Terms & privacy.

• HyperBody is a live service with a free plan and paid subscription plans (Pro). Features may change, be added, or be removed as the Service evolves.
• The app provides fitness and informational guidance only. It is not medical advice, diagnosis, or treatment.
• The app estimates body metrics from your inputs and photos; estimates may be inaccurate.
• Training and nutrition involve risks; you use the app at your own risk.
• You understand and agree that we collect, store, and process your personal data and photos to provide the Service (body analysis, progress history, and personalized content). Our Privacy Policy explains the legal bases for this.
• Our liability is limited to the maximum extent permitted by Estonian law and cannot be excluded for intent or gross negligence, or where exclusion is barred by mandatory consumer law.

If there is a conflict, the legally binding Terms below apply.

These Terms are between:

You ("User", "you"), and

LibertyTechnology OÜ, a private limited company (osaühing) incorporated in the Republic of Estonia ("Company", "we", "us"), which operates the HyperBody service.

1.1 Company details

• Legal name: LibertyTechnology OÜ
• Registry code (registrikood): 17524799
• Registered office: Lõõtsa tn 5, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia
• Commercial register: Estonian e-Business Register (e-äriregister), Registration Department of Tartu County Court
• Contact & support email: contact@hyperbody.fit

2.1 Scope

These Terms govern your access to and use of HyperBody, including the website, mobile apps, and all related content, features, and services (the “Service”).

2.2 Acceptance (clickwrap)

By creating an account, clicking “I agree”, downloading, accessing, or using the Service, you confirm you have read, understood, and agree to these Terms.

2.3 Privacy Policy

Your use of the Service is also subject to our Privacy Policy, which describes how we process personal data (including photos), the legal bases on which we rely, and how you may exercise your rights. If these Terms and the Privacy Policy conflict on data topics, the Privacy Policy governs.

2.4 No medical relationship

Use of the Service does not create a doctor–patient relationship or any professional relationship.

3.1 Free and paid plans

HyperBody offers a free plan, one or more paid subscription plans (“Pro”), and, where available, an introductory trial of a paid plan (free, or for a small one-time trial fee) as described in Section 3.3. The features included in each plan, and any usage limits, are described in-app and on our pricing page and may change over time.

3.2 Subscriptions and billing

Paid plans are sold as recurring subscriptions billed in advance for each billing cycle (for example, monthly). The price, billing cycle, and any applicable taxes are shown before you confirm your purchase. Payments are processed by our payment provider (Stripe); by subscribing you authorize us and Stripe to charge your payment method for each cycle until you cancel.

3.3 Trials

We may offer a trial period for a paid plan, either directly through the Service (processed by Stripe) or through the Apple App Store's introductory offer, where available. A trial started through the Service currently requires a small one-time trial fee (for example, $1 or the equivalent in your checkout currency), which is charged when the trial starts, is shown before you confirm, and is non-refundable except where the law provides otherwise; a trial started through the Apple App Store may be free. During the trial you receive preview-level access as described in this Section 3, not the full paid content. Trial availability, length, price, and eligibility (for example, one trial per user) may vary and are shown before you start the trial. If you do not cancel before the trial ends, your trial converts automatically into a paid subscription and you will be charged the regular subscription price for the plan you selected. If you cancel during a trial started through the Service, you keep your trial access until the end of the trial period, the subscription simply does not convert and nothing further is charged; the trial fee is not refunded.

An Apple App Store trial is also subject to Apple's Media Services Terms and is managed through your Apple ID subscription settings, not in-app.

3.4 Automatic renewal and cancellation

Subscriptions, including a trial that has converted to a paid subscription, renew automatically at the end of each billing cycle unless you cancel beforehand. You can cancel at any time from your account settings (or, for an Apple App Store trial or subscription, from your Apple ID subscription settings); cancellation stops future renewals, and you keep access until the end of the current paid or trial period. We do not charge cancellation fees.

3.5 Price changes

We may change plan prices or the contents of a plan. We will give reasonable advance notice in-app and/or by email, and changes take effect from your next billing cycle. If you do not accept a price change, you may cancel before it takes effect.

3.6 Content differences between plans

Plans differ not only in price but in how much of your report and training plan you can access. The free plan and an active trial give you a preview or partial version of your report and training plan (for example, a summary report or only the first week of a plan), not the full version; the full report and complete multi-week plan require an active paid subscription.

