Privacy policy

Last updated: July 23, 2026

heavypal ("we", "us") is a workout tracking app. This policy explains what data the app handles and what your choices are.

Contact: support@heavypal.com

Data we collect

When you sign in with Google we receive and store:

• your email address, display name, and Google profile picture
• a user ID we create for your account

While you use the app we store data you create:

• workouts, exercises, sets, reps, and weights you log
• training programs and schedules
• body weight entries you add (optional)
• your country (you pick it, or the app can suggest it once from your device location, see "Location" below)
• friends you add and interactions in social features
• messages you send to the AI coach (optional)
• a push notification token for your device, if you enable notifications

We do not collect analytics, advertising identifiers, or crash tracking data. The app contains no ads and no third party tracking SDKs.

Location

If you let the app suggest your country, your device location is read once, converted to a country code on your device, and only the country code is saved. Your coordinates never leave your phone. You can always pick your country manually instead. The location permission is optional.

Calendar

If you add training days to your calendar, events are created directly in your device calendar. Calendar data is not uploaded to our servers.

How we use data

• to run the app: sync your training data, power progress charts, social features, and leaderboards
• to generate AI coaching responses to your requests
• to send push notifications you have enabled, like workout reminders or friend activity

We do not sell your data or use it for advertising.

Service providers

• Hosting: our servers run on Hetzner infrastructure in Germany (EU).
• AI coach: the content of your AI coach requests and relevant training context is processed by Anthropic to generate responses.
• Push notifications: delivered via Google Firebase Cloud Messaging.

These providers process data on our behalf and are not permitted to use it for their own purposes.

Leaderboards and social

Your display name, country flag, and aggregated training stats such as workout counts can be visible to friends you add and on leaderboards.

Data retention and deletion

Your data is kept while your account exists. You can delete your account at any time in the app under Settings, Account, Delete account. This permanently deletes your account and associated data from our servers. You can also request deletion at heavypal.com/delete-account or by emailing support@heavypal.com.

Security

All traffic between the app and our servers is encrypted in transit (TLS).

Children

heavypal is not directed at children and is intended for users 18 and over.

Your rights

Depending on where you live, for example in the EU or EEA under GDPR, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. Contact us at support@heavypal.com to exercise these rights.

Changes

If we change this policy we will update this page and the date above.