This Privacy Policy explains what personal data Performance Hub collects, why we use it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the Performance Hub iOS app and to the website at prfhub.app.
Performance Hub is operated by AB Tech Training Studio YA (Swedish corporate identity number 559188-5172), Friherregatan 58, 3 tr, 165 58 Hässelby, Sweden, which is the controller responsible for your personal data.
Contact for all privacy matters: performancehub.help@gmail.com.
The Daily Check-In asks six questions, each answered on a scale from 1 to 5:
The Daily Check-In is optional. We collect and store your answers only after you have given your explicit consent in the app (Section 6). We store your answers together with the date and time of the check-in, and the app calculates a readiness score from them on your device. The sleep question is a self-rating of how you slept; the app does not read sleep data from Apple Health or any device. Your answers are also kept in a cache on your device so the app can work offline.
After a Daily Check-In, the app may ask "Any pain or injury today?". If you answer yes, you select a body region (for example knee, lower back or shoulder) and its severity. In the current version of the app, your answer to this question is not saved on our servers. If a later version saves it, it will do so only with the consent described in Section 6, and the parts of this Policy that refer to pain or injury information will then apply. The app may also ask about an upcoming competition and may store its date. We do not ask for diagnoses, medical conditions or treatment information.
Custom workouts you create with Build Your Own Workout are stored only on your device. They are not uploaded to or backed up on our servers. When you save one, the app records a usage event that the feature was used (see Section 2.10).
See Section 4.
We store your subscription status (for example free, trial or Pro), plan and the relevant start and expiry dates so we can unlock the right features. We also receive and store subscription event records from RevenueCat (such as the event type, product, timestamps and your account identifier). Payments are processed by Apple; we never receive your payment card details.
While you are signed in, the app records usage events in our own database (hosted by Supabase). We do not use third-party analytics or advertising SDKs. Each event contains the event name, your account identifier, a random session identifier generated each time the app starts, the app version and event details. Event details can include:
Usage events do not contain your Check-In answers, your readiness score, pain or injury information or heart rate. The app removes such fields before an event is sent.
We use Sentry to detect crashes and errors. Sentry may receive error details, crash reports, device model, operating system version, app version and a sample of app performance traces (currently about 20%). The app does not attach your name, email or account identifier to these reports, and we do not intentionally send Apple Health data, Check-In answers or payment details to Sentry.
The app keeps some data locally on your device, including cached Check-In answers, workout history and progress, active-session data, an offline queue of changes that have not yet been synced, and your custom workouts.
The prfhub.app website does not use cookies, analytics or advertising trackers. Our hosting provider (Vercel) processes technical request data, such as IP address and browser type, to deliver the website and keep it secure.
The current version of Performance Hub does not collect:
Using heart rate takes two separate steps. First, you give Performance Hub your explicit consent in the app (Section 6). Then iOS asks you for Apple Health access. If you agree to both, Performance Hub gets read-only access to heart rate. The app requests no other Apple Health data and does not write any data to Apple Health.
Heart rate readings come from device sensors and are not medical-grade measurements. Performance Hub does not validate them or make clinical claims about them.
We do not use your data for advertising and we do not sell it.
Under the GDPR we must have a legal basis for each processing activity.
| Processing activity | Legal basis |
|---|---|
| Account, sign-in and delivery of the training service | Performance of a contract (Art. 6(1)(b) GDPR): providing the service you signed up for. |
| Daily Check-In answers, pain or injury context and heart rate from Apple Health | Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), given separately in the app for (1) Check-In and pain or injury data and (2) heart rate from Apple Health. |
| Subscription management | Performance of a contract (Art. 6(1)(b) GDPR). |
| First-party usage analytics | Legitimate interests (Art. 6(1)(f) GDPR): understanding how features are used so we can improve the app. |
| Crash reports and diagnostics | Legitimate interests (Art. 6(1)(f) GDPR): keeping the app stable and secure. |
| Login security and fraud prevention | Legitimate interests (Art. 6(1)(f) GDPR): protecting accounts and the service. |
| Invitations and rewards | Performance of a contract (Art. 6(1)(b) GDPR): the invitation programme terms shown in the app. |
| Feedback and support | Legitimate interests (Art. 6(1)(f) GDPR): responding to and following up on your requests. |
| Retention of records required by law | Legal obligation (Art. 6(1)(c) GDPR): only for records we are legally required to keep. |
Daily Check-In answers, pain or injury information and heart rate can be data concerning health, which the GDPR treats as a special category of personal data. We process this data only with your explicit consent. The app asks for it before your first Daily Check-In and before you connect Apple Health. Each consent is separate from the Terms of Service and from the other consent, and nothing is selected in advance.
Giving consent is optional. Programs, workouts, Build Your Own Workout and your training history work without it; the app then does not adapt your training to a check-in. We record when you gave consent and which version of the consent text you agreed to.
You can withdraw each consent at any time in the app under Settings → Privacy & Health Data. Withdrawing does not affect processing that took place before the withdrawal. It stops further processing and deletes the related data as described in Section 10.
