Privacy Policy

Effective 3 October 2026.

This describes what Hadid actually does with your data. It is written against the app's real behaviour, not a template.

Who we are

Hadid is an independent app. Contact: support@hadid.fitness.

What we store on our servers

When you sign in, the following is stored on our servers so that it is available on your other devices:

Signing in with email

If you choose to sign in with your email address instead of Apple or Google, we send a one-time code to that address. The email is sent through Hostinger, our email provider, which receives your email address and the code in order to deliver it. Your email address then identifies your account, just as it does when you sign in with Apple or Google. We do not use your email address to send you anything else, and never for marketing.

Progress photos, specifically

If you add a progress photo while signed in, the image file is uploaded to our storage, not merely referenced on your device. These are photographs of your body, so we are stating it plainly rather than leaving it to be inferred. They are held in a private bucket that is not publicly readable and is restricted to your own account.

If you would rather no photograph ever left your phone, do not add progress photos while signed in. Every other feature works without them.

Where it is stored, and who reaches it

On Supabase, which provides our database and file storage. They process this data on our behalf and do not use it for their own purposes.

The servers are in the European Union — Supabase's Central EU region, in Frankfurt, Germany. Your training data, your measurements and your progress photographs are held there.

Hadid is operated from Israel, so we access that data from Israel in the course of running and supporting the app. Israel holds an adequacy decision from the European Commission, which is the basis on which personal data may be transferred there from the EU.

Your rights

Because the data is held in the EU, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to erase it. Two of those you can do yourself, immediately and without asking: CSV export, and account deletion — both described below. For anything else, email support@hadid.fitness.

The AI coach, and the one third party that sees your training

The Coach is optional and off until you use it. When you send it a message, the app sends that message — together with whatever context you have permitted, described below — to Anthropic, which generates the reply.

Anthropic is the only third party that receives the content of anything you record — your messages and any photo you attach to one, and, with permission, your training, your body data, what Coach remembers about you, or two of your progress photographs. One other company, RevenueCat, receives your account identifier and whether you have paid, but never any of this content; that is described in "Subscriptions, and who handles them" below. (A feedback report you choose to send, or a Coach reply you report, is separate: "Feedback you send us" and "Safety records and reports" describe where those go.) What Anthropic receives is the message you typed; when the training permission is on, a summary of your training history, together with your goals for your main focus, your lifts and how often you train and how you are pacing towards them (including any you reached in the last 30 days), your weekly schedule, the working weights in a program you follow and how many times in a row you have missed each of its lifts, and how many workouts you finished in each of the last 12 weeks; and when the body-weight permission is on, your latest recorded body weight together with the most recent one you recorded 30 or more days ago, your latest body measurement for each place you measure together with the one closest to 30 days earlier, your height, and your body-weight and measurement goals. All of that goes to Anthropic exactly like the training summary does — it is not held back. When the sex permission is on, your sex (male or female) goes too — the same plain fact the app itself asked during onboarding, nothing computed from it. When the photos permission is on, and you are a Pro subscriber, and you ask the Coach to compare two specific progress photographs, those two photographs — and only those two, never your library or any others — go to Anthropic for that one reply. Outside that case, and attaching a photo to a message, described next, nothing about your photographs reaches Anthropic: browsing, uploading, or storing them never does. Your sex and height, if you gave them, the language you use the app in, and your phone's time zone travel with each Coach message to our server, which uses the time zone to place dates on your own calendar and the language to choose which language the app's own help text is given to Coach in, and passes your sex and height on only while their permission is on; our server does not store any of the four. Anthropic also receives each message you send and each reply the Coach sends back a second time, on their own, so that a smaller model can check them for content about self-harm, disordered eating, performance-enhancing drugs or sexual content before you see a reply. Anthropic does not receive your email address or your date of birth. If you never open the Coach, nothing is ever sent there.

Attaching a photo to a message. If you attach a photo to a Coach message, it is sent to Anthropic, together with a short safety check, to read that one message. Hadid does not store the photo: our servers keep only a note that the message had a photo, and a copy stays on your phone to show in the chat. This does not need the Photos switch above or a Pro subscription — it works for any signed-in account, whenever you choose to attach a photo to what you send, the same as the message you typed.

