Privacy Policy

Who We Are

Hyro is a fitness app provided by WSFU ("we", "us", "our"). This policy applies to the Hyro app and related services.

Information We Collect

Depending on how you use Hyro, we may collect and process:

• Account information: such as your email address, authentication identifiers, name, and profile image when provided by an authentication service. For example, this may include basic account information provided when you continue with Google or sign in with Apple. You may be able to hide your email when using Apple Sign-In.
• Workout data you create: workout templates, training history, exercises, sets, intervals, and related metadata you enter in the app.
• Workout metrics: such as workout start/end time, duration, heart rate summaries, calories/energy estimates, distance (if applicable), and similar training metrics.
• Device and diagnostics: basic device information, app version, and crash/diagnostic data to help us maintain and improve the app.

Google Sign-In

If you choose to continue with Google, Google provides basic account information to Hyro through our authentication provider, Supabase. Depending on what is available from your Google account, this may include your Google account identifier, email address, name, and profile image. Hyro does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or Google fitness and activity data.

How we use Google account data: we use this information only to authenticate you, create or link your Hyro account, and associate your cloud-stored workouts, settings, and progress with that account so they can be saved and restored. We do not use Google account data for advertising, and we do not sell it.

Storage and sharing: your authentication identifier and account information may be stored by Hyro and processed by Supabase to provide authentication, account, and cloud-sync features. We share this information only with service providers acting on our behalf, when required by law, or when necessary to protect users, Hyro, or others.

Revoking access and deletion: you can revoke Hyro's access from your Google Account settings. Revoking access prevents future Google authentication but does not by itself delete information already associated with your Hyro account. To delete that information, delete your Hyro account from the app settings, if available.

Apple Health / HealthKit

If you enable Apple Health permissions, Hyro may read and/or write workout data through HealthKit to support workout recording and viewing. Health data is processed only with your explicit permission and only for the features you choose to use.

Garmin Connect Integration

If you choose to connect your Garmin account, Hyro will request your permission to access Garmin data and (optionally) send data to Garmin on your behalf. The exact data depends on what Garmin makes available and what you authorize, but can include:

• Data received from Garmin: activity/workout summaries and details (e.g., sport type, timestamps, duration, distance, calories, heart rate metrics, and other training-related fields). For outdoor activities, this may include location/GPS route data if provided by Garmin and authorized by you.
• Data sent to Garmin: workout templates and/or completed workout summaries so you can view or execute workouts on Garmin devices and/or in Garmin Connect (when supported).
• Authorization data: access tokens/refresh tokens or similar credentials required to keep the integration working. We use these only to communicate with Garmin services for the integration features you enabled.

How we use Garmin data: we use Garmin-provided data to sync workouts, display your training history inside Hyro, and improve your experience (e.g., showing accurate metrics for workouts recorded on Garmin). We do not sell Garmin data, and we do not use it for advertising.

How to disconnect: you can disconnect Garmin from within Hyro (if available) and/or revoke access from your Garmin account settings. Once disconnected, we stop requesting new data from Garmin, and we remove or invalidate stored authorization tokens. Previously imported workouts may remain in Hyro unless you delete them or delete your account.

Third-Party Services

Hyro may use third-party services to provide and improve the app (for example: authentication and cloud storage providers, analytics, subscription management, and integrations such as Strava and Garmin). These services may process data on our behalf to deliver the features you use. We do not provide them sensitive data unless needed for the requested feature.

Automated Abuse Prevention

Hyro uses Cloudflare Turnstile when you create an anonymous account to help distinguish legitimate requests from automated abuse. Turnstile may process device, browser, and interaction signals for this verification. See Cloudflare's Turnstile Privacy Addendum. The resulting verification token is sent to our authentication provider to validate the anonymous sign-in request.

Security

We take reasonable measures to protect your data, but no transmission or storage method can be guaranteed to be 100% secure. We recommend keeping your device and accounts protected (e.g., using a passcode and up-to-date software).

Data Retention

We retain your data as long as necessary to provide the app and features you use. You can delete your account (if available) to remove associated personal data. Some data may be retained when required to comply with legal obligations, resolve disputes, or enforce agreements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the app, integrations, or legal requirements. The updated policy will be posted on this page with a revised effective date.

Contact

If you have any questions or concerns about this Privacy Policy, please contact us.