Check-In answers and pain or injury information collected by earlier versions of the app, before this consent was introduced, are not used unless you give consent. If you do not, we delete them after a transition period of 30 days from the release of the consent feature.
We do not sell, rent or trade your personal data. We share it only with the service providers below, who process it to operate Performance Hub:
We may also disclose information if required by law, court order or a public authority, or where necessary to protect the rights, safety or property of our users or Performance Hub. If Performance Hub is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction; we will tell you before your data becomes subject to a different privacy policy.
Some of the providers above are based in the United States, so your data may be processed outside the EU/EEA. Such transfers must be covered by an appropriate safeguard under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Contact us to receive information about the safeguards that apply.
| Data | Retention |
|---|---|
| Account, profile, training and settings | Until you delete your account. We have not set an automatic deletion period while the account remains active. |
| Daily Check-In answers and pain or injury context | Until you withdraw your consent or delete your account. |
| Heart rate summaries or derived recovery values stored by earlier app versions, if any | Until you withdraw the related consent or delete your account. |
| Check-In and pain or injury data collected before the consent was introduced, where no consent is given | Deleted after a transition period of 30 days from the release of the consent feature. |
| Consent records (when you gave or withdrew a consent and which text version) | Until you delete your account. |
| Usage analytics events | Until you delete your account. |
| Login security counters | Entries older than one day are periodically deleted. |
| Feedback submissions | Kept after account deletion without the link to your account, including any email address you typed into the form. No fixed period has been set. |
| Subscription event records from RevenueCat | Currently kept after account deletion. No fixed period has been set. |
| Crash and diagnostic reports (Sentry) | Kept for the retention period configured in our Sentry account, then deleted automatically. |
| Database backups | Daily backups are kept for 7 days and then deleted automatically. |
| Data on your device | Until it is removed by the app (see Section 10) or you delete the app. |
You can delete your account in the app under Settings → Account → Delete Account, or by contacting us. Deletion starts immediately and cannot be undone. This is what currently happens:
Deleted first — if any of these fail, deletion stops and you are asked to try again or contact support:
Then deleted on a best-effort basis:
Then: your profile (including username, name, pain or injury context and profile image reference) and finally your sign-in account. Workout session records, saved generated workouts and your consent records are removed automatically when the sign-in account is deleted.
On your device: the app removes the locally cached workout, progress and Check-In data for your account.
Withdrawing a health-data consent without deleting your account (Settings → Privacy & Health Data): withdrawing the Check-In consent deletes your Daily Check-In answers, your pain or injury context and any recovery or fatigue values derived from them, clears Check-In answers from older usage events and removes the cached Check-In data on your device. Withdrawing the Apple Health consent deletes any stored heart rate summaries. Your workouts and training history are not affected. If the deletion cannot be completed, the app tells you that your consent has not been withdrawn. Copies in backups remain until the backups expire (Section 9).
Deleting your account does not cancel an App Store subscription. Cancel it separately in iPhone Settings → [your name] → Subscriptions, before or after deleting your account.
Depending on where you live, and in particular under the GDPR if you are in the EU/EEA, you have the right to:
To exercise your rights, email performancehub.help@gmail.com. We may need to verify your identity. We respond within one month of receiving your request; for complex or numerous requests this can be extended by up to two further months, in which case we will tell you why.
Other choices: you can withdraw your health-data consents in the app under Settings → Privacy & Health Data, and you can remove Apple Health access and turn off notifications in iPhone Settings.
Performance Hub adapts your training using predefined rules based on your training profile, Check-In answers, pain or injury context and training history. It does not use artificial intelligence or machine-learning models. These recommendations affect only the training content shown to you and do not produce legal or similarly significant effects. You can always choose a different workout or ignore a recommendation.
The app can schedule reminders on your device, such as a reminder for the next day's Check-In. These are local notifications created on your device; the app does not collect a push notification token. You can turn notifications off in iPhone Settings.
We may email you about your account, for example in reply to support requests or about changes to this policy. We do not send marketing emails or promotional notifications.
Performance Hub is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. The app asks for your date of birth or age group but does not currently verify age. If we learn that a user under 13 has created an account, we will delete the account and its data. If you believe a child under 13 is using the app, contact us at performancehub.help@gmail.com.
The app does not include content focused on weight loss, calorie restriction or body image.
Data is sent over encrypted connections (TLS). Access to account data in our database is restricted with per-user access rules, and profile images are kept in private storage that is accessed through time-limited links. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authorities as required by applicable law.
Training content in the app — including workout programs, exercises, readiness information and adaptive suggestions — is for general fitness and performance purposes only. It is not medical advice, diagnosis or treatment. If you have a medical condition or injury, or feel pain during exercise, consult a qualified healthcare professional before continuing.
We may update this Privacy Policy when our practices change or when the law requires it. We will notify you of material changes in the app or by email before they take effect and update the "Last updated" date above.
Questions, requests or complaints about this Privacy Policy:
AB Tech Training Studio YA
Corporate identity number: 559188-5172
Friherregatan 58, 3 tr
165 58 Hässelby
Sweden
performancehub.help@gmail.com