Privacy Policy

HEX (“we”, “our”, or “the app”) is a workout-tracking app. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using HEX you agree to this policy.

Information we collect

We only collect what the app needs to work:

• Account data — your email address (used to sign in via a one-time code), your name, and your chosen username.
• Profile data — optional profile photo, preferred language, accent-colour choice, and your privacy settings.
• Fitness data — the workout programmes you build or import, the sessions you log, individual sets (reps, weight), your working weights, and the points/consistency figures calculated from them.
• Social data — your friend connections, any leagues you create or join, and your activity feed entries (e.g. “completed a session”).
• Device data for notifications — if you enable push notifications, we store a device token so we can deliver them.

We do not collect your precise location, contacts, health data from Apple Health, advertising identifiers, or payment information.

How we use your information

• To create and secure your account and sign you in.
• To store and sync your workouts across your devices.
• To power social features — friends, leagues, and leaderboards.
• To send you a one-time sign-in code by email.
• To send push notifications you’ve opted into (e.g. friend requests, reminders). You can turn these off any time in Settings.

We never sell your data, and we don’t use it for advertising.

Service providers

We rely on a few trusted services to run HEX. Your data is processed by:

• Supabase — secure database, authentication, and hosting of your account and workout data.
• Resend — delivery of the sign-in code emails.
• Apple Push Notification service (APNs) — delivery of push notifications to your device.

These providers process data only on our behalf and are not permitted to use it for their own purposes.

Data security

Data is encrypted in transit (HTTPS/TLS). Access to your data is restricted by row-level security so that you — and people you’ve explicitly added as friends, per your privacy settings — are the only ones who can see it.

Data retention & deletion

We keep your data for as long as your account exists. You can delete your account at any time from Settings → Delete Account inside the app. Deleting your account permanently removes your profile, workouts, social connections, and sign-in identity from our systems. This cannot be undone.

Children

HEX is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we’ll remove it.

Your rights

You can access and update most of your data directly in the app. You can delete all of it by deleting your account. For any other request about your data, contact us at the address below.

Changes to this policy

We may update this policy as the app evolves. We’ll revise the “Last updated” date above when we do.

Contact

Questions about privacy? Email us at support@hhex.help.

---