Information: Device type, operating system version, and push notification tokens used to deliver app notifications.
• Workout & Nutrition Logs: Exercise records, nutrition entries, water intake, and barcode-scanned food items you log within the app.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and personalize the features of the Human Performance app, including health tracking, workout logging, nutrition analysis, hike route mapping, and AI coaching.
• To send push notifications relevant to your fitness goals and reminders you have configured.
• To analyze aggregate, anonymized usage patterns to improve app performance and features.
• To manage your subscription and billing.

Your personal data is never sold to third parties. We do not use your health information for advertising purposes.

3. Health Data

Health data — including any information synced from Apple HealthKit — is treated with the highest level of care:

• HealthKit data is stored on your device and, where you have enabled sync, on our secure servers hosted by Supabase. It is never shared with third parties.
• We do not use Apple HealthKit data for advertising or sell it to data brokers.
• You can disconnect Apple Health integration at any time from the Devices & Health Apps section of your app settings.
• Manually entered health vitals (weight, body fat, heart rate, sleep, energy) are stored in our secure database and are only accessible to you.

4. Location Data

Human Performance collects GPS location data only in the following circumstances:

• Location is accessed only during an active hike tracking session that you explicitly start within the app.
• The GPS route data for each hike is saved to your profile so you can review your hike history and route maps.
• We do not collect background location data when you are not actively tracking a hike.
• Location data is not shared with third parties and is not used for advertising targeting.

5. Photos & Camera

The app uses your device camera for two purposes: capturing body composition progress photos and scanning food barcodes for nutrition logging.

• Body composition photos you capture and upload are stored securely in our database and are used only for your personal progress tracking.
• These photos are never shared with third parties, used in marketing materials, or made accessible to other users.
• You can delete individual photos or all photos associated with your account at any time.
• Camera access for barcode scanning does not store any camera imagery — only the decoded barcode value is used to look up nutrition data.

6. AI Food Recognition

Human Performance offers AI-powered food recognition to help you log meals quickly. Here is how it works and what data is shared:

• When you use the AI food recognition feature, the photo is sent to OpenAI's API for analysis. OpenAI returns a food identification result which we use to populate your nutrition log.
• Per OpenAI's API usage terms, images submitted via their API are not retained or used to train their models.
• We do not store food photos on our servers after the AI analysis is complete.
• You may choose to log meals manually or by barcode scan at any time without using the AI photo feature.

7. Data Storage & Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data transmitted between the app and our servers is encrypted in transit using HTTPS/TLS.
• Your data is stored in a Supabase-managed PostgreSQL database hosted on Render, which provides encryption at rest and secure access controls.
• Account passwords are hashed and never stored in plain text.
• Access to production databases and infrastructure is restricted to authorized HP-TRT personnel only.
• While we implement strong security practices, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

8. Data Retention & Deletion

You are in control of your data and can request its deletion at any time:

• You can delete your account and all associated data from the Profile section of the app settings.
• Upon account deletion, all personal data — including health vitals, workouts, nutrition logs, photos, hike routes, and account credentials — will be permanently deleted from our servers within 30 days.
• Anonymized, aggregated statistical data that cannot be linked back to you may be retained for analytics purposes.
• You may also request deletion of specific data (such as individual photos or hike routes) without deleting your entire account.

9. Children's Privacy

Human Performance is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@hp-trt.com and we will take prompt steps to delete that information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us at:

We aim to respond to all privacy-related inquiries within 5 business days.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through a push notification and/or by prominently displaying a notice within the app. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.