Coach adjusts its advice by age. To do that we store an age group on our servers — under 18, or 18 and over — and, for someone under 18, the month in which they turn 18, so Coach can switch to its adult mode then. We never store your date of birth; it stays on your device. The age group comes from the age range Apple or Google shares with the app, if they share one, or from the date of birth you enter, and we also store which of the two it came from. Under 18, Coach gives more cautious training advice, does not discuss dieting or weight loss, does not recommend supplements, does not analyze progress photographs or comment on how anyone looks, and is not sent body-weight or measurement goals. A photo attached to a message is read only for the workout written on it, for every age, including under 18. Coach is not available under 13.

Safety records and reports. When the safety check above stops a message or a reply, we record that it happened: the date, which category, whether it was your message or Coach's reply, and your age group. When the safety check itself fails to run, we record that too: the date and your age group, with no content and no category. We do not record the message. When you report a Coach reply, we keep a copy of that reply and the reason you chose, and we email them to our support address so a person reads them. That email is sent through Hostinger, our email provider, and carries the reply, the reason and your age group, but not your user ID. Both are deleted when you delete your account. Clearing the conversation does not delete a report you made.

Helpful or not helpful. Under each Coach reply you can mark it helpful or not helpful. We use this only to improve Coach. For a reply you mark helpful we keep only that you did and when. For a reply you mark not helpful we also keep a copy of the reply, the reason you chose if you chose one, and, if you are 18 or older, the question you asked just before it, so a person can see what went wrong. None of it is sent to Anthropic or anyone else. It is deleted when you delete your account. Clearing the conversation does not delete it.

You decide what the Coach can see. Settings → Coach has a separate switch for "Training history", "Body weight", "Sex" and "Photos", and a fifth control, "Memory", described below. Those five are the whole story: while one is off, nothing in that category reaches Anthropic, and turning it off stops it reaching Anthropic from your next message onwards. A new account starts with all five off, and Memory stays off until you choose to turn it on. Your goals follow the switch for what they are about: goals for your focus, your lifts and how often you train go with "Training history", and body-weight and measurement goals go with "Body weight". The Photos switch additionally requires a Pro subscription — the comparison feature it enables is a paid one — and even then only fires when you explicitly ask the Coach to compare two named photographs; it is never a standing permission over your whole photo library. (If you were using the Coach before these switches existed, your access was carried over rather than revoked — so check the training and body-weight switches if you have never opened that screen.) The prompt shown inside the Coach screen itself is a shortcut that turns those two on at once — it is the same setting, reached from a second door, so if you want only one of those two, use the switches in Settings.

What Coach remembers. Coach memory is part of Hadid Pro. The first time you open the Coach as a Pro subscriber it asks, once, whether it may remember you, and it stays off unless you say yes; you can change your answer at any time in Settings → Coach → Memory. While it is on, Coach can save short facts from your conversations, and you can add your own: your training days, the equipment you have, your training preferences, your sleep, work or stress, a date you are training towards — and an injury or a health condition you mention. That last kind is health information, and we are saying so plainly. Coach keeps up to 100 facts, each a sentence or so. They are stored on our servers, in the European Union with Supabase like the rest of your account, and while Memory is on they are sent to Anthropic with each Coach message so the reply can take them into account. Coach is told never to save things like passwords, card or bank details, your home address or your menstrual cycle; a fact containing words like those is not saved by Coach, and is not sent to Anthropic even if you type it in yourself.

You can see every fact, edit it, add one, delete one, or delete them all, in Settings → Coach → What Coach knows. They are kept until you delete them. Clearing the conversation does not remove them; deleting your account does. If your Pro subscription ends, they are kept but Coach does not use them and nothing from them is sent to Anthropic; you can still view and delete them at any time in Settings → Coach → What Coach knows, or ask us to at support@hadid.fitness.

Feedback you send us

Settings → Send feedback lets you report a bug, suggest an idea, or tell us something is working. It works without an account, and it only ever transmits what you deliberately submit.

When you press Send, we receive the message you typed, whether you marked it a bug, an idea or praise, and a short technical note: the app version, your device model, your operating system and its version, and the language you use the app in. If you happen to be signed in, your user ID is attached so we can reply; if you are signed out, nothing identifies you. The app shows you this list on the form itself, above the Send button.

A report can also come from the Coach. When Coach offers to pass a problem or an idea on to us, it shows the report as a card you can edit, and nothing is sent unless you tap Send. That report carries the words on the card, whether it is a bug or an idea, and the same technical note as the form, and, because the Coach needs an account, your user ID. It does not include your conversation with the Coach.

