Privacy Policy
Last Updated: December 19, 2025
Overview
hex-forge is a workout tracking app designed to help you log and optimize your hypertrophy training. Your privacy is important to us. This policy explains what data we collect, how we use it, and your choices.
Data We Collect
Workout Data
- Exercise selections, weights, reps, and sets
- Rest periods and workout duration
- Mesocycle and training program configurations
- Personal feedback on workouts (soreness, pump, difficulty)
Storage: Workout data is stored on your device using Apple's SwiftData framework and automatically synced to your personal iCloud account via Apple's CloudKit service. This enables your data to sync across all your devices signed into the same Apple ID. We do not have access to this data—it is stored in your private iCloud container.
HealthKit Data (Optional)
If you grant permission, hex-forge may read:
- Bodyweight: To auto-fill weight for bodyweight exercises
- Sleep data: To provide recovery recommendations
Storage: HealthKit data is accessed read-only and is not stored separately by hex-forge. Apple manages HealthKit data according to their privacy policies.
Game Center Data (Optional)
If you enable Game Center integration:
- Weekly/monthly training volume scores
- Workout streaks
- Achievement progress
Storage: Game Center data is managed by Apple. We submit scores to Apple's servers for leaderboard functionality.
Third-Party Services
YouTube (Exercise Videos)
hex-forge displays exercise demonstration videos from YouTube to help you learn proper form. When you view a video:
- Your device connects directly to YouTube's servers
- YouTube may collect data including your IP address, device information, and viewing activity
- hex-forge does not receive any data from YouTube about your viewing activity
Privacy-Enhanced Mode: hex-forge uses YouTube's privacy-enhanced embed domain (youtube-nocookie.com), which prevents YouTube from storing cookies on your device until you actively play a video.
YouTube Data API
hex-forge uses the YouTube Data API to search for exercise demonstration videos:
- Search queries (exercise names like "Bench Press") are sent to YouTube's servers
- No personal information is included in these searches
- Search results are cached locally on your device to minimize API usage
For more information about how YouTube handles data, see Google's Privacy Policy.
Firebase (Crashlytics & Analytics)
hex-forge uses Google Firebase services to improve app stability and understand how features are used:
Firebase Crashlytics collects crash reports when the app encounters errors:
- Crash logs and stack traces
- Device model and operating system version
- App state at time of crash (memory usage, app version)
- A random installation identifier (not linked to your identity)
Firebase Analytics collects aggregated usage data:
- App opens and session duration
- Feature usage (which screens are viewed)
- Device type and OS version
- Approximate location (country/region from IP address)
What Firebase does NOT collect:
- Your workout data, exercises, or personal records
- Your name, email, or any personal identifiers
- Advertising identifiers (IDFA)
This data helps us identify and fix crashes, and understand which features are most useful. Data is processed by Google under their Firebase Privacy Policy.
Data We Do NOT Collect
- Personal identification information (name, email, phone)
- Precise location data
- Advertising identifiers (IDFA)
- Cross-app tracking data
Data Sharing
We do not sell or share your personal data with third parties. External data transmission only occurs for:
- iCloud: Workout data syncs to your private iCloud container for cross-device access
- YouTube: Exercise name searches are sent to YouTube's servers; video playback connects your device to YouTube
- Firebase: Crash reports and aggregated usage analytics are sent to Google's Firebase servers
- Game Center: If enabled, leaderboard scores are sent to Apple's Game Center service
- HealthKit: Read-only access to data you explicitly authorize
Data Storage and Security
- Workout data is stored on your device and synced to your private iCloud account
- Data is protected by iOS device encryption and iCloud encryption
- We do not have access to your iCloud data—only you can access it via your Apple ID
- We do not maintain our own servers or databases containing user data
Your Choices
HealthKit
You can enable or disable HealthKit access at any time in:
- hex-forge Settings > HealthKit toggle
- iOS Settings > Privacy & Security > Health > hex-forge
Game Center
You can enable or disable Game Center at any time in:
- hex-forge Settings > Game Center toggle
iCloud Sync
iCloud sync is automatic when signed into iCloud. To disable:
- iOS Settings > [Your Name] > iCloud > Apps Using iCloud > hex-forge toggle
Data Deletion
To delete all hex-forge data:
- Uninstall the app from your device (removes local data)
- To delete iCloud data: iOS Settings > [Your Name] > iCloud > Manage Storage > hex-forge > Delete Data
- If you used Game Center, your leaderboard scores remain on Apple's servers (managed by Apple's policies)
Children's Privacy
hex-forge is not directed at children under 13. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy occasionally. Significant changes will be noted in app updates.
Apple App Store Requirements
This app complies with Apple's App Store Guidelines regarding:
- HealthKit data usage and privacy
- Game Center integration
- YouTube API usage
- Data collection and privacy practices
Changelog
- December 19, 2025: Added Firebase Crashlytics and Analytics disclosure. Updated Data Sharing section.
- December 14, 2025: Added iCloud sync disclosure, Third-Party Services section for YouTube integration. Updated Data Sharing and Data Storage sections.
- December 7, 2025: Initial privacy policy.
Contact
For privacy questions or concerns, contact us at: support@hexul.com