Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how Ascend ("we", "us", the "App") collects, uses, and protects your personal data when you use the Ascend mobile application. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR). If you have any questions, contact us at hyrudotcom@icloud.com.

1. Data we collect

• Account data: your email address, used to create and secure your account. Your password is handled and stored in hashed form by our authentication provider; we never see it in plain text.
• Training data (health & fitness): the workouts you log — exercises, sets, repetitions, loads, effort ratings, dates, and your selected program and progress.
• Account identifier: a unique user ID that links your training data to your account.

We do not collect your location, contacts, photos, browsing history, or device advertising identifiers. We do not use analytics or tracking, and we do not use your data for advertising or share it with advertisers or data brokers.

2. How and why we use your data (legal bases)

• To provide the App (create your account, store and sync your training across your devices): processing necessary for the performance of our contract with you (Art. 6(1)(b) GDPR).
• Optional reminders (local notifications): based on your device permission, i.e. your consent (Art. 6(1)(a) GDPR). You can revoke this at any time in your device settings.
• Security and integrity of the service: our legitimate interest (Art. 6(1)(f) GDPR).

3. Storage and processors

Your data is stored locally on your device and, when you sign in, synced to our backend provider Supabase (PostgreSQL database and authentication), which processes data on our behalf as a data processor. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

4. Retention

We keep your data for as long as your account exists. When you delete your account, your account and all associated training data are permanently deleted from our systems.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You may withdraw consent (e.g. for notifications) at any time.

• Delete your account and data: in the App, open Progress → Delete account.
• Other requests: email hyrudotcom@icloud.com.

You also have the right to lodge a complaint with your local data protection supervisory authority.

6. Children

Ascend is not directed to children under 16, and we do not knowingly collect data from them.

7. Security

Data is encrypted in transit (HTTPS/TLS). Access to your data is restricted to your authenticated account through row-level security on our database.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact

Ascend — hyrudotcom@icloud.com