Privacy Policy

Hercules – Gym Tracker

Last Updated: October 7, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

This Policy applies to users worldwide, including residents of California and the European Union/EEA. If you are located in one of these regions, additional rights and disclosures apply as described in the relevant sections below.

1. Interpretation and Definitions

Interpretation

Words whose initial letters are capitalized have meanings defined under the following conditions. The definitions below shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of voting securities.
Application refers to Hercules – Gym Tracker, the software program provided by the Company.
Company (also referred to as "We", "Us", or "Our") refers to Hercules – Gym Tracker.
Cookies are small files placed on Your Device by a website, containing details of Your browsing history among their many uses.
Country refers to: Indiana, United States.
Device means any device that can access the Service, such as a computer, mobile phone, or digital tablet.
Health Data means information related to Your physical fitness and wellness, including workout logs, exercise history, weight, height, step counts, injury information, and related metrics that You voluntarily provide or that are recorded by the Application on Your behalf.
Personal Data (or Personal Information) is any information that relates to an identified or identifiable individual. We use these terms interchangeably unless a specific law requires otherwise.
Service refers to the Application, the Website, or both.
Service Provider means any natural or legal person who processes data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself.
Website refers to Hercules – Gym Tracker, accessible from https://hercules-gym.com/.
You means the individual accessing or using the Service, or the entity on whose behalf such individual is acting.

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information, including but not limited to:

Email address
First name and last name
Date of birth
Gender
Health and fitness data (workouts, exercise logs, weight, height, step counts, and similar metrics You voluntarily enter)
Fitness profile information (experience level, primary fitness goal, available equipment, preferred training days per week, preferred training time, and how You heard about the Application)
Payment and transaction information (processed through Apple App Store or Google Play; We do not store full payment card details)

Health and Fitness Data

Because Hercules – Gym Tracker is a fitness application, You may voluntarily submit Health Data including workout logs, personal records, body weight, height, exercise history, step counts during outdoor workouts, and outdoor activity route data. The AI feature (see below) may also record injury information that You describe during a conversation, which is stored in Your account and included in future AI prompts to personalize guidance. This data is treated as sensitive personal information and is used solely to provide and improve the Application. We do not sell, rent, or share Health Data with third-party advertisers. Health Data is processed only with Your explicit consent, which may be withdrawn at any time by deleting Your account.

Usage Data

Usage Data is collected automatically when using the Service and may include Your Device IP address, browser type and version, pages visited, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data. When You access the Service through a mobile device, We may also collect mobile device type, unique device ID, mobile operating system, mobile browser type, device platform (iOS or Android), and application version number.

In-App Analytics

We collect first-party usage analytics within the Application to understand how the Service is used. These analytics are stored in Our own database (hosted by Supabase). They are not sold and are not shared with advertising networks. Analytics events include:

App opens and sessions
Which screens and features You view
Onboarding steps completed
Notifications delivered to You and notifications You tap
Views of the subscription (paywall) screen, and which part of the Application led You there
Subscription purchase attempts and their outcomes
Share and save actions on recap cards

Each event records the time, Your device platform (iOS or Android), the application version, and a random session identifier. Once You are signed in, events are linked to Your Account. Before You sign up (during onboarding), a limited set of onboarding events is linked to a random installation identifier generated by the Application. Once You sign in, events carry both Your Account identifier and the installation identifier; the installation identifier persists across sign-outs and is not deleted when Your account is deleted.

Analytics events do not include Your name, email address, workout contents, or health measurements.

We use in-app analytics to understand which features are used, improve onboarding, measure which notifications help users keep training, and understand which parts of the Application lead to subscriptions.

Location Information

With Your prior permission, We may collect precise location information (GPS coordinates) to provide certain features of the Application, such as outdoor activity tracking (e.g., running, walking, or cycling route recording). During outdoor workouts, the Application also counts Your steps using the device's motion sensors. The Application may collect location data in the background (when the app is not in the foreground or when Your device screen is locked) to ensure continuous route tracking during outdoor workout sessions that You have actively started. Background location data is collected only while an outdoor tracking session is actively in progress and stops immediately when You end the session. You can enable or disable location access at any time through Your Device settings.

Notification Data

The Application sends notifications only if You grant notification permission in Your Device's operating system. The Application uses two kinds of notifications:

On-device (local) notifications: scheduled and delivered by Your Device's built-in notification system. These include training-day reminders, weekly-goal check-ins, weekly-goal reached alerts, weekly, monthly, and yearly recaps, milestone alerts, comeback reminders after a period of inactivity, and custom reminders You create.
Push notifications sent from Our servers: currently, changes in Your rank on Your friends leaderboard (which name the friend who passed You), weekly final standings among Your friends, and alerts that a friend has added You (which include that friend's first name and last initial).

To send push notifications, We collect and store the following on Our servers (hosted by Supabase):

Push token: when You grant notification permission, the Application registers Your Device's Expo push token and stores it linked to Your Account and Your device platform (iOS or Android). Push tokens are deleted when You sign out of the Application, and when the push service reports that a token is no longer valid.
Notification preferences: Your master notification switch, Your settings for weekly-goal check-ins, comeback reminders and the three social notification types, and Your Device's time zone (for example, "America/New_York"). We use these so that server-sent notifications respect Your choices and quiet hours (no notifications are sent between 9 PM and 9 AM in Your local time), and so that weekly standings arrive at 10 AM in Your local time. Settings for other notification types (such as training-day reminders and custom reminders, including Your chosen reminder time) are stored only on Your Device.
Milestone records: which fitness milestones You have reached (for example, "100 workouts logged" or "1,000,000 lbs lifted") and when You reached them. We use these records to avoid sending You the same milestone notification more than once across devices or after reinstalling the Application.

Push notifications are sent through the Expo Push Notification Service (operated by Expo), which forwards them to Apple Push Notification service (for iOS devices) or Firebase Cloud Messaging (for Android devices) for delivery. These providers receive Your push token and the text of the notification being delivered (see Section 3).

You can turn each notification type on or off individually in the Application under Settings > Notifications. You can also disable all notifications from the Application at any time through Your Device settings.

Friends and Social Features

You may connect with other users of the Application through a unique friend code that You can share. When another user enters Your code, both of You become friends immediately; there is no approval step.

Friends can see:

Your first name and last initial (for example, "Owen R."), or "Hercules Athlete" if You have not set a name.
Your weekly, monthly, yearly and all-time workout count and total volume lifted.
Your current workout streak.
Your rank among Your mutual friends.

Friends cannot see Your specific workouts, exercises, personal records, body stats, email address, or full last name.

Server-sent notifications may reveal limited information to friends, such as that You recently completed a workout (when a rank change notification is sent) or Your first name and last initial (when You add someone as a friend).

There is currently no way to remove a friend or block another user within the Application. Your leaderboard statistics are uploaded to Our servers whenever You are signed in; there is no setting to disable this.

AI Chat Data

If You use the Hercules AI feature (available to Premium subscribers), We collect and store the text messages You send to the AI assistant and the AI-generated responses. This data is stored in Your account to provide chat history and continuity across sessions; only the most recent 50 messages per conversation are retained. We also track AI feature usage (message counts and token usage) to manage service limits and credit balances.

When You use the AI feature, the following information from Your account is included in the prompt sent to the AI provider to personalize responses: Your first name, gender, age (calculated from Your date of birth), height, weight, experience level, fitness goals, available equipment, training schedule, unit preferences, cardio goals, injury information recorded in earlier conversations, and Your most recent workout sessions with full exercise and set details. GPS route data is not included.

AI chat data is associated with Your Account and is subject to the same data protection and retention policies as Your other Personal Data.

AI Feedback Data

When You submit feedback on an AI-generated response (for example, by rating a response with a thumbs up or thumbs down), We collect and store the following:

The content of the AI message being rated
Your feedback type (positive or negative)
An optional issue category (e.g., inaccurate, unhelpful, off-topic)
Any optional freeform detail You provide
Session identifier, app version, and device platform

This data is stored in Our database and a notification is sent to Our support team via Resend for quality improvement purposes. The content of the AI message included in Your feedback is retained for quality-improvement purposes even if You later delete the associated chat session. AI feedback data is associated with Your Account and is subject to the same retention policies as Your other Personal Data.

In-App Feedback Data

The Application provides a general feedback feature that allows You to submit freeform comments or suggestions. When You submit feedback, We collect and store:

The text of Your feedback
App version and device platform (iOS or Android)
Your Account identifier (if You are signed in)

This data is stored in Our database and a notification is sent to Our support team via Resend. For AI feedback, the notification may include the full conversation thread for context. Feedback data is used solely to improve the Service and is subject to the same data protection policies as Your other Personal Data.