Where a report goes. It is stored so we can read it, and a copy is emailed to our own support address so it is not missed. That email is sent through Hostinger, our email provider, and carries what you typed, whether it is a bug, an idea or praise, the technical note above, and whether you were signed in — but not your user ID. Hostinger delivers email for us and does nothing else: besides these reports, it delivers the Coach replies you report, described in "The AI coach" above, and the sign-in codes described in "Signing in with email" above. It has no other part in the app.

We do not attach your training history, your body measurements, your progress photos, your location, or your IP address, and nothing about your network connection is used or recorded.

If you send feedback while offline, the message is held on your phone and sent the next time you have a connection. It is deleted from your phone once delivered. If you delete your account, feedback you sent while signed in is deleted with it. Feedback sent while signed out was never linked to an account, so it cannot be found and is kept.

Usage analytics, if you turn them on

Off by default. Nothing described in this section happens unless you switch on Settings → Help improve Hadid, or answer yes to the one-time card the app shows after your first finished workout. That card is shown once, whatever you answer.

When it is on, the app records a short, fixed list of events: the app being opened; which screen you opened (the screen's name, such as "history" or "workout/active"); which onboarding step you reached; that you started a workout, and whether it began from a saved routine, from a blank workout or by repeating a past one; that you finished a workout or created a routine; that you completed an import, with a rough range for how many workouts it brought in, such as "2–10"; that the Hadid Pro screen was shown, and what led to it, such as reaching the routine limit or opening it from Settings; that a free trial started or a subscription was bought, and which plan, monthly or yearly, but never the price; that you tapped a notification the app sent you, and which kind it was (a rest timer, a workout reminder, the weekly summary, an inactivity nudge, a photo or weigh-in reminder, or a streak shield reminder); that you used one of ten features — sending a Coach message, adding a progress photo, saving a measurement or weigh-in, starting a program, copying a routine template, creating a goal, switching on workout reminders, connecting Apple Health or Health Connect, exporting your data, or arming a streak shield — recording only that you did it, never what it contained; and that the app asked your phone to show the store's review prompt, which is all it can know, since the store does not say whether the prompt appeared or what you did. That is the whole list, and it is enforced in the app's code rather than by policy: the app can only send these events and these values, and our server only accepts events whose names are on the list.

If you switched analytics on in an earlier version of the app, the three newer kinds of event described above — a workout started, a notification tapped, a feature used — are not recorded for you until you update the app and switch analytics off and on again in Settings, which also gives you a new random identifier.

We do not record what you train, what you lift, your measurements, your photos, your notes, or anything you type. A screen name never contains an exercise — opening a specific exercise is recorded as "exercise" and nothing more.

Events carry a random identifier for the installation, created on your phone when you turn analytics on. It lets us tell one returning phone from two new ones, which is the only way to know whether people come back. It is not linked to your account, your email, or any device or advertising identifier. Turning analytics off deletes it along with anything still waiting to be sent, and turning them on again creates a new one rather than resuming the old.

Subscriptions, and who handles them

Hadid offers an optional paid subscription, Hadid Pro. Purchases are made through Apple's App Store or Google Play, and are handled for us by RevenueCat, which tells us who has paid so that a subscription you bought on one phone still works on your next one.

This happens when you sign in, not when you buy. So that a purchase can be matched to the right account, the app gives RevenueCat your Hadid user ID as soon as you sign in — and again each time the app restores your session. That means RevenueCat receives your user ID even if you never open the subscription screen and never buy anything. We are stating it that way round because "only if you subscribe" would be the natural assumption and it would be wrong.

What RevenueCat receives is your Hadid user ID, and the purchase information the store gives them: which product was bought, when, whether it is still active, and whether it was refunded. What they do not receive is your training history, your body weight, your measurements, your progress photographs, your Coach conversations, or your email address.

We never see your payment details. Your card number, billing address and the payment itself belong to Apple or Google. Nothing of that kind reaches our servers or ours to lose — what we store is the single fact of whether your subscription is active, as listed in "What we store on our servers" above.

If you never sign in, none of this applies: signed out, the app never contacts RevenueCat at all. Deleting your account removes the subscription record we hold. A purchase itself lives with Apple or Google, and is cancelled or refunded through them.

Invites and referrals

Hadid can give you free Hadid Pro time for inviting people who go on to train. It works from an invite code, and it applies only while you are signed in.

If you share your invite code and someone adds it to their account, we record that their account was invited by yours, and whether their account has finished a workout of at least ten minutes with three logged sets. We use this only to decide whether either of you has earned free Pro time.

Each time you try to add an invite code, we record that your account made an attempt and when, whether or not the code worked. We use this only to stop people guessing codes, and it is deleted when you delete your account.

