Legal

HAP Privacy Policy

Last updated: 22 September 2026·Policy version 2026-09-20.1

This version string is what the HAP app records when you agree in Profile → Privacy.

Who we are

HAP (Hybrid Athlete Planner) is operated by Mihai Bargan, Bd. Mircea cel Bătrân 34/5, Chișinău MD-2075, Moldova. For anything in this policy, contact support@haptraining.app.

We are the data controller for the information described here.

What we collect, and why

You tell us: your email address; your training goal, disciplines, experience level, available days and preferred session length; your age, height and weight; any injuries or health concerns you record; how you feel each morning; and any notes you write.

Your phone's health app gives us, only if you allow it — Apple Health on iPhone, Health Connect on Android:

  • Heart rate variability and resting heart rate
  • Sleep duration and stages
  • Workouts: type, start and end time, duration, distance, calories, average heart rate
  • Steps, VO2 max, blood oxygen, respiratory rate
  • Body mass and height

We also write gym sessions into Apple Health on iPhone, when you enable it. What is written: activity type, start time and end time. We do not write calories, distance or heart rate. The setting defaults on; nothing is written unless Apple Health has granted the write permission. You can turn it off in Settings.

We work things out from it: a daily readiness score, your training load, and a recommendation for how hard to train.

We record how you use the app: the sessions you complete, sets and weights, and which plans you finished or skipped.

Diagnostics are off by default. Technical events that help us fix problems are not collected unless diagnostics are enabled. There is no in-app control to turn them on or off.

We use all of this for one thing: building and adapting your training plan, and showing you your own history. We do not sell your data. We do not use it for advertising or to build advertising profiles.

Health data needs your explicit permission

Health information is treated as a special category under UK and EU data protection law. We ask for your explicit consent before reading any of it, and we ask separately before sending any of it to the service that generates your plans.

You can withdraw either permission at any time in Profile → Privacy. It is as easy to withdraw as it was to give. If you withdraw, we stop; what we already processed remains lawful up to that point.

If you say no, HAP still works. You can log training by hand, use the gym tracker, and get a plan built from what you have told us. You will not get recovery-aware planning or automatic workout import.

Who else sees your data

WhoWhat they getWhereWhy
SupabaseEverything aboveServers in Ireland (EU)Hosts our database
AnthropicIf you allow the second permission: your goal, disciplines, experience, availability, age, injuries; your last 14 days of workouts; your readiness, sleep, heart rate variability and resting heart rate. If you decline: only your goal, disciplines, experience and availability.United StatesGenerates your training plan
Expo, and Google or AppleA notification token, and the text of the notification — which can name an activity and its lengthUnited StatesDelivers notifications
Apple (iPhone)We never see your payment details. Apple is the merchant of record for in-app purchase.United StatesTakes payment on iOS
Stripe (web)Your email, and the payment details you type on Stripe's own pageEU / United StatesTakes payment on the web

On iPhone, you pay through Apple in-app purchase. Apple is the merchant of record; we never see your payment details. On the web, payment is through Stripe: we pass your email, and you type payment details on Stripe's own page.

About Anthropic

Your training plans are written by an AI model run by Anthropic, a company in the United States. To do that we send the training and recovery information listed above.

We do not send your name, your email address, your account identifier, or anything else that identifies you.

Sending data to the United States means it leaves the EEA. We rely on Standard Contractual Clauses, incorporated through Anthropic's Data Processing Addendum.

If you would rather this did not happen, decline the second permission when we ask. We still send your goal, disciplines, experience and availability — not health data — so a plan still generates. It will not adapt to how you have recovered.

Where your data lives, and for how long

Your data is stored on Supabase's servers in Ireland.

  • Diagnostic events are deleted automatically after 30 days.
  • Everything else is kept while your account exists.
  • When you delete your account, we delete your data. In the app this is Profile → Settings, behind a two-step confirm that requires you to type DELETE.

Your rights

Under UK and EU law you can ask us to: show you your data; correct it; delete it; stop or limit what we do with it; give you a copy to take elsewhere; and withdraw a consent you gave.

In the app: change your details in Profile; withdraw permissions in Profile → Privacy; delete your account in Profile → Settings.

For anything else, email support@haptraining.app. We will respond within one month.

You can complain to your data protection authority, or with the data protection authority in the EU or EEA country where you live.

Children

HAP is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Automated decisions

HAP uses an AI model to generate training plans, and calculates a readiness score from your health data. These shape what the app suggests. They are suggestions about exercise. They are not decisions with legal or similarly significant effects, and nothing here is medical advice. You are free to ignore any of it.

HAP is not a medical device. Talk to a doctor before starting a training programme, particularly if you have an existing condition or injury.

Changes

We will update this page and change the date and version above. If a change materially affects how we use your health data, we will ask for your permission again rather than assuming the old one still applies.

Contact

support@haptraining.app · Mihai Bargan · Bd. Mircea cel Bătrân 34/5, Chișinău MD-2075, Moldova