Privacy Policy

Who this notice covers

Health Club co. provides the Health Club app and this website. This notice describes the information used to provide accounts, fitness and nutrition tools, community features, support, and the newsletter. For privacy questions, email support@healthclubapp.co; for help, email support@healthclubapp.co.

Information the app processes

• Account and profile: email, account identifier, name, date of birth, profile photo, handle, biography, goals, dietary preferences, height, and training experience, depending on what you enter.
• Health and fitness: workouts, sets, exercise history, food and water entries, nutrition targets, body measurements, progress photos, and activity metrics such as steps, heart rate and sleep where you provide them or use a supported feature. These records can reveal sensitive health information.
• Community and messages: posts, photos, comments, reactions, follow relationships, and chat content. Content you share is visible to its audience; messages are processed to deliver chat.
• Device and service information: notification tokens, app/device identifiers, app version, diagnostics, crash reports, performance traces, and network information such as IP addresses. Error reports can include account identifiers and request context.
• Permissions: the camera supports progress photos and barcode scanning; the photo picker lets you select images; notification permission controls alerts. You can manage permissions in your device settings. The current Android configuration blocks location, contacts, and microphone permissions.

Available features and connected-device support vary by build and platform. This notice does not mean that every listed metric is automatically collected or that every wearable integration is available.

Website and newsletter

The website has no installed analytics or advertising trackers. Fonts, images and store badges are served with the site. We use necessary local storage to remember your cookie choices for up to 180 days. Optional categories start off and can be changed through “Cookie settings” in the footer. See the cookie policy.

If you request the newsletter, we store your email, consent wording version, registration time and source, and security/consent records needed to process the request and honor withdrawals. Registration is separate from cookie consent. We use single opt-in: the newsletter checkbox is your consent, and you can withdraw it at any time. Support emails contain the information you choose to send.

Why information is used

Account and service data provide the features you request. Fitness and nutrition records support your logs and progress. Community data delivers sharing and chat; notification tokens deliver alerts. Diagnostics and limited security logs help operate and protect the service. Newsletter marketing relies on your separate opt-in and can be withdrawn.

Where GDPR applies, the relevant bases are performance of the service contract, legitimate interests in reliability and security, legal obligations, and consent for optional processing. Processing that requires explicit consent for sensitive health information must obtain it separately in the app; agreeing to this policy is not that consent.

Service providers and sharing

• Amazon Web Services: account authentication, API hosting, databases, uploaded files, website delivery, and newsletter request records.
• Stream: community chat, message content, user identifiers, and chat notification delivery.
• Firebase and Expo: app notification delivery and associated device tokens. Firebase diagnostics and analytics components are included in the app; their behavior depends on the release configuration.
• Sentry: app crash/error reporting and performance diagnostics. The current app configuration permits default personal information and request context in diagnostics; these reports should not be assumed anonymous.
• Other members: information you choose to publish or send through community features.

We may disclose information when legally required or needed to address abuse and protect rights. No advertising SDK or sale of data was identified in the reviewed app code. Website cookie choices do not change mobile SDK settings.

Storage, transfers and security

The staging backend uses AWS in Ireland (eu-west-1), with worldwide CDN delivery. Other providers may process information in other countries. Contact us for provider locations and the safeguards applicable to your information. Connections to the hosted service use HTTPS; access controls and encrypted storage protect backend records. No system can guarantee absolute security.

Retention and deletion

Account data is kept to provide your account and requested features. Deleting your sign-in alone does not erase all associated records. Complete account and provider erasure currently requires manual review. Request full deletion or deletion of specific data using the account and data deletion page.

We aim to respond within 30 days after verifying a request, explaining any information retained for law, security, disputes or newsletter suppression and the applicable period. Backup and provider retention periods are being confirmed; request the schedule that applies to your data. We do not promise immediate deletion from every backup.

Your rights and choices

Depending on your location, you may request access, correction, export, deletion, restriction, or object to processing. You may withdraw consent without affecting processing already lawfully carried out. Email the privacy address above; we may need to verify ownership, but will not ask for your password. You may complain to your local data protection authority. Device permissions and notification settings can be changed on your device.

Children and updates

Health Club is not designed for children under 13. If you believe a child has provided personal data, contact us to request review and removal. We update the date on this page when this notice changes and must obtain fresh consent where new optional uses require it.