Sign inGet started free
Legal

Privacy Policy

Havik is a training app that adapts to evidence, and the evidence is your health and training data. This explains exactly what we collect, what we do with it, who else touches it, and how to get rid of it.

Effective August 14, 2026

The short version

  • Apple Health access is optional, read-only, and revocable. Havik never writes to Apple Health.
  • Your health data is never sold, rented, or traded, and never used for advertising or marketing.
  • Health and training data is used for one purpose: producing your training plan and your analytics.
  • Deleting your account permanently deletes the data attached to it.

Who this covers

This policy covers the Havik iOS app and the Havik website and web app. It applies to everyone who creates a Havik account.

What we collect

Account information

You sign in with Google. We receive the name, email address, and profile image associated with that Google account, plus an account identifier. We never receive your Google password.

Your training profile

What you tell us when setting up and coaching your plan: goals, training history and experience, available days and equipment, preferred units and time zone, and any injuries, constraints, or safety notes you choose to enter. Injury and constraint notes are health information you provide directly, and they are treated the same way as everything else described here.

Your training records

Plans generated for you, sessions you complete, exercises, sets, reps, weights, durations, distances, paces, efforts and RPE, session notes, check-ins, and the metrics derived from all of it — readiness, training load, thresholds, strength standards, and progress history.

Apple Health data (optional)

If you connect Apple Health, Havik requests read-only access to the categories below. You choose which to grant, iOS enforces that choice, and Havik never writes to, edits, or deletes anything in Apple Health.

  • Workouts and workout routes
  • Heart rate, resting heart rate, and heart rate variability
  • VO₂ max
  • Sleep analysis
  • Active energy burned, exercise minutes, and step count
  • Walking and running distance, cycling distance, and swimming distance
  • Body mass
  • Running speed and running power
  • Cycling power, cadence, and speed
  • Swimming stroke count

Havik works without Apple Health. You log sessions by hand instead, and readiness and recovery-driven adaptation stay unavailable until you connect it.

Device and technical data

If you enable notifications, we store an Apple push token and an installation identifier so we can deliver them. We store your time zone so sessions and reminders land on the right day. Our hosting and database providers keep standard operational logs, which can include IP address and request metadata.

Havik does not use third-party advertising SDKs, does not run analytics trackers that profile you across other apps or websites, and does not track you across services owned by other companies.

What we use it for

  • Building and adapting your plan. Recovery signals, training load, and completed sessions are what decide whether your next block advances, holds, or backs off.
  • Your analytics. Readiness, thresholds (FTP, CSS, pace and heart-rate zones), strength standards, muscle balance, and progress charts are all computed from your own history.
  • Importing workouts. Sessions from Apple Health fill themselves in so you are not logging the same workout twice.
  • Notifications you asked for. Session reminders and coaching nudges, on the schedule you set.
  • Running the service. Authenticating you, keeping your data available across your devices, fixing faults, and preventing abuse.

We do not use your data for advertising, ad targeting, or marketing profiles, and we do not sell it or share it with data brokers.

AI processing

Havik uses the OpenAI API to write coaching text, interpret what you type when logging, suggest working weights, and draft session analysis. To do that, relevant context is sent to OpenAI as part of the request — typically the session in question and recent ones (duration, distance, pace, effort, exercises, sets, reps, weights), your plan context, notes you have written, and summary figures such as your readiness score and training load.

Summaries are sent, not raw Apple Health sample streams. Under OpenAI's API data-usage policy, content submitted through the API is not used to train their models. Prompts are not tied to your name or email address, and OpenAI acts as a processor for us under their API terms.

Our Apple Health commitments

Health data — from Apple Health or derived from it — is never:

  • Sold, rented, or traded, to anyone, for any price.
  • Used for advertising or marketing, or shared with an advertising network or data broker.
  • Used for data mining, profiling, or any purpose beyond your own training.
  • Shared with another person or organization without you asking us to.
  • Stored in iCloud or any service outside the processors listed below.

Who else touches your data

We do not sell your data. We use a small number of service providers to run Havik, each handling data only to provide their service to us:

  • Supabase — database, authentication, and storage. Holds your account, profile, plans, and training and health records.
  • Vercel — hosting for the website, web app, and API.
  • OpenAI — the coaching, logging, and analysis features described above.
  • Apple — the Apple Push Notification service delivers notifications you have enabled.
  • Google — sign-in only, when you authenticate with a Google account.

We may also disclose data if legally required to, or to protect the rights and safety of our users or the service. If Havik is ever involved in a merger or acquisition, we will give notice before your data becomes subject to a different policy.

Storage, retention, and security

Data is transmitted over encrypted connections and stored on servers in the United States. Access is restricted to your own account: our database enforces per-user access rules, so one account cannot read another's records.

We keep your data for as long as your account exists, because your training history is the app. When you delete your account, it is removed. Provider backups and operational logs may retain copies for a short period before expiring on their normal cycle.

Your choices and rights

  • Apple Health. Change what you share at any time in the Health app under Sharing, or in iOS Settings › Privacy & Security › Health › Havik. Revoking it stops new reads immediately.
  • Notifications. Turn them off in the app's notification preferences, or in iOS Settings.
  • Deletion. Settings › Delete account permanently removes your account and the training and health data attached to it. You can also email us and we will do it.
  • Access and correction. You can view and edit your profile and training records in the app. For a copy of your data, or for correction or restriction of processing, email us.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA — including access, portability, correction, deletion, and the right to object. Havik does not sell or share personal information as those terms are defined under the CCPA. Contact us and we will honour any such request.

Children

Havik is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If this policy changes, we will update the effective date above, and material changes will be announced in the app before they take effect.

Contact

Questions, requests, or complaints: havik.app@outlook.com.

See also the Terms of Use.