Privacy Policy

Account information — name, email, username, password, birth year, gender.

Profile information — photo, weight, height, fitness goal, location, bio.

Workout data — exercises, sets, reps, weight, duration, personal records.

Activity data — GPS routes, duration, distance, pace — only when you log an activity. Activity summaries and route maps may be visible to other members on your profile and in the feed, depending on your privacy settings.

Connected tracker data — if you choose to connect a fitness tracker via Health Connect, we sync data you grant permission for (such as steps, calories burned, exercise sessions, and sleep) to power your activity rings, Portfolio score, and analytics. Syncing is optional and off until you connect a tracker; you can disconnect at any time in Settings.

Nutrition data — meals logged, macros — completely private, never shared.

Coach/athlete data — program assignments, compliance metrics — never food logs.

Device information — device type, OS, app version — for bug fixing only.

• To provide the WeHashFit service
• To calculate your leaderboard ranking
• To enable coach-athlete features
• To send notifications you have opted into
• To improve the app (aggregate, anonymous data)

We do NOT sell your data to third parties, and we never use your workout, nutrition, or health data for advertising.

WeHashFit collects health-related data including workout metrics, body measurements, and nutrition information. This data is treated with the highest level of sensitivity.

We will not:

• Sell your health data
• Use it for advertising or marketing
• Share it with third parties without your explicit consent
• Allow coaches to access your nutrition logs

Nutrition data is entirely private. Your coach can only see whether you hit daily targets (yes/no) — never what specific foods you ate.

We use trusted third-party service providers to help deliver WeHashFit. These fall into the following categories:

• Authentication and data storage — to securely store your account and fitness data
• Payment processing — to handle subscription billing. We never store your payment card details.
• Exercise and nutrition content — to power our exercise library and nutrition database
• Video delivery — to stream exercise demonstration videos
• Security and performance — to protect the service and ensure reliability
• Advertising and analytics measurement — third-party advertising and analytics tools on our public website, used to measure how our own marketing campaigns perform. These operate on website activity only and never receive your workout, nutrition, or health data.

We share only the minimum data necessary for each provider to perform their function. We do not permit our service providers to use your data for their own purposes.

A list of our current service providers is available on request by contacting privacy@wehashfit.com

We implement technical and organisational measures to protect your personal data against unauthorised access, including:

• Row-level security on all database tables
• Encryption in transit (TLS) and at rest
• Automated blocking of known web scrapers and AI crawlers
• Rate limiting on all API endpoints
• Regular security audits

We do not sell your personal data to third parties and we do not permit automated collection of user data from our platform. Your workout data, health metrics, and personal information are used solely to provide and improve the WeHashFit service.

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time via Settings → Account → Delete Account.

Aggregated, anonymised statistics may be retained for product improvement purposes.

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data (available on request by emailing privacy@wehashfit.com)
• Withdraw consent

Australian users: rights under the Privacy Act 1988 (Cth)

EU/UK users: rights under GDPR

California users: rights under CCPA

To exercise these rights, contact privacy@wehashfit.com

WeHashFit is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

We will notify you of material changes via email or in-app notification at least 14 days before they take effect.