Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account and use HyroxPlan:

• Account information: Email address, name, and password (hashed, never stored in plain text).
• Profile data: Date of birth, city, fitness level, training preferences, race results, body measurements, and training goals.
• Training data: Workout plans, exercise logs, performance metrics, and notes you enter.
• Usage data: Session information for authentication purposes only.

2. How We Use Your Information

• To generate personalized AI training plans based on your profile and goals.
• To track your workout progress and provide performance insights.
• To authenticate your identity and maintain your session.
• To improve our AI training algorithms (using anonymized, aggregated data only).

3. Data Storage & Security

Your data is stored securely in a PostgreSQL database hosted by Neon (neon.tech) with encrypted connections. Passwords are hashed using bcrypt. We do not sell, rent, or share your personal data with third parties.

4. AI Processing

When generating training plans, your profile data (fitness level, goals, preferences) is sent to AI models to create personalized workouts. This data is used only for plan generation and is not stored by AI providers beyond the request.

5. Your Rights (GDPR / CCPA)

You have the right to:

• Access: Export all your data at any time from Settings > Data & Account > Export.
• Rectification: Update your profile information at any time in Settings.
• Erasure: Permanently delete your account and all data from Settings > Data & Account > Delete Account.
• Portability: Download your data in a structured JSON format.

6. Cookies

We use a single essential cookie for authentication (session token). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

7. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all data is permanently removed from our databases within 24 hours. Expired sessions are automatically purged.

8. Children

HyroxPlan is not intended for users under 16 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email.

10. Contact

For privacy-related inquiries, please contact us at privacy@hyroxplan.com.