PRIVACY POLICY

Excitable Robot Publishing LLC (“we,” “us,” or “our”) operates mobile applications, web applications, and the website at excitablerobotpublishing.com (collectively, the “Services”). This policy explains how we handle your information.

1. Information We Collect

You provide

• Account info — email address, display name, and profile photo. If you sign in with Google, we receive your name, email, and profile picture from your Google account.
• Fitness data — exercise logs, training programs, body measurements, and related data you enter.
• Messages — content of support requests and feedback.

Collected automatically

• Device type, OS, and app version.
• Usage patterns and feature interaction data.
• Crash logs and performance metrics.

Not collected

• Precise location data.
• Contacts, photos, or personal files.
• HealthKit or Health Connect data unless you explicitly enable it.

2. How We Use It

• Providing, maintaining, and improving the Services.
• Syncing data across your devices.
• Responding to support requests.
• Analyzing usage to improve experience.
• Detecting fraud and security issues.

3. Storage & Security

Data is stored on Google Cloud Platform and Firebase with encryption in transit (TLS) and at rest. Mobile apps also store data locally for offline access. No system is 100% secure — we cannot guarantee absolute security.

4. AI Coaching & Third-Party AI Services

HyperIron offers optional AI coaching features that allow you to connect your own AI chatbot (such as Claude or ChatGPT) to your HyperIron data via the MCP (Model Context Protocol) standard.

• What is shared — when you connect an AI chatbot, it may access your workout logs, training programs, exercise history, progress data, and settings to provide coaching suggestions.
• Your control — AI coaching is entirely opt-in. No data is sent to any AI provider unless you explicitly connect a chatbot. You can disconnect at any time.
• Third-party policies — data sent to AI providers (e.g., Anthropic, OpenAI) is subject to their respective privacy policies and data handling practices. We do not control how these providers process your data once it leaves our servers.
• No training use — we do not use your fitness data to train AI models. Any AI training policies are governed by the third-party AI provider you choose to connect.

5. Sharing

We do not sell your information. We share data only with:

• Service providers — cloud hosting, analytics, and crash reporting, bound by contract to protect your data.
• AI providers — only when you explicitly connect a third-party AI chatbot (see Section 4).
• Legal obligations — when required by law or to protect safety.

6. Third-Party Services

Our Services may use the following third-party services, each with their own privacy policies:

• Firebase (Google) — authentication, cloud database, analytics, and crash reporting.
• Google Sign-In — account authentication. Google receives confirmation that you signed in to our app.
• Google Cloud Platform — server infrastructure and data processing.
• RevenueCat — subscription and billing management for mobile apps.
• AI providers (e.g., Anthropic, OpenAI) — when you opt in to AI coaching features.

7. Your Rights

• Access & export — you can view your data in the app at any time. Full data export is planned for a future release.
• Deletion — delete your account and all associated data through the account deletion option in app settings, or by emailing us. Upon deletion, your data is permanently removed from our servers within 30 days.
• Corrections — update account info in app settings.
• Opt-out — disable analytics in app settings where available. Disconnect AI coaching at any time to stop sharing data with AI providers.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know — you may request the categories and specific pieces of personal information we have collected.
• Right to delete — you may request deletion of your personal information.
• Right to opt-out of sale — we do not sell personal information.
• Non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@excitablerobotpublishing.com.

9. Children

Our Services are not for children under 13. We do not knowingly collect their information and will delete it promptly if discovered.

10. Retention

We keep data while your account is active. Deleted accounts are purged within 30 days, except where legally required.

11. International Transfers

Data may be processed in the United States. By using our Services, you consent to this transfer.

12. Changes

We may update this policy. Material changes will be posted here with an updated effective date. Continued use constitutes acceptance.

13. Contact

Excitable Robot Publishing LLC
privacy@excitablerobotpublishing.com