Website Data Collection

Our Website (hercules-gym.com) collects the following information from visitors, including visitors who do not have an Account:

iOS Waitlist: If You submit Your email address to be notified when the iOS version of the Application becomes available, Your email is stored in a mailing list managed by Resend. This list is used solely to notify You of the iOS launch and is not shared with third parties. You may request removal by contacting Us at [email protected].
Download Link: If You request that a download link be emailed to You, Your email address is sent to Resend to deliver a single email containing the link. Your address is not added to any mailing list.
Website Analytics: Our Website uses Google Analytics and Vercel Analytics to understand how the Website is used. See "Tracking Technologies and Cookies" below for details.

Local Device Storage

The Application stores certain data locally on Your Device (such as user preferences, settings, workout session state, and cached data) using standard mobile storage mechanisms. This local data remains on Your Device and is used to ensure the Application functions correctly, including offline functionality and crash-safe workout session recovery.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Where required by law, non-essential cookies are only placed with Your prior consent, which You may withdraw at any time through Your browser or device settings.

Necessary/Essential Cookies (Session): Required to authenticate users and provide the Service. Cannot be disabled without affecting core functionality.
Analytics Cookies (Persistent): Our Website uses Google Analytics, which sets cookies (such as _ga and _ga_*) to distinguish visitors and measure how the Website is used. These cookies expire after up to 24 months. Vercel Analytics, also used on Our Website, does not set cookies. The Application does not use analytics cookies.
Functionality Cookies (Persistent): Remember preferences such as login details or language to personalize Your experience.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including monitoring usage.
To manage Your Account and registration as a user.
For the performance of a contract: to process purchases made through Apple App Store or Google Play In-App Payments, managed via RevenueCat.
To contact You via email (sent through Resend), on-device and push notifications, or other electronic communications regarding updates, security notices, and informational communications related to the Service.
To provide social features: maintaining Your friends list, calculating leaderboard rankings, and sending friend-related push notifications.
To provide You with news, special offers, and information about similar goods, services, and events, unless You have opted out.
To manage Your requests to Us.
For business transfers: to evaluate or conduct a merger, acquisition, restructuring, or similar transaction.
For analytics and service improvement: data analysis, identifying usage trends, and evaluating promotional campaign effectiveness.
To power the AI feature: Your messages to the AI assistant, along with relevant workout context from Your account, are processed by third-party large language model (LLM) providers to generate fitness-related responses (see Section 3 for details).

We may share Your Personal Data in the following situations:

With Service Providers: including Supabase (database and authentication infrastructure), Resend (email delivery), RevenueCat (subscription and payment management), Expo (push notification delivery, via Apple Push Notification service and Firebase Cloud Messaging), OpenRouter and Google (AI language model processing), Google Analytics and Vercel (Website analytics), Apple App Store, and Google Play, to operate and improve the Service.
With other users: Your first name, last initial, workout statistics and rank are visible to users You have connected with as friends through the Application's friend code feature (see "Friends and Social Features" above).
For business transfers: in connection with a merger, sale of assets, financing, or acquisition.
With Affiliates: who are required to honor this Privacy Policy.
With Your consent: for any other purpose with Your explicit authorization.

3. Third-Party Services

Database and Authentication Infrastructure – Supabase

We use Supabase as Our primary database and authentication infrastructure provider. Your Account information, Health Data, workout data, AI chat history, and other Personal Data are stored in Supabase's hosted PostgreSQL databases with row-level security policies that isolate each user's data. Supabase processes data on Our behalf as a data processor in accordance with their Privacy Policy and applicable data processing agreements. All data transmitted to and from Supabase is encrypted in transit using TLS/HTTPS.

Email Communications – Resend

We use Resend (resend.com) to deliver transactional and informational emails, as well as internal support notifications. Your email address and related communication data are processed by Resend as a data processor on Our behalf, in accordance with their Privacy Policy. Internal notifications (such as feedback submissions and AI feedback alerts) are sent to Our support team only and are not used for marketing. You may opt out of marketing emails at any time by clicking the unsubscribe link in any email or by contacting Us at [email protected].

In-App Purchases – Apple App Store and Google Play

Hercules – Gym Tracker offers paid subscriptions and in-app purchases through Apple App Store In-App Payments and Google Play In-App Payments. Payments are processed directly by Apple or Google. We do not receive or store Your full payment card information. We receive only limited transaction confirmation data (such as subscription status and transaction ID) necessary to fulfill Your purchase. Your use of these payment services is subject to Apple's and Google's respective privacy policies and terms of service.

