Privacy policy

Last updated 9 October 2026

The short version

Hyve is a training and nutrition app. To work, it needs to know things about you: your body stats so it can set calorie targets, what you lift so it can track progress, and what you eat so it can plan your week.

Here is what that means in practice:

• We collect what the app needs and little else. If you never use a feature, we never collect its data.
• We do not sell your data, and we do not use it for advertising. There are no ads in Hyve.
• Your training is private by default. Friends see that you trained, never your weights. Nobody else sees anything unless you choose to make your activity public.
• Apple Health data is read, never written, and used only for the challenges you join.
• You can delete your account at any time from Settings, and your data goes with it.

The rest of this policy explains each of these in detail. Where something is technical, there is an example.

Who we are

Hyve is run by Tyrese Cockings, of 107 Dunsmore Avenue, Coventry CV3 3JF, United Kingdom. In this policy, "Hyve", "we" and "us" mean him. "You" means anyone with a Hyve account.

For UK data protection law, we are the data controller: we decide what information is collected and why, and we are responsible for looking after it.

If you have a question about your data, want a copy of it, or want something corrected or deleted, email privacy@hyve.ac. A real person reads that inbox. We aim to reply within a week and will always reply within one month, which is the legal limit in the UK.

Hyve is currently invite-only and in testing. Some features described here may change before a wider release, and this policy will be updated when they do.

What we collect

Everything below is either something you type in, something you do in the app, or something your phone tells us when you allow it. We do not buy data about you from anyone.

Your account

• Email address and password. Used to sign you in. Your password is stored as a one-way scrambled code by our login provider, so nobody at Hyve can see it.
• Your handle, for example @sam_lifts. Friends find you by it.
• Region, units and time zone. For example, UK, kilograms and Europe/London. These decide whether you see pounds or kilograms, which shops are relevant, and which day your Monday starts on.
• The invite code you used to join. Kept so we know which codes have been used.

Your body and goals

You enter these during sign-up so Hyve can work out your daily calorie and protein targets.

• Goal: cut, maintain or bulk.
• Weight, height, date of birth and sex. Example: 84 kg, 180 cm, 15 August 1995, male. The calorie formula uses all four, so a wrong date of birth gives you the wrong target.
• Activity level and, if you choose to add it, body fat percentage.
• Weigh-ins you log over time, which let Hyve adjust your targets if your weight is moving faster or slower than planned.

Under UK law, information about your body counts as health data, which gets extra protection. See the legal bases section for how we handle it.

Your training

• Workouts and every set you log. Example: Bench press, 80 kg, 8 reps, logged at 18:42 on Tuesday.
• Programmes you follow or build, the days you train, rest timer settings, and personal records the app detects.
• Badges, XP and streaks you earn from training and logging.

If you log a set with no signal, it is saved on your phone first and sent to us when you reconnect. Nothing is lost, and nothing is sent to anyone else in the meantime.

Your food

• Diet preferences, for example high protein or plant based, and foods you avoid, for example nuts or fish. If you tell us about an allergy, that is health data and is protected as such.
• Meals you log, with their calories and macros. Example: Overnight oats, 420 kcal, logged for breakfast on Monday.
• Your meal plans, shopping lists and the items you mark as already in your cupboard.
• Meals per day, how many people you cook for, and your weekly food budget, which shape the plan and the shopping list.
• Recipes you import. If you paste a web link, we fetch that page to read the ingredients. If you take a photo of a recipe card, the photo is sent to our recipe reader to pull out the ingredients and quantities. The photo is deleted as soon as the ingredients have been read. We keep the ingredients and quantities, which are facts. We do not keep a recipe's method text or photos.

Barcodes

When you scan a product's barcode, the number is looked up in Open Food Facts, a free public food database, to find its nutrition information. Only the barcode number is sent. Your identity is not.

Your device

• Notification permission and a device token, if you allow notifications. Used only to ring your cook timers. Example: "Rice is ready" when a 12-minute timer ends.
• Live Activity data, if you allow it: your current rest timer and next set, shown on your Lock Screen. This stays on your phone.
• Information kept on your phone to make the app work offline, such as your current workout, so you can keep training in a gym with no signal. This is stored on the device, not shared, and cleared when you sign out.

How the app is used and when it breaks

• Usage events, for example "opened the meal plan" or "finished a workout", so we can see which features help people and which confuse them. These are tied to a random ID, not your name or email, plus your region (UK or US) and your goal (cut, maintain or bulk). They never include what you eat, what you lift, your body stats or anything you type. We also record which screens you open, your device model, iOS version and app version. We do not record your IP address or location, and we do not record your screen. You can switch usage events off at any time in Settings, under Share usage analytics.
• Crash reports, sent automatically if the app crashes or hits an error, containing technical details such as the error, the screens you passed through just before it, your device model, iOS version and app version, and a random ID so we can tell whether one person or many are affected. Passwords, sign-in tokens, email addresses, anything you type and your IP address are removed before a report is stored. Crash reports are not switched off by the usage analytics setting, because we need them to keep the app working.

Things you tell us directly

If you email us, report another user, or block someone, we keep what you send and the action you took. Reports and blocks are covered in the next sections.

Apple Health

Hyve can read two things from Apple Health, and only if you allow it: your step count and your workouts. It never writes anything to Apple Health.

We use this for one purpose: to count progress in challenges you choose to join. Example: you join a seven-day steps challenge with a friend, and each day Hyve reads your step total so the standings stay up to date.

Some specific promises, because Apple requires them and because they are right:

• Health data is never used for advertising or marketing, and never sold or given to data brokers.
• It is never shared with anyone except as needed to run a challenge you joined. Your opponents see your challenge total, for example "41,200 steps", not your daily Health records.
• Steps you typed into Health by hand are ignored, so challenge totals reflect steps your phone counted.
• You stay in control. You can turn off Hyve's access at any time in the iPhone Settings app, under Privacy & Security, Health. Hyve keeps working; only steps challenges stop updating.

