Privacy Policy

Last updated September 16, 2026

Elite Hypertrophy (“Hypertrophy” or the “App”) is operated by Beast Software LLC, a New York limited liability company (“Beast Software,” “we,” “us,” or “our”). This policy explains how Beast Software handles information when you use the App and its connected services.

Information you provide

You may provide a name, email or Apple private-relay address, training goals, experience level, equipment preferences, health limitations, pain notes, plans, exercises, sets, repetitions, weight, effort ratings, one-rep-max values, body measurements, progress photos, form videos, AI Coach messages, referral or creator codes, community identity details, channel messages, replies, reactions, attached media, shared routines, friend connections, reports, blocks, and support communications. Community identity setup requires a first name, last name, and unique username. Other members see the username, not the first and last name.

Sign in with Apple

Apple may provide a stable account identifier and, depending on your choices, your name and email address or private-relay address. The App exchanges the Apple credential with Supabase Authentication and stores the resulting session in the iOS Keychain. We never receive your Apple Account password. When a linked revocation token is available, our backend revokes it during account deletion. Account deletion still completes if an older account has no linked token, and the App then explains how to disconnect Apple authorization manually.

Apple Health

With permission, the App may read workouts, distance, and heart-rate information from Apple Health and write completed workout summaries. Health access is optional and controlled in iOS Settings. Health data is used only for health and fitness features. It is not sold or used for advertising.

Photos, camera, microphone, and form media

The App accesses a photo or video only after you choose it, and accesses the camera or microphone only after permission. Private Form Coach analysis is performed on device. If you separately publish a community form check, the selected media and a video preview are uploaded to Supabase Storage, screened for prohibited content, and displayed to other community users.

AI Coach and research

Cloud AI Coach is optional and requires your permission before sharing. It sends your question and relevant training context, which may include health limitations reflected in coaching advice, to Beast Software's backend hosted on Render and to OpenAI. Research sends only locally selected fitness-topic search terms to NCBI PubMed and uses article metadata or abstracts as context. Do not include names, contact details, or other unnecessary personal information in questions. We request that OpenAI not store the response for later API retrieval; this does not eliminate its security or abuse-monitoring retention. You can withdraw permission in Settings under Privacy, Legal & Data; withdrawal stops future cloud requests but does not recall previously transmitted information. Local coaching remains available. AI output may be inaccurate and is not medical advice.

Community features

Community is not available in the current public release. Existing beta community records are retained privately and remain subject to account deletion. The description below applies to information previously submitted through beta community features; it does not mean public sharing is currently enabled.

Community identity details, public-group messages, replies, reactions, attached media, shared routines, friend connections, reports, and blocks are transmitted to our backend so they can be synchronized, displayed, moderated, and protected from abuse. First and last names are used for account integrity and safety follow-up and are not displayed in public groups. Text is screened before publishing, and attached photos or video preview frames are screened before a message is created. Automated screening can make mistakes and does not replace reports or blocks. Public usernames and content can be viewed or copied by other users. Reports may be retained as reasonably necessary to investigate safety issues and enforce community rules.

Advertising and technical data

The free tier may use Google AdMob. The App requests non-personalized ad treatment and does not use advertising data for cross-app tracking. Google and its advertising partners may still process device identifiers, IP address, approximate location derived from IP, ad impressions, product interaction, diagnostics, performance information, and fraud-prevention signals for contextual advertising, frequency capping, aggregated reporting, analytics, and ad delivery. We do not provide workout history, Apple Health data, health limitations, body measurements, progress photos, form media, or AI Coach messages to advertising providers. Where required, advertising privacy choices are presented before ads are requested and remain available in Settings.

Purchases

Optional rewarded ads use a random, one-time reward ticket sent to Google. Google sends a signed completion confirmation to our server. We store the ticket, ad transaction identifier, completion time, awarded reply credits, and account-linked usage records to verify rewards, prevent duplicate claims, and maintain your balance across devices. These records do not contain the text of your AI questions. Credits are granted only after server verification; confirmation may be delayed. Account deletion removes these account-linked reward and usage records.

Apple processes subscriptions and in-app purchases through StoreKit. The App receives product, transaction, and entitlement information needed to unlock or restore features. We do not receive your full payment-card information.

How information is used

We use information to provide workout logging and analysis; personalize plans and substitutions; operate AI, research, purchase, community, referral, and friend features; moderate content; prevent fraud and abuse; troubleshoot and secure the service; comply with law; and answer support requests.

Service providers and disclosures

Information may be processed by Apple, Supabase, Render, Google, NCBI PubMed, and OpenAI for the purposes described above. We require service providers that process user information for the App to protect it consistently with this Privacy Policy and applicable law. We may disclose information when required by law, to protect users or the service, during a business transaction, or at your direction. We do not sell personal information for money, and we do not provide workout history, HealthKit data, progress photos, form videos, or AI Coach messages to data brokers or advertising providers.

Storage and retention

Workout history, Apple Health imports, body measurements, private progress photos, plans, preferences, and private Form Coach files are stored on your device. Current versions do not synchronize personal workout or health data through iCloud. Account and public community information is stored by the backend, and published media is stored in Supabase Storage. Information is retained while needed to provide the service and as reasonably required for security, disputes, legal obligations, and time-limited backups.

Your choices and account deletion

You can change Health, Photos, Camera, Microphone, notification, and advertising permissions in the App or iOS Settings. In the App, open Settings, then Privacy, Legal & Data, and choose “Delete Account and All Data.” The App verifies your session, revokes a linked Apple token when available, and deletes the Supabase authentication account, identity profile, channel messages, replies, reactions, legacy posts and comments, uploaded community media, referrals, friend records, blocks, and supported local data. If automatic Apple revocation is unavailable, deletion still completes and the App provides manual disconnection steps. If you are signed out, “Delete All App Data” removes supported data on that device. Account deletion does not cancel an Apple subscription; subscriptions are managed in Apple Account settings.

Privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. To exercise an applicable right, contact us using the details below. We may need to verify your identity before completing a request.

Security

We use encrypted network connections, Keychain session storage, access controls, and other administrative and technical safeguards appropriate to the information handled. No system can be guaranteed completely secure.

Children

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. A higher minimum age or parental consent may apply where required by local law.

International processing and policy changes

Service providers may process information in other countries. We may update this policy as the App, providers, or law changes. The revision date above identifies the current version, and additional notice will be provided where required.

Contact

For privacy questions, requests, or complaints: