Privacy Policy

This Privacy Policy explains how Harcie Ltd ("Harcie", "we", "us") collects, uses, and protects your personal data when you use the Harcie application and website (the "Service").

1. Data we collect

When you use Harcie we collect the following categories of data:

• Account data: your name, email address, and password (hashed)
• Profile data: age, sex, height, weight, fitness goals, dietary preferences, and health information you choose to provide
• Usage data: check-in responses, coach chat messages, and in-app interactions
• Payment data: billing information processed by Stripe — we do not store card details
• Technical data: IP address, device type, browser, and app version

2. How we use your data

We use your data to:

• Generate and update your personalised training and nutrition plans
• Power the AI coaching features within the app
• Process payments and manage your subscription
• Send you service notifications and product updates (you can opt out)
• Improve and develop the Service through aggregated, anonymised analytics

3. Legal basis for processing

We process your personal data under the following legal bases: performance of a contract (to deliver the Service you have subscribed to), your explicit consent where required (for health-related data), and our legitimate interests in operating and improving the Service.

4. Data sharing

We do not sell your personal data. We share data only with trusted third-party processors necessary to operate the Service, including Supabase (database and authentication), Stripe (payments), and Anthropic (AI processing). All processors are bound by data processing agreements.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your rights

Under UK and EU data protection law you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing in certain circumstances
• Data portability — receive your data in a machine-readable format
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at hello@harcie.app.

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is encrypted in transit and at rest.

8. Cookies

The Harcie web app uses only essential session cookies required for authentication. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email. Continued use of the Service after changes constitutes acceptance.

10. Contact

For any privacy-related queries, contact our data controller at hello@harcie.app.