• If a trial ends without converting to a paid subscription, you keep the same preview-level access you had during the trial, but cannot generate new reports or plans until you subscribe.
• If you cancel a paid subscription, you keep the full reports and plans already generated during your subscription, but cannot generate new ones until you resubscribe.

Exact plan contents, and any changes to them, are described in-app.

3.7 Refunds and statutory rights

Except where required by law or expressly stated by us, payments (including the one-time trial fee and a charge when a trial converts to a paid subscription) are non-refundable. Your mandatory consumer rights, including any right of withdrawal, are described in Section 19 and are not affected by this section.

3.8 Changes to the Service

We may add, modify, suspend, or discontinue features or the Service. If we discontinue a paid feature you are actively paying for, we will provide notice and, where appropriate, a pro-rata refund for the unused paid period.

4.1 Minimum age

You must be at least 18 years old to use the Service. The Service is intended for adults and is not directed at children.

4.2 No use where prohibited

You may not use the Service if doing so would violate applicable law in your country of residence.

5.1 Account required

You must create an account to access key parts of the Service. Authentication is handled by our identity provider (Clerk), as described in the Privacy Policy.

5.2 Accuracy of information

You agree to provide accurate, current information and to update it as needed. The Service depends on correct inputs (age, weight, height, lifestyle details).

5.3 Account security

You are responsible for maintaining the confidentiality of your login credentials and for activity occurring under your account. Notify us immediately of suspected unauthorized access.

5.4 One person, one account

Unless we allow otherwise, you may not share your account or create multiple accounts to bypass restrictions or quotas.

6.1 Core functionality

The Service may include:

• account creation and user profile setup;
• collection of profile inputs (age, weight, height);
• collection of lifestyle/activity inputs (training habits, frequency, activity level, goals);
• photo and video upload, storage, and display within the app;
• AI-assisted body-related metric estimation based on your inputs and photos (e.g., estimated body fat percentage, composition indicators);
• AI-generated training plans, recipes, and exercise-form (video) feedback;
• progress/history views and comparisons over time;
• nutrition and fitness informational content and insights.

6.2 No promise of results

We do not promise any specific fitness, body, or health outcome.

6.3 Right to modify

We may modify, add, or remove features at any time. Material changes are addressed in Sections 3.8 and 20.

7.1 Informational fitness guidance only

The Service provides general fitness, wellness, and educational information only. It is not medical advice and is not a substitute for a qualified healthcare professional.

7.2 Not a medical device; no diagnosis or treatment

The Service is not intended to diagnose, treat, cure, prevent, or mitigate any disease or medical condition, and is not designed for emergency or clinical use. It is not a medical device within the meaning of EU Regulation 2017/745.

7.3 Estimates only; accuracy not guaranteed

All body metrics and outputs:

• are estimates based on user-provided data, photos, and/or statistical and AI models;
• may be inaccurate due to lighting, pose, camera differences, clothing, user error, and individual variability;
• are not guaranteed to be correct, complete, or suitable for any purpose.

7.4 Consult professionals

Before starting, changing, or stopping any exercise or nutrition plan, consult a qualified healthcare professional, especially if you:

• have any medical condition, symptoms, or injury;
• are pregnant or postpartum;
• have a history of fainting, chest pain, heart conditions, or severe asthma;
• have diagnosed or suspected eating disorders;
• take medications;
• have allergies or intolerances;
• have any doubts about safety.

7.5 Emergency

If you believe you have a medical emergency, seek immediate medical assistance or call your local emergency number (112 in the EU).

8.1 Exercise risks

You acknowledge that exercise and physical training involve inherent risks, including sprains, strains, falls, illness, overexertion, and in rare cases serious injury.

8.2 Nutrition risks

You acknowledge nutrition-related risks such as allergies, intolerances, interactions with medical conditions or medications, and adverse reactions.

8.3 Your responsibility

You are solely responsible for:

• deciding whether to exercise or change your nutrition based on Service outputs;
• choosing appropriate intensity, technique, and rest;
• stopping activity if you feel pain or concerning symptoms;
• seeking professional guidance when appropriate.

8.4 Stop if unsafe

Stop using any guidance and seek medical advice if you feel dizziness, chest pain, unusual shortness of breath, fainting, severe pain, or any concerning symptoms.

9.1 User Content

Any photos, images, videos, text, or other materials you upload or submit (“User Content”) remain yours as between you and the Company.

