HYDROFITNESS

DRAFT – attorney review. This text is a placeholder and is not yet final.

Privacy Policy

Last updated: November 3, 2026

HydroFitness is operated by Black Ocean Group Inc., a Florida corporation ("we", "us"). This policy explains what we collect when you use the HydroFitness website and apps, why, and the choices you have.

Coaches and clients

HydroFitness is a coaching platform. A coach (or coaching business) invites clients and decides what information to collect from them. For client data, the coach is the controller and we are the processor: we store and process it on the coach's behalf. Questions about how your coach uses your data should go to your coach first.

What we collect

  • Account details: name, email address, password (stored hashed by our auth provider), profile photo, timezone and unit preferences.
  • Fitness and health information you or your coach enter: workouts and logged sets, body metrics, progress photos, body scans, check-ins and form answers (which can include health questions), habits, food diary and nutrition targets, and items you choose to log in the tracker.
  • Connected devices (only if you connect them): from Apple Health (iPhone app) and from wearables you sign in to (Fitbit via Google Health, Oura, Garmin, Withings, WHOOP, Polar, Strava): daily steps, active energy, resting heart rate, heart rate variability, sleep time, stages and score, readiness or recovery, weight, body fat and workouts. Access is read only, and we never write to your devices or accounts.
  • Messages and community content: chat messages and attachments with your coach, and community posts, comments and likes.
  • Reports and blocks: what you report and who you block, so we can keep the community safe.
  • Technical data: sign-in sessions and basic server logs (IP address, device and browser type) used for security and to fix problems.

We do not sell your personal information, we do not show third-party ads, and we do not track you across other companies' apps or websites.

How we use it

  • To run the service: show your programs, plans and progress, deliver messages and send the emails you ask for (invites, sign-in links, notifications).
  • For HydroFitness AI: when a coach uses an AI feature (for example drafting a workout or meal plan), the relevant client information is sent to our AI provider to produce a draft the coach reviews. It is not used to train AI models.
  • Device data: to show you your trends, and to show your coach the same trends and alerts (like several short nights in a row) only if you turn on “Share device data with my coach” in Profile → Connected devices. It's off until you turn it on, and you can turn it off at any time. Strava activities are only ever shown to you. Device data is not sent to HydroFitness AI.
  • To keep the service secure, prevent abuse and enforce our Terms.

Service providers (sub-processors)

  • Supabase (database, sign-in and file storage)
  • Vercel (hosting)
  • Resend (email delivery)
  • Anthropic (HydroFitness AI)
  • USDA FoodData Central and Open Food Facts (food search; only the search text or barcode is sent)
  • Stripe (payments for coach plans, when available)

Device companies you connect (Apple Health, Google/Fitbit, Oura, Garmin, Withings, WHOOP, Polar, Strava) send us your data under your account with them. Their own privacy policies cover what they collect.

Retention and deletion

We keep your information while your account is active. You can delete your account at any time in Settings → Delete account, or see how to request deletion. Deleting a client account removes the account and its data (logs, photos, messages, check-ins, food diary and files) right away. Deleting a coach account removes the coach's login and profile; their clients keep their own accounts and history. Backups are overwritten on our providers' normal schedule.

Device sign-in tokens are encrypted at rest. Disconnecting a device revokes our access where the device company allows it, deletes the tokens, and offers to delete the data already synced from it. WHOOP data is kept for 30 days only. You can also delete Apple Health data from Profile → Connected devices and turn off access in the Health app.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, or object to how it's used. Email admin@hydrofitness.app and we'll respond within 30 days.

Children

HydroFitness is not intended for children under 16, and we don't knowingly collect their information.

Not medical advice

HydroFitness is for fitness and lifestyle coaching. It is not medical advice and doesn't diagnose or treat any condition.

Contact

Black Ocean Group Inc., Florida, USA · admin@hydrofitness.app