One thing worth knowing: iPhone does not tell any app whether you allowed it to read a particular kind of Health data. That is Apple's privacy design. So Hyve's Health screen shows those permissions as unknown rather than guessing.

What other people can see

Hyve has a social side, and you decide how much of it you take part in. Your weights, your food and your body stats are never shown to anyone.

Public activity is off by default. You can switch it on or off in Settings at any time. Switching it off stops new items being public; items already posted publicly while it was on stay visible until you delete your account.

Leagues and badge rarity only appear once enough people use Hyve for the comparison to mean something, at least 30 people for leagues and 100 for badge rarity. Below that, nothing is shown.

Blocking and reporting

• If you block someone, they can no longer find you, see your feed items, or be placed in a challenge or league with you, and you will not see theirs. Any friendship between you ends. You can unblock people in Settings, under Blocked.
• If you report someone, we record your reason, the account and, if you reported a specific post, that post. The person you report is not told who reported them. We review reports and may remove content or close accounts that break our rules.
• Reports are kept for 12 months, then deleted. If either person deletes their account during that time, the report is kept but your identity is removed from it, so that deleting an account cannot be used to erase a report.

How we use it, and why we are allowed to

UK data protection law requires us to name a lawful reason, called a legal basis, for each use of your information. US readers can treat this table as a plain list of what we use your data for.

Withdrawing consent. Where we rely on consent, you can withdraw it at any time: turn off Health or notifications in your iPhone settings, switch off public activity in Hyve, or remove your body stats and allergies and delete your account. Withdrawing consent does not affect anything we did before you withdrew it, and some features will stop working without the data they depend on. For example, Hyve cannot set calorie targets without your body stats.

Who we share it with

We use a small number of companies to run Hyve. Each one only receives what it needs to do its job, and each is bound by a contract that stops it using your data for its own purposes.

UK price estimates come from the Office for National Statistics' published average prices. Nothing about you is sent to the ONS; we only download their figures.

We may also share information if the law requires it, for example a valid court order, or to protect someone's safety. If Hyve is ever sold or merged, your data would move to the new owner under this same policy, and we would tell you first.

What we never do

• Sell your data, or "share" it for advertising as the term is used in California law.
• Show ads, or let advertisers use anything about you.
• Track you across other apps or websites. Hyve does not use advertising identifiers, so you will not see Apple's "Allow tracking?" prompt.
• Use Health data for anything but challenges you joined.
• Show your weights, food or body stats to anyone, including friends.
• Train AI models on your personal data. When a recipe photo or page is read for ingredients, it is processed to answer that one request.

How long we keep it

We keep your information for as long as you have an account, because your training history and plans are the point of the app.

Deleting your account is in Settings, under Account, Delete account. When you confirm it:

• Your account, profile, body stats, workouts, food logs, plans, shopping lists, friendships and feed items are deleted from our live database straight away.
• Your XP history is stripped of anything that identifies you.
• Your usage analytics profile is deleted, and crash reports linked to your random ID expire within 30 days.
• Reports you made or that were made about you are kept for the rest of their 12 months with your identity removed, as explained above.
• Copies in our hosting provider's backups are overwritten on their normal cycle, within 30 days.

If an account is unused for a long time, we may contact you before deleting it.

Your rights

You can ask us to do any of the following by emailing privacy@hyve.ac from the address on your account. We may ask a question to confirm it is you. It is free, and we will answer within one month.

• See your data. We will send you a copy of everything we hold about you.
• Take it with you. We will send it in a common format, such as a spreadsheet or JSON file, that another service can read.
• Correct it. Most of it you can fix yourself in Settings, under Your numbers. For anything else, ask us.
• Delete it. Do it yourself in Settings, or ask us to.
• Object, or ask us to limit what we do with it, for example to stop usage analytics. You can also do that yourself in Settings, under Share usage analytics.
• Withdraw consent for anything that relies on it, as explained above.

If you are in the UK

Those rights come from the UK GDPR and the Data Protection Act 2018. If you are unhappy with how we handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

If you are in the US

Depending on your state, for example California, Virginia or Colorado, you have rights to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or use for targeted advertising. We do neither of those last two, so there is nothing to opt out of. We will not treat you differently for using any of these rights.

Some states treat health and fitness information as especially sensitive. We only use it to provide the features you asked for, as described in this policy.

Security

Your data is encrypted while it travels between your phone and our servers, and stored with a hosting provider that encrypts it at rest. Access is restricted so that each account can only read and change its own data; the database itself enforces this, not just the app. Passwords must be at least eight characters and mix letters, numbers and symbols.

No system is perfectly secure. If we ever discover a breach that puts your information at risk, we will tell you and the ICO as the law requires, normally within 72 hours of finding out.

Data stored outside the UK

Our database is hosted in the United States (Oregon), and some of the other companies listed above are also based in the United States. When UK users' data is stored or processed there, we rely on the safeguards UK law allows for this, such as the UK International Data Transfer Addendum, or the UK-US data bridge where a provider has joined it.

Children

Hyve is not meant for anyone under 18. It sets calorie targets and tracks body weight, which are not suitable for children without guidance. If you are under 18, please do not create an account. If we learn that a child has signed up, we will delete the account.

Changes to this policy

If we change how we use your information, we will update this page and the date at the top. If a change is significant, for example a new kind of data or a new way of sharing it, we will tell you in the app before it takes effect.

Contact

Tyrese Cockings, 107 Dunsmore Avenue, Coventry CV3 3JF, United Kingdom, privacy@hyve.ac