HyperTrophy Rank
ESComing soon to Google Play
FeaturesSocialProBlogComing soon to Google Play

Privacy policy

Last updated: October 2, 2026

This policy explains what data HyperTrophy Rank (“the app”) processes, why, who it is shared with and how you can delete it. The app works in full without an account: what applies to you depends on whether you create an account and what you choose to publish.

1. Who is responsible

[NOMBRE LEGAL DEL TITULAR / LEGAL NAME OF OWNER], located at [DOMICILIO POSTAL / POSTAL ADDRESS]. Contact: [CORREO DE CONTACTO / CONTACT EMAIL].

2. If you do not create an account

Your workouts, routines, weigh-ins and settings are saved only on your phone (a local database). They are not sent to our server. Reminder and rest-timer notifications are scheduled on the phone itself; we do not use remote push notifications.

The app may contact the purchases service (section 7) to know whether you have Pro, even without an account.

3. If you create an account

The account is optional and passwordless. For it we process:

  • Your email address (lowercased), which is your identity in the account.
  • Your Google account identifier, if you sign in with Google. We receive a token from Google that we verify against Google’s public keys; we do not receive your password.
  • Sign-in codes: if you sign in by email, we send you a 6-digit code. We store only a hash of the code, and it expires after a few minutes.
  • Sessions: we store only a hash of each session token, and when it was created and last used.

4. The cloud copy

With an account, the app uploads a copy of your data so you can recover it on another phone: workouts and sets, routines, your own exercises, weigh-ins (your bodyweight), training days, volume ranges and settings. Each row is stored as JSON tied to your account. This copy is private: it is not shown to other users. Training and bodyweight data may count as health data in some jurisdictions; that is why we upload them only if you create the account, and we process them with your consent. [Review the legal basis with a professional.]

The exercise catalogue, records (each phone calculates its own) and Pro status are not copied.

5. What others can see

Only if you create a public profile (name and @username) and accept the community rules:

  • Your profile: name, @username, whether the account is private and, optionally, a photo that you upload.
  • Your summary: each muscle’s rank, your best rank, your overall rank, your streak, how many workouts you have logged and your last 26 weeks. Never your email or your bodyweight, nor the ratio to it.
  • Your workout posts (the silhouette, the figures, your text, records and exercises, without per-set weights or bodyweight), except those you hide.
  • Your trophies, comments, follows and blocks. Comments are up to 500 characters.

With a public account, anyone who knows your @username can see you. With a private account, you approve each follower and, until then, they only see your name and your counters. When you block someone, neither sees the other. You can hide posts and delete your comments and your posts.

6. Moderation and reports

Any user can report a post, a comment or another user, giving a reason and, optionally, a note. The report reaches the moderator by email with what is needed to act; a comment report keeps the comment’s text in case it is deleted. We may hide content or suspend accounts that break the rules. If you delete your account, existing reports may be kept without linking them to who reported.

7. Purchases and Pro

Subscriptions are bought on Google Play, which processes the payment data. We use RevenueCat to manage the Pro entitlement. RevenueCat receives a user identifier (your account’s if you are signed in, or an anonymous one if not), your purchase status and usual technical data. Our server asks RevenueCat whether you have Pro. See their policies on their sites. [Confirm links and the location of this processing.]

8. Technical data

  • The app sends its version with every request to the server (to know whether it must be updated).
  • We use the client’s IP address only to limit abusive requests (for example, too many sign-in codes), and only in the server’s memory: we do not store or log it.
  • We make a daily backup of the database and keep the last 7.

9. What we do not do

In this version, the app includes no advertising and no third-party analytics or tracking SDK, and this website uses no tracking cookies or analytics. [If analytics is added before release, update this section.] We do not sell your data.

10. Providers involved

  • Server hosting: [PROVEEDOR DEL VPS / VPS PROVIDER].
  • Sending the code emails, from noreply@hypertrophyrank.com: Hostinger (SMTP).
  • Google (optional sign-in and Google Play).
  • RevenueCat (subscription management).

11. How long we keep data

As long as you have the account. If you sign out in the app, the data on the phone is erased (it stays in your account). If you delete the account from the app, your account, your copy, your sessions, your profile, your follows, your photo and what you published are deleted, and we ask RevenueCat to forget your history. Existing backups may contain your data until they rotate out (at most 7 days). Deleting the account does not cancel your Google Play subscription: cancel it in Google Play. The data on your phone stays on it.

12. Your rights

Depending on the law that applies to you, you can access your data, correct it, delete it, ask for its portability, object to or restrict its processing, and withdraw your consent. You can delete the account and edit or delete your profile and posts from the app; for anything else, write to [CORREO DE CONTACTO / CONTACT EMAIL]. If you believe we have not handled your data properly, you can complain to the data protection authority of your country.

13. Minors

The app is not aimed at people under [EDAD MÍNIMA / MINIMUM AGE]. [Set the minimum age and mechanism, per applicable law.]

14. Security

Communication with the server is encrypted (HTTPS). We store no passwords (there are none) and keep only hashes of tokens and sign-in codes. No system is infallible: if a breach affecting you occurred, we would tell you as the law requires.

15. Changes

If we change this policy in a relevant way, we will say so in the app or on this page, with the update date.