9.2 License needed to operate the Service

You grant the Company a worldwide, non-exclusive, royalty-free license to host, store, copy, process, analyze, display, and use your User Content solely to:

• provide and operate the Service (including body analysis, progress tracking, and personalized content);
• display your photos, history, and results back to you inside the app;
• maintain, secure, troubleshoot, and improve the Service.

This license is limited to the purposes above and ends when your User Content is deleted, subject to the retention rules in the Privacy Policy. We do not sell your User Content and do not use your photos to train third-party AI models for unrelated purposes.

9.3 No unlawful or third-party content

You represent and warrant that:

• you have the necessary rights and permissions to upload User Content;
• your User Content does not violate any law or third-party rights (privacy, publicity, copyright, etc.);
• you do not upload photos or videos of other people without their explicit permission.

9.4 Content standards

You must not upload content that is illegal, abusive, hateful, pornographic, or otherwise inappropriate.

9.5 Removal

We may remove User Content that violates these Terms or applicable law.

This section is intentionally explicit so that users understand that we store and process their data and photos to deliver the Service. The full detail, including legal bases under the GDPR, is in the Privacy Policy.

10.1 What we collect and process

When you use the Service, we may collect and process:

• Account data (e.g., email, login identifiers managed via our authentication provider);
• Profile data (age, weight, height);
• Lifestyle/activity data (training habits, frequency, activity level, goals);
• Photos and videos you upload (e.g., physique photos requested in-app and exercise-form videos);
• Derived data generated from inputs/photos (e.g., estimated metrics, trend charts, progress comparisons, training plans);
• Technical and usage data (device information, logs, crash reports, and analytics as described in the Privacy Policy).

10.2 Photos and derived data may be sensitive

You acknowledge that physique photos and photo-based body analysis may reveal information about your physical condition and may be considered sensitive. Where such processing relates to health data, we rely on your explicit consent as described in the Privacy Policy.

10.3 Why we store and process your data (purposes)

You acknowledge and agree that we store and process your personal data and photos to:

• perform body analysis and generate estimates;
• show progress/history and enable comparisons over time;
• display your photos and results back to you within the app;
• personalize fitness and nutrition information;
• operate, maintain, secure, and improve the Service.

10.4 Storage is necessary for the Service

The Service depends on storing and processing your data and photos. If you do not agree, do not use the Service, or use only features that do not require uploads where offered.

10.5 Service changes, migrations, and backups

• (a) Maintenance & migrations. We may migrate databases, change processors or hosting, and update our AI models as the Service evolves.
• (b) Backups. We keep reasonable backups, but no system can guarantee against all data loss. We recommend you keep your own copies of any photos or results that matter to you.
• (c) Your rights are unaffected. Nothing here limits your statutory rights under the GDPR, including the rights described in our Privacy Policy.

10.6 Retention

• (a) While active. We retain your data for as long as your account is active.
• (b) After deletion. After you delete your account (or request deletion), we may retain limited data for up to 90 days for backups, security, legal compliance, and dispute handling, after which we delete or anonymize it where feasible.

10.7 Deletion requests

You can delete your account in-app or request deletion via our contact form or by emailing contact@hyperbody.fit. We may need to verify your identity before fulfilling requests.

10.8 Security and processors

We use reasonable technical and organizational measures to protect personal data and engage vetted third-party processors under data processing agreements. The full list of sub-processors and details of any cross-border transfers are set out in the Privacy Policy.

You agree not to:

• use the Service unlawfully or in breach of these Terms;
• upload content that violates laws or third-party rights;
• interfere with or disrupt the Service or attempt unauthorized access;
• reverse engineer, scrape, or bypass security measures or quotas;
• use outputs as medical advice or claim the Service provides medical diagnosis;
• use the Service in a way that could harm yourself or others.

We may suspend or terminate accounts for violations.

12.1 Company IP

The Service (software, algorithms, models, design, text, logos, trademarks, and non-user content) is owned by or licensed to the Company and protected by applicable IP laws.

12.2 License to you

We grant you a limited, revocable, non-exclusive, non-transferable license to use the Service for personal, non-commercial fitness purposes, subject to these Terms.

12.3 Feedback

If you provide feedback or suggestions, you grant us the right to use it without restriction or compensation.

13.1 Third-party links and services

The Service relies on and may contain links to or integrations with third-party services (for example, cloud hosting, AI, authentication, email, and payment providers). We do not control third parties and are not responsible for their content, policies, or practices.

13.2 App stores

If you download the app from the Apple App Store or Google Play, your use is also subject to their platform terms. The Company, not the app store, is responsible for the Service, except as required by platform rules.

14.1 Reasonable efforts

We aim to keep the Service available and reliable, but we provide it on a commercially reasonable best-efforts basis and do not guarantee uninterrupted, timely, or error-free operation.

14.2 Maintenance and downtime

The Service may be unavailable due to maintenance, updates, outages, testing, or other reasons.

14.3 Updates

We may push updates automatically. Some updates may be required for continued use.

14.4 Support

Support, where offered, is provided on a reasonable-efforts basis by email at contact@hyperbody.fit.

To the maximum extent permitted by applicable law, and without limiting any mandatory statutory rights of consumers:

15.1 As-is / as-available

The Service is provided “as is” and “as available.”

15.2 No warranties

We disclaim all warranties, whether express or implied, including warranties of:

• accuracy, completeness, or reliability of estimates/metrics/content;
• fitness for a particular purpose (including outcomes);
• non-infringement;
• uninterrupted, secure, or error-free operation.

15.3 Estimates and AI limitations

You acknowledge that the Service relies on AI and statistical models that are continually improved and may contain errors or inaccuracies, including in calculations, estimates, and displays. Outputs are informational and may change as the models are updated.

15.4 Consumer rights unaffected

Nothing in this section excludes or limits the statutory guarantees and conformity rights that consumers have under mandatory EU and Estonian law.

16.1 Use at your own risk

You use the Service, including any exercise or nutrition decisions made using the Service, entirely at your own risk.

16.2 Excluded damages

To the maximum extent permitted by Estonian law, the Company is not liable for:

• any injury, health issue, or adverse reaction arising from training, nutrition, or lifestyle choices;
• reliance on inaccurate or incomplete estimates, metrics, or content;
• interruptions, delays, bugs, errors, or service unavailability;
• loss of data or loss of progress history;
• indirect, incidental, consequential, special, exemplary, or punitive damages;
• lost profits, lost revenue, or business interruption.

16.3 Allocation of risk

The limitations and exclusions in this section reflect a reasonable allocation of risk between you and the Company for an informational fitness service, taking into account the price you pay (if any). They apply to the maximum extent permitted by law and do not affect the mandatory rights of consumers.

16.4 Liability cap

To the maximum extent permitted by law, the Company's total aggregate liability arising out of or relating to the Service is limited to the greater of:

• EUR 100, or
• the total amount (if any) you paid to us for the Service in the 12 months before the event giving rise to liability.

16.5 Mandatory carve-out

Nothing in these Terms limits or excludes liability that cannot be limited or excluded under applicable mandatory law, including liability for intent (tahtlus) or gross negligence (raske hooletus), for death or personal injury caused by our negligence, or under mandatory consumer protection law.

To the extent permitted by law, you agree to indemnify and hold harmless the Company and its directors, officers, employees, and partners from and against claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or relating to:

• your breach of these Terms;
• your misuse of the Service or reliance on outputs as medical advice;
• your User Content (including unlawful uploads or third-party rights violations);
• your violation of any law or third-party rights.

This indemnity does not apply to consumers to the extent prohibited by mandatory consumer protection law.

18.1 By you

You may stop using the Service at any time and may request deletion of your account and data as described in Section 10.

18.2 By us

We may suspend or terminate your access immediately if:

• you violate these Terms;
• we reasonably believe your use creates risk or legal exposure;
• required for security, legal compliance, or to protect other users;
• the Service, or your plan, is discontinued.

18.3 Effect of termination

Access ends. Data retention and deletion follow Section 10 and the Privacy Policy.

19.1 Statutory consumer rights

If you use the Service as a consumer in the EU/EEA, you have mandatory statutory rights that these Terms do not override, including conformity rights for digital content and services under EU Directive 2019/770 (as implemented in the Estonian Law of Obligations Act) once any paid plan is in place.

19.2 Right of withdrawal

When you buy a paid subscription as a consumer in the EU/EEA, including the one-time trial fee, where charged, and when a trial converts into a paid subscription, you have a statutory 14-day right of withdrawal for distance contracts. Because HyperBody is a digital service that starts immediately, you expressly request and consent to immediate access at checkout and acknowledge that the right of withdrawal is lost once the service has been fully performed. For ongoing subscriptions, including trials, you can still cancel future renewals at any time as described in Section 3. If you started your trial or subscription through the Apple App Store, withdrawal and refund requests for that purchase are handled by Apple under its own policies, not directly by us. We honor all mandatory consumer refund and withdrawal rights.

19.3 Complaints and online dispute resolution

Please contact us first at contact@hyperbody.fit so we can try to resolve any complaint. EU consumers may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr, and may contact the Estonian Consumer Disputes Committee (Tarbijavaidluste komisjon) of the Consumer Protection and Technical Regulatory Authority.

20.1 We may update Terms

We may modify these Terms from time to time.

20.2 Notice

If changes are material, we will notify you in-app and/or by email and provide the effective date.

20.3 Acceptance

Continued use after the effective date means you accept the updated Terms. If you do not agree, stop using the Service and request deletion.

21.1 Governing law

These Terms and any non-contractual obligations arising out of them are governed by the laws of the Republic of Estonia, without regard to conflict-of-law rules. If you are a consumer, you also benefit from the mandatory consumer protection provisions of the country in which you are habitually resident.

21.2 Jurisdiction

The courts of Estonia, with Harju County Court (Harju Maakohus) in Tallinn as the court of first instance, have jurisdiction over disputes arising out of or relating to these Terms. If you are a consumer, you may bring proceedings in, and may only be sued in, the courts of your country of residence where mandatory law so provides.

If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in full force, and the invalid provision will be replaced by a valid one that comes closest to its intended economic purpose.

These Terms, together with the Privacy Policy and any documents expressly incorporated by reference, constitute the entire agreement between you and the Company regarding the Service.

This Privacy Policy explains how LibertyTechnology OÜ collects, uses, shares, and protects your personal data when you use HyperBody, our AI-powered physique and fitness coaching service (the “Service”). We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

The data controller responsible for your personal data is:

• LibertyTechnology OÜ (private limited company / osaühing)
• Registry code: 17524799
• Registered office: Lõõtsa tn 5, Lasnamäe linnaosa, 11415 Tallinn, Estonia
• Data protection contact: contact@hyperbody.fit

We have not appointed a statutory Data Protection Officer (DPO), as we are not required to under Article 37 GDPR. You can reach our team for any privacy matter at the address above.

Account data

• Email address and login identifiers (managed via our authentication provider, Clerk)
• Account settings, language, and communication preferences

Profile and fitness data

• Age, height, weight, and other body measurements you provide
• Training habits, activity level, and goals
• Training plans, sessions, sets/reps, and progress history generated as you use the Service

Apple Health (HealthKit) data

• If you choose to connect Apple Health in the iOS app, we read your body weight, resting heart rate, heart rate variability, sleep, breathing rate, steps, activity energy, and workouts logged in other apps from HealthKit
• These readings are uploaded to our servers and stored with your account, solely to power your progress charts and fitness insights in the app. Heart rate variability, sleep, breathing rate, steps, activity energy, and workout data are summarized on your device into one value per day before upload; body weight and resting heart rate continue to upload as individual readings
• With your separate permission, we also write to Apple Health: when you complete a workout in the app, we can save it back to Apple Health, as a workout and its active energy, so it counts toward your Apple Fitness rings. This write permission is optional, requested alongside the read permission, and can be turned off at any time in the app's Settings without disconnecting Apple Health entirely
• Workouts of 10 minutes or longer that Apple Health has recorded from another app or your Apple Watch, and that HyperBody did not itself write back, are automatically added to your training calendar as a completed activity, the same way an activity you log by hand would be. This import can also be turned off separately in the app's Settings
• Connecting Apple Health is optional and off by default; you can disconnect it at any time in the iOS Health settings or the app's Settings, and the data is deleted together with your account. Disconnecting also deletes the copy of this data already stored on our servers, including any calendar activities imported from Apple Health, without waiting for account deletion

Photos and videos

• Physique photos you upload for body analysis
• Exercise-form videos you upload for form feedback
• File metadata (size, format, upload timestamp) and AI-generated analysis derived from them

Payment data (if and when paid plans apply)

• Subscription/plan status and billing records
• Payment card details are collected and processed directly by our payment processor (Stripe); we do not store full card numbers

Technical and usage data

• IP address, device and browser information, including an approximate country derived from your IP address (used to display prices in your local currency)
• Push notification tokens, if you enable push notifications
• Usage patterns, interaction data, logs, and crash reports
• Cookies and similar technologies (see Section 12)

We use your personal data for the following purposes:

• Service delivery: to provide AI physique analysis, training plans, recipes, video form feedback, and progress tracking
• Account management: to create, authenticate, and manage your account
• Personalization: to tailor fitness and nutrition guidance to your inputs
• Communication: to send analysis results, service notifications, and support responses
• Re-engagement (marketing): to send occasional reminder and offer emails if you have not used the Service for a while; you can opt out at any time in your profile settings or via the unsubscribe link included in every such email
• Payments: to process payments and manage billing if you choose a paid plan
• Service improvement: to debug, secure, and improve the Service, using aggregated or de-identified data where possible
• Legal compliance: to comply with applicable laws and respond to lawful requests
• Security and fraud prevention: to protect users and the integrity of the Service

Under Article 6 GDPR, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): to provide the Service you sign up for, including account management, body analysis, plans, and progress tracking
• Consent (Art. 6(1)(a)): for processing your physique photos and videos and the body-composition analysis derived from them, for non-essential cookies/analytics, and for any optional communications. You may withdraw consent at any time
• Legitimate interests (Art. 6(1)(f)): to secure and improve the Service, prevent fraud and abuse, and maintain logs, balanced against your rights
• Legal obligation (Art. 6(1)(c)): to comply with accounting, tax, consumer, and other legal requirements

Health-related and sensitive data

Physique photos and body-composition estimates may, in context, reveal information about your health or physical condition (special category data under Article 9 GDPR). We process such data only on the basis of your explicit consent (Art. 9(2)(a)), which you give when you choose to upload photos or videos for analysis. If you withdraw consent or delete this content, we stop the related processing.

Your uploaded photos and videos, together with your profile inputs, are processed by third-party AI models (operated by Google) to generate body-composition estimates, training plans, recipes, and exercise-form feedback. During this process:

• analysis is performed automatically using computer vision and AI models;
• during normal automated operation, no staff member views your photos or videos; human access is limited to the specific, logged circumstances described in “Staff and administrative access” below;
• derived analysis data is stored alongside your account so you can see your history;
• content may be temporarily processed or cached by our infrastructure and AI providers to deliver the result;
• processing occurs on secure, access-controlled infrastructure.

The Service does not make decisions producing legal or similarly significant effects about you within the meaning of Article 22 GDPR. AI outputs are informational estimates and you remain in control of any decisions you make. We do not use your photos or videos to train third-party AI models for unrelated purposes.

Staff and administrative access

Authorized personnel may access your account information, analysis reports, and uploaded photos and videos on a strict need-to-know basis: for customer support, safety and content moderation, troubleshooting and debugging, fraud and abuse prevention, and compliance with legal obligations. Such access is restricted through role-based permissions, granted only to a limited number of authorized administrators, and each access event is recorded in an internal audit log. We rely on our legitimate interests in operating, securing, and supporting the Service (Art. 6(1)(f) GDPR) and, where the data concerns your health, on your explicit consent (Art. 9(2)(a) GDPR).

We do not sell, rent, or trade your personal data. We share it only with processors acting on our instructions and in the limited circumstances below.

Apple Health (HealthKit) data

Data obtained from Apple HealthKit is never shared with, sold to, or disclosed to any third party, and is never used for advertising, marketing, analytics, or data mining. We use it only to provide fitness features to you, and we do not send it to any third-party AI service. The same applies to the data we write back to Apple Health: it is limited to your completed HyperBody workouts (workout type, duration, and calories), it never leaves our systems and Apple's HealthKit for any other purpose, and it is never used to profile you.

Legal requirements

• When required by law, regulation, or a valid legal request;
• To establish, exercise, or defend legal claims;
• To protect the rights, property, or safety of our users, the public, or the Company.

Business transfers

In the event of a merger, acquisition, reorganization, or asset sale, your data may be transferred as part of the transaction. We will notify you and ensure it remains protected under this Policy or an equivalent one.

We engage carefully selected providers to process personal data on our behalf under GDPR-compliant data processing agreements (Article 28). Our main sub-processors are:

• Google Cloud (Google Cloud EMEA / Google LLC): hosting, photo and video storage, compute, and job processing
• Google (AI model API): AI analysis, training plans, recipes, video coaching, and translation
• Clerk: user authentication and account identity management
• MongoDB Atlas: database hosting for your account and fitness data
• Brevo (Sendinblue, EU): transactional and notification emails and, unless you opt out, occasional re-engagement emails
• Stripe: payment processing for paid plans (when applicable)
• Apple (App Store): payment processing for subscriptions purchased in the iOS app (when applicable)
• Google Analytics: usage analytics, used only with your consent
• ipapi.co / ipwho.is: approximate IP-to-country lookup used to display prices in your local currency; only your IP address is shared

We may update this list as our infrastructure evolves. To request the current list of sub-processors, contact us at contact@hyperbody.fit.

We aim to store and process personal data within the European Economic Area (EEA). Some of our providers (for example, Google, Clerk, and Stripe) are established in or transfer data to the United States or other countries outside the EEA.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards under Chapter V GDPR, such as European Commission adequacy decisions (including the EU-US Data Privacy Framework, where the provider is certified) and/or Standard Contractual Clauses, together with additional technical measures such as encryption. You can request more information or a copy of the relevant safeguards using the contact details in Section 1.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption: data is encrypted in transit (TLS) and at rest using industry-standard protocols
• Access controls: strict, role-based access limits who can access data
• Secure infrastructure: data is hosted in reputable, certified data centers
• Monitoring and logging: we monitor for, and respond to, security events
• Vendor diligence: processors are bound by data processing agreements

No method of transmission or storage is perfectly secure. If a personal data breach is likely to result in a high risk to your rights, we will notify you and the competent supervisory authority as required by Articles 33 and 34 GDPR.

We keep personal data only for as long as necessary for the purposes described in this Policy:

• Account and fitness data: for as long as your account is active
• Photos, videos, and analysis: retained in your account so you can track progress, until you delete them or your account
• Backups and post-deletion: limited data may persist in backups for up to 90 days after deletion, then deleted or anonymized
• Payment and accounting records: retained as required by Estonian tax and accounting law (generally up to 7 years)
• Support communications: retained for up to 3 years

You can request deletion of your data at any time as described in Section 11.

Subject to the conditions in the GDPR, you have the right to:

• Access (Art. 15): obtain confirmation of and a copy of your personal data
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion of your data (“right to be forgotten”)
• Restriction (Art. 18): restrict processing in certain circumstances
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interests
• Withdraw consent (Art. 7): withdraw consent at any time, without affecting prior lawful processing

You can exercise many of these rights directly in the app, or by emailing contact@hyperbody.fit. We will respond within one month, as required by the GDPR, and may need to verify your identity first. Exercising your rights is free unless requests are manifestly unfounded or excessive.

You also have the right to lodge a complaint with a supervisory authority (see Section 15).

We use strictly necessary cookies to operate the Service (for example, to keep you signed in) and, only with your consent, analytics cookies to understand usage. We use cookies and similar technologies to:

• remember your preferences and login status;
• analyze usage and performance (with consent);
• maintain security and prevent fraud.

You can accept or decline non-essential cookies via our consent banner and manage them in your browser settings. Declining non-essential cookies does not affect core functionality.

Cookies and similar storage we use

• __session, __client (Clerk): strictly necessary cookies that keep you signed in
• _ga, _ga_* (Google Analytics): analytics cookies, set only after you accept the consent banner
• hyperbody-cookie-consent (local storage): remembers your consent choice; strictly necessary
• ps_sid (session storage): short-lived session identifier for first-party analytics, used only with your consent
• Mobile app (device storage): the HyperBody mobile app does not use cookies and does not use Google Analytics. With your consent it stores a short-lived analytics session identifier and the time of the last event on your device, and sends the same first-party usage events described above. It also stores your analytics choice so it can be applied without a network request

The Service is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with data, please contact us.

We may update this Privacy Policy from time to time. If changes are material, we will notify you by:

• posting the updated policy with a new effective date;
• sending an email notification where appropriate;
• displaying a notice in the Service.

Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy, except where your consent is required.

For any questions about this Policy or to exercise your rights, contact us:

• LibertyTechnology OÜ, Lõõtsa tn 5, 11415 Tallinn, Estonia
• Email: contact@hyperbody.fit

Right to lodge a complaint

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with a supervisory authority. You may complain to the authority in the EU or EEA country where you live, where you work, or where you believe the problem occurred. You may also contact the authority of the country in which we are registered:

• Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
• Address: Tatari 39, 10134 Tallinn, Estonia
• Email: info@aki.ee
• Web: www.aki.ee