You see how many of the people you invited have trained. You never see who they are, and they never see anything about you beyond the code you shared.

When a reward is earned, we tell RevenueCat — which already handles subscriptions for us and already receives your user ID when you sign in, as described in "Subscriptions, and who handles them" above — to add the free time to your account. No other company receives anything, and no new company is involved.

Deleting your account deletes your invite code and any record that you were invited. Free time already added is not taken back. If the person who invited you deletes their account before your workout counts, your pending free days are lost with it.

Apple Health, and Health Connect

Both phone platforms have a health app that other apps can write to and read from, so a training app, a smart scale and a running watch can all see the same picture: Apple Health on iPhone, and Google's Health Connect on Android. Hadid can use either one. It behaves the same way on both, and everything in this section applies to both unless it says otherwise.

It is off until you turn it on. A new install has it off. Nothing described in this section happens until you go to Settings → Apple Health (or Health Connect, on Android), press Connect, and grant permission in the dialog your phone shows you — which is Apple's screen or Google's, not ours.

What happens if you grant only part of it differs between the two, and the difference is not ours to remove. On Android, Hadid can see exactly what you granted, so a partial grant is treated as not connected and it writes nothing, rather than half-working with nothing on screen to say why. On iPhone, Apple deliberately does not tell an app whether you allowed it to READ — hiding that is how Apple stops apps working out what you declined, and we think that is the right call even though it costs us here. Hadid can only see whether it may WRITE. So on iPhone "Connected" means Hadid may write your workouts and weights, and if you declined the reading half, the import simply brings nothing in and neither we nor the app can tell you that is why.

What Hadid writes there

• Finished workouts, as an exercise session: when it started, when it ended, the name you gave it, and one exercise type for the whole session — strength training, unless every exercise in it was the same cardio, in which case that one. Not your individual sets, not the weights you lifted, not your notes.
• Body weight entries: the number and when you recorded it.

That is the entire list. Editing a workout or a weight in Hadid replaces the record it wrote, and deleting one deletes it — that is what the app attempts every time, and it is what normally happens.

It is an attempt, not a guarantee, and we would rather say so. Hadid is built so that a health store can never make a workout fail to finish or a weight fail to save, which means that when a write or a delete does not go through — the health app unavailable, access revoked, the phone busy — the app carries on and nothing is retried. Nothing reconciles the two afterwards. So a record can be left behind in Apple Health or Health Connect after you deleted the workout in Hadid, and there is one case where a replace never happens at all: if you edit a body weight on a day whose entry originally came FROM the health app, Hadid keeps your edit but does not write it back, because sending an imported reading back out would duplicate it endlessly. The health app keeps the original number for that day. Anything left behind can be removed in Apple Health or in the Health Connect app.

What Hadid reads from there

Body weight, and nothing else. So a weight from a smart scale or another app shows up in Hadid without your typing it again. Hadid does not ask for and cannot read your steps, your heart rate, your sleep, your calories, or anything else in the health app — it requests three permissions in total, and neither Apple Health nor Health Connect will give an app more than it asked for. Those three are the same on both platforms: permission to write workouts, permission to write body weight, and permission to read body weight. It deliberately does not ask for permission to read workouts, because it never reads one.

A weight read in this way never overwrites one you entered yourself: if you already logged a weight for that day, the reading is left alone and your own entry stands.

Disconnecting

Settings → Apple Health (or Health Connect) → Disconnect stops all of the above from your next workout onwards. It does not delete what has already been written. Workouts and weights Hadid put into the health app stay there, and if you want them gone you remove them in that app. The app says this on the screen next to the Disconnect button rather than leaving you to find out.

You can also revoke Hadid's access from the health app's own side at any time, without opening Hadid at all — on iPhone in Settings → Health → Data Access & Devices, and on Android in the Health Connect app. Doing it that way stops the writes just the same; the next time you open Hadid's health screen it notices and stops saying it is connected.

