Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how Evaluant LLC (“Evaluant,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use the Hefity mobile application and the website at hefity.com (together, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this Policy.

1. Information we collect

Information you provide

• Account information. If you create an account, we collect your email address and an authentication credential (password). Creating an account is optional — you can use core features of the app locally without one.
• Training data. The content you create in the app, such as workout programs and routines, logged workout sessions, exercises (including custom exercises), sets, reps, weights, and notes.
• Communications. If you contact us for support, we collect the information you include in your message, such as your email address and its contents.

Information collected automatically

• Device & technical data. Basic information needed to operate and secure the Service, such as device type, operating system version, app version, and IP address (used, for example, to deliver synced content and prevent abuse).
• Diagnostic data. If enabled by your device settings, Apple may provide us with aggregated crash and performance information to help us fix bugs. We do not use third-party advertising or cross-app tracking SDKs.

2. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Create and manage your account and sync your training data across your devices;
• Send transactional messages, such as email address confirmation and account-related notices;
• Respond to your support requests;
• Monitor for, prevent, and address security incidents, fraud, and abuse; and
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your training data for advertising.

3. Legal bases (EEA/UK users)

Where the EU or UK General Data Protection Regulation applies, we process your information on the following legal bases: to perform our contract with you (providing the Service and syncing your data); our legitimate interests (securing and improving the Service); your consent (where required); and compliance with legal obligations.

4. How we share information

We share information only in the following circumstances:

• With service providers who process data on our behalf to run the Service (see below).
• For legal reasons, if we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Evaluant, our users, or the public.
• In a business transfer, in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy.

5. Service providers

We rely on a small number of trusted providers to operate the Service. They process information only as needed to provide their services to us:

• Supabase — cloud database, authentication, and hosting for account and synced training data.
• Amazon Web Services (AWS) — email delivery (Amazon SES) for transactional messages and content delivery for exercise media.
• Apple — app distribution and, where enabled, aggregated diagnostics.

6. Data retention

We retain your account and training data for as long as your account is active. If you delete your account, we delete your associated personal data from our active systems, except where we are required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. Data stored locally on your device is removed when you delete the app or erase local data from within it.

7. Security

We use technical and organizational measures designed to protect your information, including encryption of data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential.

8. Your rights & choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Access and edit your training data directly in the app;
• Delete your account and associated data from within the app’s settings, or by emailing us; and
• Make a privacy request by contacting support@hefity.com.

We will not discriminate against you for exercising any of these rights. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will delete it.

10. International transfers

We are based in the United States, and the information we collect may be processed in the United States and other countries where our service providers operate. These countries may have data-protection laws different from those in your country. Where required, we take steps to ensure appropriate safeguards for such transfers.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

12. Contact us

If you have questions about this Policy or your personal information, contact us at support@hefity.com.

Evaluant LLC