Your data stays yours.

Who we are

Hybro is developed by Paolo Furlotti, Via di Giuseppe Martucci 33, 00199 Roma. For any privacy question: hybrosupport@gmail.com.

What the app uses and where it stays

• Questionnaire answers (name, age, weight, goals, experience, available days, injuries, health questions): used to build your plan. They stay on your device.
• Your plan, completed sessions, sets, loads and runs (GPS route, distance, times, heart rate, cadence): stay on your device.
• Apple Health: if you allow it, the app reads workouts, heart rate and similar data to adapt your plan, and writes the sessions you record. Health data is never sent to us or to third parties, and is never used for advertising.
• Location: only during a run you start, to measure distance and pace, also with the screen off if you choose "Always". It is not collected outside runs.
• Motion: the phone's pedometer during runs, for cadence.
• Bluetooth: only to connect a heart rate sensor (for example a chest strap or a WHOOP in broadcast mode) during runs.
• Photos and files: only the ones you pick to add a plan or a run. Text is read on the phone; images never leave the device.
• Apple Watch: your plan and sessions move between phone and watch through Apple's connection, never through us.

Services you can connect

If you connect WHOOP, Polar, Fitbit or Oura, the app asks that service, with your consent, only for permission to read your workouts. Workouts are downloaded directly from the service to your phone and stay there. Access keys are stored in the device Keychain.

Strava works the other way: if you connect it, Hybro only asks for permission to upload activities and, at the end of each run recorded with Hybro, sends it to your Strava account (route, times, distance, heart rate and cadence). Hybro reads nothing from Strava. You can turn off automatic upload or disconnect Strava at any time; runs already sent stay on Strava and are governed by its privacy policy.

To complete sign-in we use a small technical service (hosted on Vercel) that adds the app's secret code, which cannot live inside the app. It only receives the temporary sign-in code and returns the keys to your phone: it never receives your workouts, stores nothing and does not log requests.

You can disconnect a service at any time in Profile → Connections: the app deletes the keys and asks the service to revoke access. You can also revoke it from the service's own settings. Each service's data is also governed by its own privacy policy (WHOOP, Polar, Fitbit, Oura, Strava).

Purchases

Subscriptions are handled by Apple. We never receive your payment details.

What we don't do

• No advertising, no cross-app tracking, no third-party analytics.
• No selling or sharing of data.
• No use of your data to train artificial intelligence models.

How long

Data stays on your device while you use the app. You can delete a single activity, export everything (Profile → Export my data) or delete everything (Profile → Delete all data). Uninstalling the app deletes its data from the device. Data written to Apple Health stays there until you delete it in Health.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, port and object to the processing of your data. Because your data is on your device you can do this directly in the app; for any request write to hybrosupport@gmail.com and we will reply within 30 days. You can also contact your data protection authority.

Children

Hybro is meant for people aged 16 and over.

Changes

If we change this policy we update the date above; if the data we use changes, we ask you again in the app.