Subscription Management – RevenueCat

We use RevenueCat (revenuecat.com) to manage in-app subscriptions, entitlements, and purchase history across platforms. RevenueCat may collect and process certain data including Your device identifier, purchase history, subscription status, and App User ID. RevenueCat acts as a data processor on Our behalf in accordance with their Privacy Policy. RevenueCat does not have access to Your full payment card information.

You may sign in to the Application using Your Google account or Your Apple ID. When You do so, the authentication provider (Google or Apple) shares Your name and email address with Our authentication infrastructure (Supabase) to create or access Your Account. Apple may provide a private-relay email address instead of Your actual address. We do not receive Your password from either provider. Your use of these sign-in methods is also subject to Google's and Apple's respective privacy policies.

Website Analytics – Google Analytics and Vercel Analytics

Our Website uses Google Analytics (operated by Google LLC) and Vercel Analytics (operated by Vercel Inc.) to collect aggregated information about how visitors use the Website, such as pages visited, time on page, referral source, browser type, and device information. Google Analytics uses cookies to identify returning visitors (see "Tracking Technologies and Cookies" above); Vercel Analytics does not use cookies. Neither service is used within the Application. We use this data to improve the Website. Data collected by Google Analytics is subject to Google's Privacy Policy.

Outdoor Maps – Google Maps (Android)

On Android devices, the Application uses the Google Maps SDK to display maps during outdoor workout sessions. Google receives the map area being viewed. On iOS devices, the Application uses Apple Maps instead.

Exercise Media – WorkoutX

The Application downloads exercise demonstration images from the WorkoutX API (api.workoutxapp.com) to display alongside exercises. Only exercise identifiers are sent; no user data is transmitted to WorkoutX.

Over-the-Air Updates – Expo Updates

The Application checks for over-the-air updates through Expo's update service (u.expo.dev) on each launch. Expo receives the Application's runtime version, platform and Your Device's IP address during this check.

Push Notifications – Expo, Apple Push Notification Service, and Firebase Cloud Messaging

We use the Expo Push Notification Service (expo.dev), operated by Expo, to send push notifications from Our servers to Your Device. Expo receives Your Device's push token and the text of each notification, and forwards the notification to Apple Push Notification service (for iOS devices) or Google's Firebase Cloud Messaging (for Android devices), which deliver it to Your Device. These providers process this data solely to deliver notifications, in accordance with their respective privacy policies. On-device (local) notifications are scheduled on Your Device and are not sent through these services.

AI Feature – OpenRouter and Google Gemini

The Hercules AI feature uses OpenRouter (openrouter.ai) as an API routing service to access large language models, currently Google Gemini, to generate fitness-related responses to Your queries. When You use the AI feature, the text of Your messages, along with relevant contextual information from Your account (such as workout history summaries and fitness goals), is transmitted to OpenRouter and subsequently to the underlying model provider (Google) for processing. These third-party providers process this data solely to generate responses to Your queries and are contractually prohibited from using Your data for their own training purposes or other unrelated purposes. We recommend reviewing the privacy policies of OpenRouter and Google for further information on how they handle data.

4. Data Retention

We retain Your Personal Data only as long as necessary for the purposes described in this Privacy Policy:

Account Information: retained for the duration of Your account relationship and deleted immediately when You delete Your Account.
Health and Fitness Data: retained while Your account is active; deleted immediately when You delete Your Account.
AI Chat Data: retained while Your account is active. You may delete individual chat sessions at any time within the Application. All AI chat data is deleted immediately when You delete Your Account.
AI Feedback and In-App Feedback Data: retained for up to 24 months from the date of submission, or deleted immediately when You delete Your Account (except that the text of AI messages included in feedback is retained as described below).
Customer Support Data: up to 24 months from ticket closure.
Usage and Analytics Data: up to 24 months from collection. This includes in-app analytics events.
Push Tokens, Notification Preferences, and Milestone Records: retained while Your account exists and deleted when Your account is deleted. Push tokens are also deleted when You sign out or when the push service reports them as invalid.
Friends and Leaderboard Data: retained while Your account exists and deleted when Your account is deleted. Removing a friendship deletes the connection for both users.
AI Feedback Message Content: the text of an AI response included in Your feedback is retained for up to 24 months even if You delete the associated chat session, so that We can use it for quality improvement.
Payment and Transaction Records: as required by applicable tax and financial laws. RevenueCat retains its own records of Your subscription and purchase history in accordance with its own privacy policy; this data is not deleted from RevenueCat when You delete Your Account.
Password-Reset Records: email addresses and hashed reset codes are retained for a limited period after use.
Pre-Sign-Up Analytics Events: onboarding events recorded before You created an Account are linked only to a random installation identifier and are retained for up to 24 months regardless of account deletion.
Location Data: GPS route data from outdoor activities is stored as part of Your workout session history and is subject to the same retention periods as Health and Fitness Data. Location data is not retained independently of workout sessions.

