Privacy Policy

Last updated: June 18, 2026

Template: this is a starting-point draft. Have it reviewed by legal counsel and tailor it to your actual data practices before launch.

This Privacy Policy explains how Hybrid ("Hybrid," "we," "us," or "our") collects, uses, and shares information when you use the Hybrid mobile app and website (together, the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

Information you provide

Account information: your name, email address, and authentication identifiers (including Apple Sign-In identifiers if you choose that method).
Athlete profile & training data: the information you enter during onboarding and training — such as date of birth, sex, height, benchmarks, mobility assessments, bodyweight, goals, training history, equipment access, and the feedback you log after sessions.
Support communications: messages you send us.

Information collected automatically

Usage and device data: basic information about how you use the Service and the device you use it on, for reliability and security.

Payment information

Payments are processed by Stripe. We do not collect or store your full payment card details. Stripe handles your payment information under its own privacy policy.

2. How we use information

To create and adapt your training program via our deterministic training engine.
To authenticate you and maintain your account.
To process subscriptions and billing (via Stripe).
To provide support and respond to your requests.
To maintain the security, integrity, and reliability of the Service.
To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share it only with:

Service providers that help us run the Service — for example, our cloud/database provider (Supabase) and our payment processor (Stripe) — under agreements that limit their use of your data.
Legal and safety recipients when required by law or to protect rights, safety, and the integrity of the Service.
Business transfers in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and as required to meet legal, accounting, or reporting obligations. You may request deletion at any time (see "Your choices").

5. Security

We use reasonable technical and organizational measures, including row-level access controls that isolate each athlete's data, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your choices and rights

Access & correction: you can view and update much of your profile in the app.
Deletion: email support@hybrid.app to request deletion of your account and associated data.
Regional rights: depending on where you live (e.g., the EEA/UK or California), you may have additional rights over your personal data. Contact us to exercise them.

7. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

8. International users

We may process and store information in countries other than where you live. By using the Service, you consent to such transfers consistent with applicable law.

9. Changes to this Policy

We may update this Policy from time to time. We'll update the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact

Questions about this Policy? Email support@hybrid.app.