Privacy Policy
We collect what we need to build and adapt your training plan, run your subscription and, if you're coached, coach you. We don't sell your data or use it for advertising.
1. Who's responsible
Reece Procter, trading as RP Hybrid Performance, is the data controller. Contact: reece@rphybridperformance.com.
2. What we collect in the app, and why
| What | Examples | Why | Lawful basis (UK GDPR) |
|---|---|---|---|
| Account | Email, first name, password (stored encrypted by our login provider) | Your account and sign-in | Contract |
| Questionnaire | Race, race name and date, experience, times and target time, lift numbers, weak spots, kit and the equipment at your gym, training days, age, and any training paces or heart rates you enter | Building your plan | Contract |
| Health information | Injuries and limitations, niggles, sleep, energy, soreness, stress | Planning safely around them, deciding on deloads | Explicit consent |
| Training records | Sessions logged, sets, times, effort, how a session felt, the time of day you trained, notes, personal bests, race results and race debriefs | Progress, writing next week, and your monthly HyTribe Rewind | Contract |
| Coaching | Chat messages; video call bookings (made through our booking page); waitlist requests | Coaching you, and offering you a spot | Contract |
| Feedback | Messages you send with "Send feedback" | Improving the app | Legitimate interests |
| Subscription | Plan, trial and renewal status (from Apple or Google, via RevenueCat). We never see your card details | Unlocking what you've paid for | Contract |
| Partner gym | The gym code you joined with, if any | Giving you that gym’s free trial and kit list, and paying the gym its share | Contract |
| Device | Push notification token, phone type | Sending you notifications | Legitimate interests (you can turn them off) |
Health information is special category data. We only use it with your explicit consent, given when you enter it. You can withdraw consent by deleting it or your account, though we can't plan safely around injuries we don't know about.
AI. Your questionnaire answers, check-ins, logs, feedback on sessions and personal bests are sent to our AI provider to write and adapt your plan. Your first name is included so the plan can speak to you; your email address is not sent. The AI also writes the note in your monthly HyTribe Rewind from your training numbers. If you're coached, Reece also reads them to review your plan and your Rewind note.
Partner gyms. If you join with a partner gym’s code, we tell that gym how many members joined with its code and how many go on to subscribe. We never give the gym your name, your contact details or anything about your training.
We don't make decisions about you with legal or similarly significant effects by automated means.
3. The race calculators and mailing list
The race calculators on hytribe.app and in the app work without an account. What you type into them stays on your device. If you choose to have your race plan emailed to you, we add your email address, race and plan summary to our mailing list (run by Mailchimp) so we can send it and occasional training emails. Every email has an unsubscribe link. Lawful basis: consent.
4. Who we share it with
Only the providers that run parts of the app and site for us, each bound by a data processing agreement and only allowed to use your data to provide their service:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, login and server functions | EU (Ireland) |
| Anthropic | AI that writes your plan. Its commercial terms don't allow it to train its models on our data | US |
| RevenueCat | Keeps track of your subscription status | US |
| Apple and Google | App stores and payments; Google Firebase delivers Android notifications | US / worldwide |
| Expo | Sends push notifications and builds the app | US |
| Google Calendar | Intro and coaching call bookings, if you book one | US / worldwide |
| Mailchimp | Mailing list, if you join it | US |
| Resend | Sends account emails, such as confirming your email address and resetting your password | US company; emails sent from the EU (Ireland) |
| Cloudflare | Hosts hytribe.app, including the password reset page | Worldwide |
We may also share data if the law requires it, or with a buyer if the business is ever sold (we'd tell you first).
5. Transfers outside the UK
Some providers are based in the US. Where data leaves the UK we rely on the UK's adequacy regulations (including the UK–US data bridge where the provider is certified) or the ICO's International Data Transfer Agreement or Addendum.
6. How long we keep it
- While your account is open, we keep what you need for your plan and progress.
- When you delete your account, we delete your personal data within 30 days, apart from short-lived backups (deleted on their normal cycle, within 7 days) and anything we must keep by law.
- Records of payments made to us directly are kept for 6 years for tax purposes.
7. Keeping it safe
Data is encrypted in transit and stored with access controls, so each athlete can only see their own data and only the coach can see athletes' data. AI provider keys and other secrets are held on the server, never in the app.
8. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data
- correct anything that's wrong
- delete your data
- restrict or object to how we use it
- send your data to you or another service in a usable format
- stop using your health information (withdrawing consent)
Email reece@rphybridperformance.com. We'll reply within one month and won't charge you.
9. Deleting your account
Use Profile → Delete account in the app, or request deletion here without signing in. This deletes your account, plan, logs, check-ins and messages. It doesn't cancel an App Store or Google Play subscription: cancel that in your store settings.
10. Notifications
We send notifications about your plan, check-ins, coaching spots and coach messages. Turn them off any time in your phone's settings.
11. Children
The app is for adults aged 18 and over. We don't knowingly collect data from anyone younger; if we find we have, we delete it.
12. Changes to this policy
We'll post updates here and tell you in the app about significant changes before they apply.
13. Contact and complaints
Questions or concerns: reece@rphybridperformance.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we'd appreciate the chance to put things right first.