We may retain data beyond these periods where required by legal obligation, to establish or defend legal claims, or due to technical backup schedules. Upon expiry, data is securely deleted or anonymized.

5. Transfer of Your Personal Data

Your Personal Data may be transferred to and maintained on computers located outside Your jurisdiction where data protection laws may differ. Our Service Providers, including Supabase, OpenRouter, Google (including Google Analytics and Google Maps), RevenueCat, Resend, Expo, Vercel, and Apple, may process data in the United States and other countries. We ensure international transfers are subject to appropriate safeguards, including Standard Contractual Clauses where required for transfers from the European Economic Area, consistent with applicable law.

6. Deleting Your Personal Data

You have the right to delete or request deletion of Your Personal Data. You may do so by navigating to Dashboard > Profile > Account > Delete Account within the Application, or by contacting Us at [email protected]. Deletion through the Application is immediate and irreversible. You may also delete individual AI chat sessions and specific workout records directly within the Application without deleting Your Account.

When You delete Your Account, the following data is permanently removed: Your profile and account credentials, all workout sessions and plans (including GPS routes), custom exercises, AI chat sessions and messages, AI feedback and action requests, AI credit and usage records, in-app feedback, push tokens and notification preferences, milestone records, friend connections and leaderboard data, and in-app analytics events linked to Your Account.

The following data is not deleted when You delete Your Account:

RevenueCat retains its own subscription and purchase records independently of Us (see their privacy policy).
Pre-sign-up analytics events linked only to a random installation identifier remain until the 24-month retention period expires.
The text of AI messages included in AI feedback You submitted is retained for quality improvement (see AI Feedback Data above).
Certain local data (such as notification settings stored on Your Device) is not automatically erased; You may clear it by uninstalling the Application.

We may need to retain certain information where required by law or lawful obligation. If You have an active subscription, You must cancel it separately through the Apple App Store or Google Play Store before deleting Your Account.

7. Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data becomes subject to a different Privacy Policy.

Law Enforcement

We may disclose Your Personal Data if required by law or in response to valid requests by public authorities (e.g., a court or government agency).

Other Legal Requirements

We may disclose Your Personal Data to comply with a legal obligation, protect and defend the rights or property of the Company, prevent wrongdoing in connection with the Service, protect the personal safety of users or the public, or protect against legal liability.

8. Security of Your Personal Data

We use commercially reasonable technical and organizational measures to protect Your Personal Data, including:

Encryption of data in transit using TLS/HTTPS.
Row-level security policies in Our database to isolate each user's data.
Secure authentication with session management and token refresh.
Password hashing and secure credential storage managed by Our authentication provider.

However, no method of transmission over the Internet or electronic storage is 100% secure, and We cannot guarantee absolute security. We encourage You to use a strong, unique password and protect access to Your account.

If You are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) provides You with specific rights regarding Your Personal Data.

Legal Bases for Processing

Consent (Article 6(1)(a) GDPR): For Health Data, analytics cookies on the Website (such as those set by Google Analytics), location data collection, on-device and push notifications (based on the notification permission You grant in Your Device's operating system, which You may withdraw at any time in Your Device settings), AI feature data processing, and marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Contractual Necessity (Article 6(1)(b) GDPR): To provide the Service, manage Your Account, and fulfill in-app purchases.
Legal Obligation (Article 6(1)(c) GDPR): Where processing is required by applicable law.
Legitimate Interests (Article 6(1)(f) GDPR): For in-app usage analytics, Website analytics (Vercel Analytics), fraud prevention, social features (friends and leaderboards), and service improvement, where not overridden by Your rights.
Explicit Consent for Special Category Data (Article 9(2)(a) GDPR): Health and fitness data is special category data and is processed only with Your explicit consent.

Right of Access: Request a copy of the Personal Data We hold about You.
Right to Rectification: Request correction of inaccurate or incomplete Personal Data.
Right to Erasure ("Right to be Forgotten"): Request deletion of Your Personal Data where no legitimate grounds for continued processing exist.
Right to Restriction of Processing: Request that We limit how We use Your data.
Right to Data Portability: Receive Your Personal Data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.
Right to Lodge a Complaint: Lodge a complaint with Your local supervisory or data protection authority.

To exercise these rights, contact Us at [email protected] with the subject line "GDPR Request". We will respond within 30 days as required by GDPR.

International Data Transfers

Where We transfer Your Personal Data outside the EEA, We ensure such transfers use appropriate safeguards including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

10. California Online Privacy Protection Act (CalOPPA)

In accordance with CalOPPA:

Users may visit Our Service anonymously where applicable.
A link to this Privacy Policy is included on the homepage of Our Website and within the Application.
Users will be notified of privacy policy changes via the "Last Updated" date and by a notice displayed in the Application.
Users can update their personal information via account settings or by contacting Us.

Regarding Do Not Track (DNT) signals: Our Service does not currently respond to DNT browser signals or similar mechanisms. We will update this disclosure if Our practices change.

11. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If You are a California resident, the CCPA as amended by the CPRA provides You with specific rights regarding Your Personal Information.

Categories of Personal Information We Collect

In the past 12 months, We have collected the following categories of Personal Information from California residents:

Identifiers: Name, email address, IP address, device identifiers (including Your Device's push notification token, a random installation identifier generated by the Application, and a unique friend code), and account username.
Personal Information (Cal. Civ. Code §1798.80(e)): Name and email address.
Sensitive Personal Information – Health and Fitness Data: Workout logs, exercise history, weight, height, step counts, injury information, outdoor activity GPS routes, and similar data You voluntarily provide. Treated as Sensitive Personal Information under CPRA.
Commercial Information: In-app purchase history and subscription status, processed via RevenueCat, Apple, and Google.
Internet or Electronic Network Activity: Usage patterns, interactions with the Service (including in-app usage events, notification deliveries and taps, subscription screen views, and friends leaderboard interactions), notification preferences, AI feature usage data, AI response feedback, and in-app feedback submissions.
Geolocation Data: Precise location (GPS coordinates) collected with Your permission during outdoor activity tracking sessions, including in the background while a session is active.
Inferences: Derived from the above to reflect Your fitness preferences and activity within the app.

We collect and use the categories above for the business and commercial purposes described in this Policy. We do not sell Your Personal Information. We do not share Your Personal Information for cross-context behavioral advertising.

Your CCPA/CPRA Rights

Right to Know: Request disclosure of the categories and specific pieces of Personal Information We have collected, used, or disclosed.
Right to Delete: Request deletion of Personal Information We have collected, subject to exceptions.
Right to Correct: Request correction of inaccurate Personal Information We maintain.
Right to Opt-Out of Sale or Sharing: We do not sell or share Personal Information for behavioral advertising. Contact Us to confirm.
Right to Limit Use of Sensitive Personal Information: You may limit Our use of Sensitive Personal Information (including Health Data) to that necessary to provide the Service. We do not use Sensitive Personal Information beyond core Application features.
Right to Non-Discrimination: We will not discriminate against You for exercising any of Your CCPA/CPRA rights.

To submit a verifiable consumer request, email [email protected] with the subject line "California Privacy Request". We will acknowledge within 10 business days and respond within 45 days (extendable by 45 days with notice). You may submit up to two requests per 12-month period.

Authorized Agent

A California resident may designate an authorized agent to submit a CCPA/CPRA request on their behalf. The agent must provide written authorization signed by You, and We may require You to verify Your identity directly before fulfilling the request.

Financial Incentives

We do not offer financial incentives or price differences in exchange for the collection, retention, or sale of Personal Information.

12. Age Restriction and Children's Privacy

Hercules – Gym Tracker is intended for users 18 years of age or older. We do not knowingly collect personally identifiable information from anyone under the age of 18. By using the Service, You represent that You are at least 18 years of age. Certain features of the Application (such as the AI assistant) require You to confirm Your date of birth and verify that You are at least 18 before use.

If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us immediately at [email protected]. If We become aware We have collected data from anyone under 18, We will take steps to remove that information from Our servers.

13. Links to Other Websites

Our Service may contain links to other websites not operated by Us. If You click on a third-party link, You will be directed to that site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of any material changes by posting the updated Privacy Policy on this page, updating the "Last Updated" date, and displaying a notice in the Application the next time You open it after the update. Changes are effective when posted on this page.

15. Contact Us

If You have any questions about this Privacy Policy or wish to exercise any of Your rights, please contact Us:

By email: [email protected]
By mail: Hercules – Gym Tracker, Indiana, United States

For GDPR inquiries, include "GDPR Request" in the subject line. For California privacy rights requests, include "California Privacy Request" in the subject line.