Back to Legal

Privacy Policy

Last Updated: December 27, 2025 | Effective Date: December 27, 2025

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, processing, and disclosure of personal information and health data through the Performance Hub mobile application and related services (collectively, "Service").

By accessing or using Performance Hub, you explicitly acknowledge and agree to this Privacy Policy and our Terms of Service. If you do not agree, do not use the Service.

This Policy applies to:

  • Mobile applications (iOS/Android)
  • Website (performance-payments.vercel.app)
  • Backend services and APIs
  • All data processing activities

2. Definitions

2.1 Personal Information

"Personal Information" means any information that identifies, relates to, or could reasonably be linked with an individual, including but not limited to:

  • Name, email address, phone number
  • Account credentials
  • Profile information (age, gender, weight, height)
  • Subscription and payment information

2.2 Health Data

"Health Data" means protected health information and sensitive medical information, including:

  • Sleep patterns and duration
  • Heart rate and heart rate variability (HRV)
  • Respiratory rate and resting heart rate
  • Active and passive energy expenditure
  • Strain and recovery metrics
  • Workout and training data
  • Nutrition and supplement intake
  • Medication and prescription information
  • Body measurements and wellness metrics

2.3 Wearable Device Data

"Wearable Device Data" means data obtained from connected devices including Apple Watch, Apple Health data, WHOOP band data and metrics, and other fitness trackers and wearables you connect.

3. Data Collection

3.1 Information You Provide Directly

We collect information you explicitly provide, including:

Account Registration:

  • Full name and email address
  • Password (encrypted)
  • Date of birth and gender identity
  • Weight and height
  • Fitness goals and training experience level

Profile Information:

  • Training preferences (days per week, session duration, equipment)
  • Supplement use and details
  • Health conditions and restrictions
  • Nutrition preferences
  • Wearable device information

3.2 Information Collected Automatically

Wearable Device Integration - Apple Health:

  • Sleep data (duration, quality, stages)
  • Heart rate data (current, resting, variability)
  • Workout data (type, duration, calories, heart rate zones)
  • Body measurements (weight, height, body fat %)
  • Respiratory rate and energy expenditure

You explicitly grant app permissions to access Apple Health. We read only data you authorize, sync data on your device locally first, and selected data is uploaded to our servers for analysis. Data remains encrypted in transit and at rest. You can revoke access at any time through Settings.

Application Usage Data:

  • Device type and operating system
  • App version and features accessed
  • Time and duration of usage
  • Error logs and crash reports
  • IP address and approximate location (city-level)

4. Payment Processing

4.1 Payment Information

We Do NOT Collect or Store:

  • Credit card numbers or debit card numbers
  • Card security codes (CVV/CVC)
  • Full payment card data
  • Bank account information

Stripe Processes and Stores:

  • Payment method information (tokenized)
  • Billing address and payment history
  • Subscription and refund information

All payment processing complies with PCI DSS standards. Stripe's privacy policy applies: https://stripe.com/privacy. Your payment information never touches our servers.

5. Data Usage and Purposes

5.1 Core Service Delivery

We use your information to:

  • Create and maintain your account
  • Authenticate you securely
  • Process subscription and payments
  • Generate personalized workout programs
  • Calculate training recommendations
  • Provide nutrition guidance and recovery optimization
  • Calculate recovery scores from sleep, HRV, resting heart rate
  • Track progress toward fitness goals

5.2 Service Improvement

  • Improve app performance and reliability
  • Debug and fix technical issues
  • Enhance user interface and experience
  • Develop new features and services
  • Conduct research and analytics

5.3 Legal and Safety Compliance

  • Comply with legal obligations
  • Respond to lawful requests from authorities
  • Prevent fraud and abuse
  • Protect rights and safety of users and company
  • Enforce Terms of Service

6. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest
  • Secure authentication with hashed passwords
  • Regular security audits and monitoring
  • Access controls and employee training
  • Incident response procedures

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data
  • Opt out of marketing communications
  • Revoke wearable device permissions

To exercise these rights, contact us at privacy@performancehub.app

8. Contact Us

For questions about this Privacy Policy or our data practices: