PRIVACY

Where this policy applies.

This policy applies to the Hoopser iOS apps, the services they connect to at hoopser.org, and this website. In this policy, “Hoopser”, “we”, and “us” refer to the operator of the Hoopser service.

You choose whether to create an account, connect another fitness service, import from Apple Health, save recordings to Apple Health, enable notifications, or make an activity visible to other people.

Information we collect.

Account and profile

Your name, email address, profile photo, sign-in provider, account settings, privacy settings, and optional profile details such as biological sex, date of birth, height, weight history, and cycling FTP.

Activities and fitness

Workout type, dates and times, precise route coordinates, distance, speed, pace, elevation, temperature, calories, heart rate, cadence, power, pauses, sensor battery details, uploaded FIT/GPX/TCX files, derived statistics, fitness trends, segment efforts, and personal bests.

Content and community activity

Activity titles and descriptions, photos, comments, kudos, follows and follow requests, direct messages, notification preferences, feedback, and your interactions with the feed.

Connected services

If you connect a third-party fitness service, we receive the provider account identifier, granted permissions, connection status, and the workout, fitness, profile, or zone information you ask Hoopser to import. Provider credentials are stored in encrypted form. If you export an activity, we send that activity to the provider you selected.

Device and operational information

Push-notification tokens, app and operating-system information, IP address, request timing, security events, and error or diagnostic information needed to operate, protect, and troubleshoot the service. Hoopser does not include precise route coordinates, authentication tokens, or message contents in application logs.

When you visit hoopser.org, Cloudflare and the site host may process your IP address and standard web-request information to resolve, secure, and deliver the website. The landing page may request fonts from Google Fonts. We do not use advertising cookies or website analytics.

Health data stays permissioned.

Hoopser accesses Apple Health only after you enable a specific feature and approve the corresponding Health permission.

• Workout import: workouts and routes, heart rate, cycling cadence, cycling and running power, cycling and running speed, and cycling or walking/running distance.
• Profile sync: body mass, height, biological sex, and date of birth, limited to the profile fields you enable.
• Workout export: when enabled, Hoopser may save a recorded workout, route, distance, pauses, heart rate, power, cadence, and estimated active energy to Apple Health.

We do not use HealthKit data for advertising, marketing, cross-app tracking, sale, or disclosure to data brokers. It is used to provide health and fitness functionality you request.

Imported Apple Health data is transmitted to Hoopser’s servers and retained with your account so the activity can be processed and displayed. Data written to Apple Health is also governed by your Apple Health and iCloud settings. Disabling sync or revoking permission stops future access; it does not remove activities already imported into Hoopser.

How we use information.

• Authenticate your account and maintain your profile.
• Record, import, store, process, and display activities and routes.
• Calculate fitness summaries, training zones, splits, climbs, efforts, and personal bests.
• Provide feeds, follows, comments, messages, notifications, and activity discovery using the audience and privacy controls you select.
• Synchronise with services you connect and export activities when you request it.
• Respond to support and feedback, prevent abuse, secure accounts, diagnose faults, and improve reliability.
• Comply with legal obligations and enforce our rights.

When information leaves your account.

Other Hoopser users

Your profile and activities may be visible according to your account privacy and each activity’s audience: public, followers, or private. Route trimming, map hiding, and individual-stat controls reduce what permitted viewers can see. Direct messages are visible to conversation participants.

Services you connect

When you authorise an integration, Hoopser exchanges information with that provider according to the permissions and actions you select. Those providers process information under their own privacy policies.

Service providers and legal requirements

We use providers for hosting, storage, content delivery, email, authentication, push notifications, and operational error monitoring. They receive only the information needed to perform services for Hoopser. We may also disclose information if legally required, to protect users and the service, or as part of a business transfer subject to appropriate safeguards.

We do not sell personal information or HealthKit data, and we do not share it for third-party advertising or cross-app tracking.

Your choices and rights.

• Change profile, account privacy, activity audience, route, map, and stat visibility settings in the app.
• Disconnect fitness providers and disable Apple Health import, profile sync, or workout export.
• Disable push notifications in Hoopser or iOS Settings.
• Edit or delete your activities and profile information.
• Request account deletion in Profile → Edit Profile → Delete account.
• Contact us to request access, correction, deletion, restriction, objection, or portability where applicable.

Retention and deletion.

We retain account information and content while your account is active and as needed to provide the service. Retention may also be required for security, fraud prevention, dispute resolution, and legal obligations.

Deleting an individual activity removes it from normal use and visibility. While your account remains open, its underlying record may be retained to prevent the same provider workout from being imported again and to preserve service integrity.

Account deletion requires email confirmation. Once confirmed, account records and associated stored workout files, route images, activity media, and profile images are scheduled for deletion. Limited information may remain temporarily in backups or operational logs before routine expiry, or where retention is legally required.

How we protect information.

Hoopser uses encrypted network transport, access controls, restricted production credentials, and encrypted storage for connected-provider credentials. No system can guarantee absolute security, so please use a unique password and contact us if you suspect unauthorised access.

Hoopser may process information in countries other than your own through its service providers. Where required, we use appropriate safeguards for international transfers.

Updates to this policy.

We may update this policy when the product, providers, or legal requirements change. The current version and effective date will remain available at this URL. Material changes will be communicated through the app or another appropriate channel.

Questions or requests.

Contact Hoopser about privacy, account deletion, or data rights using the address below. To help us protect your account, we may need to verify your identity before completing a request.