Privacy Policy

Last Updated: May 27, 2026

This Privacy Policy describes how The Hypertrophy Lab AI ("we," "us," or "our") collects, uses, and protects your information when you use our mobile application and website (collectively, the "Service").

1. Information We Collect

Account & Identity

• Email address, first name, last name, and profile photo
• Password (stored as a secure hash — we never store your actual password)
• Subscription status and email preferences

Training Profile

• Experience level, biological sex, current and target bodyweight
• Injury or limitation notes
• Training days per week, muscle group priorities, and caloric status

Workout & Performance Data

• Pre-workout check-ins: soreness, sleep quality, energy, and nutrition ratings
• Every set logged: weight, reps, RIR, RPE, pain flags, and technical failure flags
• Post-workout debrief: fatigue, mood, session difficulty, duration, and notes
• Per-exercise pump and stimulus ratings
• Cardio sessions: type, duration, distance, heart rate, and effort rating

AI Coach Data

• Chat conversations with the AI Coach
• Inferred training context extracted from conversations: equipment, schedule, recovery profile, and goals

Payments & Subscriptions

• Subscription and customer IDs from Stripe and RevenueCat
• No raw payment card data is stored — all payment processing is handled directly by Stripe and RevenueCat

Diagnostics

• AI usage events (request type, token count, estimated cost)
• Bug reports submitted by users

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Generate and adapt your personalized training program
• Power the AI Coach to answer your training and nutrition questions
• Track your progress and provide load recommendations
• Process subscription payments
• Improve the accuracy and performance of the Service
• Respond to support requests

3. How We Share Your Information

We do not sell your personal information. We share data only with:

• Stripe — payment processing
• RevenueCat — subscription management
• AI model providers — to power the AI Coach and program generation (data is not used to train their models)
• Service providers — hosting and infrastructure providers who process data on our behalf under confidentiality agreements

We may disclose information if required by law or to protect the rights and safety of our users.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data will be deleted within 30 days, except where retention is required by law.

5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications

To exercise any of these rights, contact us at the email below.

6. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

7. Security

We use industry-standard security measures to protect your data, including encrypted storage, secure transmission (HTTPS), and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: