Privacy Policy

Hyvra Last updated: 20 April 2026

1. Introduction

Welcome to Hyvra ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Hyvra mobile application and related services (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

Hyvra is operated by Hyvra (ABN 95 997 493 901), based in New South Wales, Australia.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration details (name, email address, date of birth)
• Body metrics (height, weight, fitness goals)
• Training logs, workout history, and performance data
• Profile photos or images you choose to upload

2.2 Health and Fitness Data

With your explicit permission, we may collect health and fitness data from third-party services and devices, including:

• Apple Health (HealthKit)
• Garmin Connect
• Strava
• Whoop
• Polar
• Wahoo
• Other connected fitness platforms

This data may include heart rate, activity levels, sleep data, caloric information, workout summaries, and related biometric data.

2.3 HealthKit Data (Apple Health)

If you grant permission to access Apple Health, we collect health and fitness data via Apple's HealthKit framework. This data is used solely to provide and improve the Service. Specifically:

• HealthKit data will not be used for advertising, marketing, or any purpose unrelated to health and fitness
• HealthKit data will not be sold to third parties under any circumstances
• HealthKit data will not be shared with third parties without your explicit consent, except as strictly necessary to provide the Service or as required by law
• HealthKit data is not used to derive sensitive inferences unrelated to health and fitness
• You may revoke HealthKit access at any time through your iPhone's Health app settings

2.4 Location Data

With your permission, we may collect precise or approximate location data to provide location-aware training features and activity tracking. You may revoke location access at any time through your device settings.

2.5 Automatically Collected Information

When you use the Service, we may automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Usage data (features accessed, time spent, interactions within the app)
• Log data (IP address, app crashes, performance data)
• Analytics data to understand how users interact with the Service

2.6 AI Coaching Data

The Service uses artificial intelligence to generate personalised training recommendations. To do this, relevant training data, body metrics, and health data are sent directly from your device to Anthropic's API for processing. This data is transmitted client-side and is subject to Anthropic's API data usage policies. We do not store your data on our servers for the purpose of AI processing. Please review Anthropic's privacy policy at anthropic.com/privacy for information on how they handle data submitted via their API.

2.7 Waitlist and Marketing Data

If you sign up for early access or the Hyvra waitlist via our website, we collect your email address. This is used to send you updates about the Service and is managed via Loops (loops.so). You may unsubscribe at any time.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate personalised AI coaching recommendations and training programs
• Analyse training load, fatigue, and recovery across modalities
• Sync and integrate data from connected fitness platforms
• Send transactional emails (account verification, password reset) via Resend
• Send marketing and waitlist communications via Loops (with your consent)
• Send push notifications about your training (with your permission)
• Communicate with you about your account, updates, and support
• Process subscription payments via RevenueCat, Apple App Store, and Google Play Store
• Improve and develop new features of the Service
• Comply with legal obligations

We do not use your health or fitness data for advertising purposes.

4. Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Infrastructure: Your account data and training data is stored on servers provided by Supabase, which may be located in the United States or other countries outside Australia.

AI Processing: Training and health data is transmitted directly from your device to Anthropic's API to generate coaching recommendations. This transmission is governed by Anthropic's API terms and privacy policy (anthropic.com/privacy).

Transactional Email: Your email address is shared with Resend (resend.com) solely for the purpose of sending account-related emails such as verification and password reset.

Marketing Email: If you sign up for the waitlist or marketing communications, your email address is processed by Loops (loops.so) to send you updates about Hyvra. You may unsubscribe at any time.

Payments and Subscriptions: When you purchase a subscription, payment is processed through RevenueCat, Apple App Store, or Google Play Store. We do not store your payment card details.

Connected Platforms: When you connect third-party fitness platforms (Apple Health, Garmin, Strava, etc.), data is shared between those platforms and Hyvra in accordance with your permissions and those platforms' own privacy policies.

Analytics: We may use analytics providers to understand how users interact with the Service. Any analytics data is anonymised or aggregated where possible.

Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Third-Party Service Providers

The following third-party services are used in the operation of Hyvra:

6. Data Storage and Security

Your data is stored on servers provided by Supabase, which may be located in the United States or other countries outside Australia. By using the Service, you consent to this transfer.

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at privacy@hyvra.io.

8. Your Rights (Australian Privacy Act 1988)

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at privacy@hyvra.io.

9. GDPR Rights (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing. To exercise these rights, contact us at privacy@hyvra.io.

10. Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@hyvra.io.

11. Push Notifications

If you grant permission for push notifications, we may send you training reminders, program updates, and other relevant notifications. You can disable push notifications at any time through your device settings.

12. Third-Party Links and Services

The Service may contain links to or integrations with third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you connect.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Hyvra Email: privacy@hyvra.io Website: hyvra.io