What we do not do

• No third-party analytics, and no analytics at all unless you turn them on. The app contains no analytics SDK and no crash-reporting SDK, and nothing is shared with any analytics company. Usage analytics are off until you switch them on, and are described in "Usage analytics, if you turn them on" above.
• No advertising, and no advertising identifiers.
• We never sell your data, and we share it with nobody beyond the four companies named in this policy. Those four are Supabase, which stores it for us; Anthropic, which generates the Coach's replies; RevenueCat, which tells us whether you have paid; and Hostinger, which delivers our email: a copy of feedback you send and of Coach replies you report, both to our own inbox, and the sign-in codes you ask for when you sign in with email. Each is named above with exactly what it receives, each does it on our instructions, and none of them may use your data for their own purposes. Nobody else receives anything — no data broker, no advertiser, no analytics company.
• No notifications from our servers. Every notification Hadid shows is scheduled by the app on your phone; none is sent from our servers, and none appears unless you have allowed notifications. Two are on unless you switch them off: the alert when a rest timer runs out, and, for Pro subscribers, a reminder on the last day of a week when your streak is at risk and a streak shield could still protect it. The rest are off until you turn them on: workout reminders, a weekly summary, a nudge after days without training, and reminders to take a progress photo or log your weight. All of them are in Settings → Notifications.

Getting your data out

Settings → Data → Export writes your entire training history to a CSV file you can keep or take elsewhere. You do not need an account and you do not need to ask us.

To be exact about what "training history" means there: the file contains your workouts and every set in them, your routines, your programs, your body weight entries, your body measurements, and any custom exercises and per-exercise preferences you have made. Some things are not in it — your progress photographs, your goals, your streak shields, how a workout felt, your Coach conversations and what Coach remembers, and nothing else kept only for the Coach, such as its age group, is in it either. The photographs are already image files you can keep yourself. A Coach conversation can be deleted (Settings → Coach → Clear conversation) but not exported, and Coach's memory can be read in full in Settings → Coach → What Coach knows. If you want a copy of any of these, email support@hadid.fitness.

Deleting your account

Settings → Account → Delete account removes your account and the data listed above from our servers, including your uploaded photographs, your goals and streak shields, what Coach remembers, Coach's age group, safety records, any reports you made and any Coach replies you marked helpful or not helpful, and your invite code and any record that you were invited, and feedback you sent while signed in. It happens immediately from inside the app and is not reversible. If you signed in with Apple, deleting from an iPhone also asks Apple to revoke Hadid's access, so it disappears from your Apple ID settings. If you delete from Android, the account is deleted but Apple's list entry stays, and you can remove it in your Apple ID settings. You may also email support@hadid.fitness if you would rather we did it.

Children

Hadid is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Creating an account asks for your date of birth, which stays on your device, and is not offered if it shows you are under 13. Coach checks age before its first use — from an age range Apple or Google shares with the app, or from a date of birth you enter — and does not run below 13. When that check finds someone is under 13, Coach stops there and nothing about their age is sent to our servers.

For users aged 13 to 17, Coach applies the limits described above in "The AI coach" — no dieting or weight-loss discussion, no supplement recommendations, no photo analysis, and closer safety screening on every message — the same way everywhere the app is available. Hadid does not currently ask a parent or guardian to approve a teenager's use of Coach. If you are a parent or guardian with questions about a teenager's use of Coach, contact us at support@hadid.fitness.

Coach memory, described in "What Coach remembers" above, is available to Pro subscribers aged 13 to 17 too. For someone under 18, Coach is instructed not to save facts about body weight, calories, diet or body image. Behind that instruction sits a check for common words about those topics: a fact containing one is not saved by Coach, and is not sent to Anthropic even if it was typed in by hand. That check is a backstop, not a guarantee that nothing of the kind is ever saved.

Because progress photos are photographs of a body, the app also asks for your date of birth during setup. Answering is optional, and you can change or remove it at any time in Edit profile — the pencil on your Profile, or Settings → Edit profile.

Your date of birth is used for three things: deciding whether progress photos are backed up to your account; (together with, or instead of, a platform age signal) choosing Coach's age group above; and, on your device, which goals the app offers — under 18 it does not offer a fat-loss focus or body-weight and measurement goals. From 16 you can back up progress photos; below that, or if you have not given a date, the app still lets you take and keep progress photos — they simply stay on the device and are never uploaded to us. Nothing else in the app depends on it.

Your date of birth itself is stored on your device as part of your preferences and is not sent to us. On a recent iPhone or Android device the app may also ask the operating system whether it can confirm an age range, and prefer that answer to what was typed; that check happens on your device, and the range itself is not sent to us either. What reaches our servers for Coach is only this: the age group (under 18, or 18 and over); for someone under 18, the month in which they turn 18; and whether the age came from Apple or Google or from a date that was typed. Never the date of birth.

This is a good-faith check rather than verification: we have no way to confirm what anyone types, and we do not ask for identity documents to find out.

Changes

If this policy changes materially, the effective date above changes with it and the app will point at the updated page.