Privacy Policy

Hyvra Last updated: 12 September 2026

1. Introduction

Welcome to Hyvra ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Hyvra mobile application and related services (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

Hyvra is operated by Hyvra (ABN 95 997 493 901), based in New South Wales, Australia.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration details (name, email address, date of birth)
• Body metrics (height, weight, fitness goals)
• Training logs, workout history, and performance data
• Profile photos or images you choose to upload

2.2 Health and Fitness Data

With your explicit permission, we collect health and fitness data from Apple Health (HealthKit) and from Bluetooth heart-rate sensors you choose to pair with the app. Third-party devices and platforms such as Apple Watch, Garmin, Whoop, Polar and Wahoo reach Hyvra only through the data they write into Apple Health; Hyvra does not connect to those platforms directly.

This data may include workouts and workout summaries, heart rate (including continuous heart-rate readings recorded during a session), resting heart rate, active energy, distance and related biometric data. Hyvra does not collect sleep data.

2.3 HealthKit Data (Apple Health)

If you grant permission to access Apple Health, we read health and fitness data via Apple's HealthKit framework, and — if you grant write permission — we write the workouts you record in Hyvra (including duration, distance, heart-rate readings and estimated energy) back to Apple Health so they appear in the Health and Fitness apps. This data is used solely to provide and improve the Service. Specifically:

• HealthKit data will not be used for advertising, marketing, or any purpose unrelated to health and fitness
• HealthKit data will not be sold to third parties under any circumstances
• HealthKit data will not be shared with third parties without your explicit consent, except as strictly necessary to provide the Service or as required by law
• HealthKit data is not used to derive sensitive inferences unrelated to health and fitness
• If you delete a workout in Hyvra, we also delete the copy Hyvra wrote to Apple Health
• You may revoke read or write access at any time through your iPhone's Health app settings

2.4 Location Data

With your permission, we collect precise location data during outdoor sessions you choose to track (for example walks, runs and rides) to record your route, distance, pace and elevation. Location may be collected in the background while a tracked session is in progress, including when your phone is locked. Route data for a session is stored with that session in your training history. Location is not collected outside a tracked session. You may revoke location access at any time through your device settings.

2.4A Bluetooth Heart-Rate Sensors

With your permission, Hyvra can use Bluetooth to connect to a heart-rate sensor (such as a chest strap) that you choose to pair. We use the connection only to receive heart-rate readings during a session. We store the identifier of a sensor you have saved so it can reconnect automatically. We do not scan for or store information about other nearby devices.

2.4B Live Activities and Lock Screen

When a session is in progress, Hyvra may display session information (elapsed time, splits, current heart rate, rest timers) on your Lock Screen and in the Dynamic Island. This is rendered on your device and is not transmitted to us.

2.5 Automatically Collected Information

When you use the Service, we may automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Usage data (features accessed, time spent, interactions within the app)
• Log data (IP address, app crashes, performance data)
• Analytics data to understand how users interact with the Service

2.6 AI Coaching Data

The Service uses artificial intelligence to generate personalised training recommendations, programs and coaching responses. To do this, relevant training data, body metrics, recovery state and health data (including heart-rate summaries from your sessions) are sent from your device through Hyvra's own server-side proxy to Anthropic's API for processing. The proxy exists so that your requests are authenticated and our API credentials are not stored on your device; it passes your request through and does not retain the content of AI requests or responses beyond what is needed to process them. Data sent to Anthropic is subject to Anthropic's API data usage policies. Please review Anthropic's privacy policy at anthropic.com/privacy for information on how they handle data submitted via their API.

2.7 Waitlist and Marketing Data

If you sign up for early access or the Hyvra waitlist via our website, we collect your email address. This is used to send you updates about the Service and is managed via Loops (loops.so). You may unsubscribe at any time.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate personalised AI coaching recommendations and training programs
• Analyse training load, fatigue, and recovery across modalities
• Sync and integrate data from connected fitness platforms
• Send transactional emails (account verification, password reset) via Resend
• Send marketing and waitlist communications via Loops (with your consent)
• Send push notifications about your training (with your permission)
• Communicate with you about your account, updates, and support
• Process subscription payments via RevenueCat, Apple App Store, and Google Play Store
• Improve and develop new features of the Service
• Comply with legal obligations

We do not use your health or fitness data for advertising purposes.

4. Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Infrastructure: Your account data and training data is stored on servers provided by Supabase, which may be located in the United States or other countries outside Australia.

AI Processing: Training and health data is transmitted from your device, via Hyvra's server-side proxy, to Anthropic's API to generate coaching recommendations. This transmission is governed by Anthropic's API terms and privacy policy (anthropic.com/privacy).

Transactional Email: Your email address is shared with Resend (resend.com) solely for the purpose of sending account-related emails such as verification and password reset.

Marketing Email: If you sign up for the waitlist or marketing communications, your email address is processed by Loops (loops.so) to send you updates about Hyvra. You may unsubscribe at any time.

Payments and Subscriptions: When you purchase a subscription, payment is processed through RevenueCat, Apple App Store, or Google Play Store. We do not store your payment card details.

Connected Platforms: Hyvra exchanges data with Apple Health in accordance with your permissions. Data from other devices and platforms (Apple Watch, Garmin, Whoop, Polar, Wahoo and similar) reaches Hyvra only via Apple Health, under those platforms' own privacy policies.

Challenges and Leaderboards: If you join a challenge, your display name, profile photo (if you have added one) and your progress and rank in that challenge are visible to other signed-in Hyvra users on the challenge leaderboard. Your underlying workout data, health data and location are not shared. You can leave a challenge at any time, after which you no longer appear on its leaderboard.

Analytics: We may use analytics providers to understand how users interact with the Service. Any analytics data is anonymised or aggregated where possible.

Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Third-Party Service Providers

The following third-party services are used in the operation of Hyvra:

6. Data Storage and Security

Your data is stored on servers provided by Supabase, which may be located in the United States or other countries outside Australia. By using the Service, you consent to this transfer.

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at privacy@hyvra.io.

8. Your Rights (Australian Privacy Act 1988)

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at privacy@hyvra.io.

9. GDPR Rights (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing. To exercise these rights, contact us at privacy@hyvra.io.

10. Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@hyvra.io.

11. Push Notifications

If you grant permission for push notifications, we may send you training reminders, program updates, and other relevant notifications. You can disable push notifications at any time through your device settings.

12. Third-Party Links and Services

The Service may contain links to or integrations with third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you connect.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Hyvra Email: privacy@hyvra.io Website: hyvra.io