Privacy Policy

Last updated: May 27, 2026

Overview

HUNDREDWEIGHT is a fitness tracking app built by an independent developer. Your privacy comes first: the app has no ads, no trackers, and no analytics. This policy explains what data the app can access, how it is used, and where it is stored.

Data Collection and Storage

The app stores your workout data, routines, settings, history, and body composition records locally on your device. HUNDREDWEIGHT operates no company servers, analytics services, or ad trackers.

iPhone / iPad: Your data syncs to your personal iCloud account via Apple's CloudKit service with encryption, stored in a private iCloud database that is inaccessible to HUNDREDWEIGHT or any third party.

Android: The app uses Google Firebase for cross-device sign-in and cloud sync. Your email address identifies your account, and workout data is stored in a HUNDREDWEIGHT-owned Firestore database. Firebase security rules restrict access to the account holder only. Google acts as data processor; HUNDREDWEIGHT controls the data. Information is encrypted in transit and at rest.

HealthKit (iPhone / iPad)

The app integrates with Apple HealthKit to read body weight, body fat percentage, heart rate data, daily activity metrics, and overnight recovery metrics. It writes completed workouts, active energy, and workout distance back to Apple Health. HealthKit data is processed on-device only — it is not shared with third parties, not sold, not used for advertising, and not transferred externally. Access requires your explicit permission and can be revoked at any time in device Settings.

Health Connect (Android)

HUNDREDWEIGHT integrates with Google Health Connect to read body weight, body fat percentage, heart rate data, and active calories. It writes completed workouts, active calories, and heart rate samples back to Health Connect. Data is processed on-device and synced to Cloud Firestore for cross-device functionality. Recovery and daily health stats are unavailable on Android due to Health Connect's approved use cases.

Bluetooth

The app uses Bluetooth to connect to external heart rate monitors during workouts. Heart rate data is processed locally and saved only to your workout history. On Android 12+, the "Nearby devices" permission is required, though Bluetooth scanning is not used to determine physical location.

Notifications

Local notifications alert you when timers complete and during workouts. These are generated on-device without external push notification services. Android users may grant a battery optimization exemption for reliable timer alerts.

Over-the-Air Updates

HUNDREDWEIGHT delivers app updates through Capgo, a third-party service. Update checks send minimal requests containing the app version, a randomly-generated device identifier, and platform information. Capgo does not receive workout data, health data, account email, or any personal information.

Data Retention

Data Deletion

You can delete your data at any time through any of these methods:

See Delete Account for full account deletion instructions.

Third-Party Services

The app uses Apple iCloud/CloudKit, Google Firebase Authentication, Google Cloud Firestore, Google Health Connect, Apple HealthKit, and Capgo. No data is shared with advertisers or data brokers.

Children's Privacy

HUNDREDWEIGHT does not knowingly collect information from children under 13.

Changes to This Policy

This privacy policy may be updated periodically. Revision dates are reflected at the top of this page.

Contact

Questions about this privacy policy should be directed to support@hundredweightapp.com.