Privacy Policy
Last updated and effective: 30 October 2026
Fitness Hub is an iPhone and Android app for running, strength training and guided breathing. It builds your training plan, puts the workouts you approve on your Garmin watch and shows how your training is going. It was built to keep your data on your phone. This policy explains what the app uses, when anything leaves your phone and where it goes, and how to delete it. Fitness Hub is developed by Abdulaziz Aloshin (“we”), and you can reach us at abdulaziz.aloshin@gmail.com.
The short version
- Your training data lives on your phone. There is no account and no email sign-up.
- We never sell your data. There are no ads, no analytics and no tracking.
- Garmin data is used only inside the app. It is never shared, never sold and never sent to an AI.
- Claude is optional. If you connect it, it sees what you choose to share and never your Garmin data, and you can disconnect it at any time.
- You can export, back up or erase everything from Settings in the app.
What stays on your phone
Your plans and sessions, how they went (done or skipped, effort, your notes), breathing sessions, your weight goal, and the health data the app reads are stored in the app's own storage on your phone, protected by the phone's file encryption. Until you connect Garmin or Claude, the app does not contact our servers at all.
Apple Health and Health Connect
If you allow it, the app reads workouts, heart rate, resting heart rate, heart rate variability (HRV), sleep, weight, VO2 max, steps and breathing rate from Apple Health on iPhone, or from Health Connect on Android. On Android it also reads the distance and active calories of each workout, and, the first time, up to 120 days of past data so that readiness has a baseline and your trends have history. Many apps write to these stores, Garmin Connect among them. The app only reads; it never writes to Apple Health or Health Connect. This data is kept on your phone, and it is never used for advertising, never sold and never used to train AI models. It leaves your phone only if you turn on the Claude connection described below. You can change what the app may read at any time: on iPhone in Settings, under Health; on Android in the Health Connect settings.
Fitness Hub's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Weather and location
On days with a run, the iPhone app can suggest slower paces and a cooler time to run when it's hot. It asks first, and only for your approximate location, never your precise one. The location goes to Apple Weather (WeatherKit) to get the local forecast, not to our servers, and the app keeps only the forecast. Location is not stored, shared or used for anything else. You can turn it off at any time in the iPhone's Settings, under Privacy & Security, Location Services.
Garmin
You connect Garmin on Garmin's own screen, where you choose which kinds of data to share. We never see your Garmin password. Depending on what you allow, Garmin sends us your activities (type, time, distance, heart rate, laps and the original activity file, which includes strength sets and the route), daily summaries such as steps, resting heart rate and stress, sleep, HRV, and fitness measures such as VO2 max. Women's health data is received only if you grant that permission separately in Garmin. Depending on what you allow, Garmin also sends us your workouts' detailed recordings (route, heart rate, pace and cadence), blood oxygen (Pulse Ox), breathing rate, stress and Body Battery, overnight skin temperature, blood pressure readings, the food and water you log in Garmin Connect, and, only if you grant that permission separately, your menstrual cycle schedule; we never keep pregnancy details. A few types Garmin can send (15-minute activity summaries, Move IQ events, Health Snapshot and breathing variations) reach your phone but are not used or kept.
How it reaches your phone
Garmin only delivers data to a server, so ours acts as a relay. The moment your data arrives, the relay encrypts it with a key that only your phone holds (it is kept in the phone's secure key storage and never leaves your phone), keeps it until your phone collects it, and then deletes it. Anything not collected within 14 days is deleted. The tokens that let us talk to Garmin for you are stored encrypted. We cannot read your Garmin data on our server.
How it is used
Only inside Fitness Hub, to show you your workouts against your plan, the sets you lifted, your recovery and your trends. Before the app sends workouts to Garmin for the first time, it asks your permission and links Garmin's privacy policy, which covers what Garmin does with the workouts you send. Only sessions you approve are sent.
What we never do with Garmin data
We never sell it, share it with third parties, send it to any AI service, or use it to train, test or evaluate AI models. It is left out of the exports you can open in other apps. Garmin Connect has its own export for that. It is included only in your encrypted backup, which only Fitness Hub can restore.
Disconnecting
In the app, go to Settings, Garmin, Disconnect Garmin. This removes Fitness Hub from your Garmin account and deletes everything the relay holds for you. You can also remove Fitness Hub from the connected apps in Garmin Connect. Either way, we stop receiving your Garmin data straight away.
Claude (Fitness Hub Pro, optional)
Fitness Hub builds programs by itself, without any AI. Fitness Hub Pro adds a connection to your own Claude, the AI assistant made by Anthropic, so you can ask Claude about your training and have it write your plan.
When you turn on Connect Claude, the app keeps a copy of your plans and sessions, your notes and effort ratings, your breathing sessions, your goals, and the last 90 days of Apple Health or Health Connect data on our server. The copy is encrypted so that only the Fitness Hub Claude connector can open it, and the app updates it when your data changes. Your Claude reads it through the connector only when you ask it something, and it can send you plans. Those arrive in the app as drafts that you approve or discard. Garmin data is never included.
You link Claude with a one-time code from the app. The server keeps a record of which Claude apps you linked and when they were last used, so you can see and remove them in the app. What you discuss with Claude, and what Anthropic does with it, is governed by your Claude account and Anthropic's privacy policy.
Settings, Claude, Disconnect Claude deletes the copy and removes every Claude's access.
You can also skip the connection and share by hand: the app hands a summary to your phone's share sheet, and you paste Claude's plan back. Nothing passes through our servers then, and the summary goes wherever you send it. Garmin data is left out of it too.
AI Transparency Statement
- The Fitness Hub app runs no AI model and calls no AI service. The programs it builds come from fixed training rules.
- The only AI involved is your own Claude, and only if you connect it or share with it by hand.
- Claude sees only what you chose to share: your plans, notes, breathing and Apple Health or Health Connect data. Garmin data is never processed by any AI and is never used to train, test or evaluate AI models.
- Nothing is shared until you explicitly turn it on in the app, and you can turn it off at any time in Settings, under Claude. Turning it off deletes the shared copy.
- Plans Claude writes arrive as drafts. Nothing reaches your watch until you approve it.
What we don't collect
No name, email or phone number, no contacts, no advertising identifier, no location tracking (routes come only from activities you record), and no analytics or tracking tools. If you allow it in your phone's settings, Apple or Google may share anonymous crash reports with us.
Who handles your data
- Supabase hosts the relay and its database in the EU (Ireland). It holds an anonymous ID, your phone's public key, your Garmin connection (encrypted tokens and the permissions you granted), encrypted relay messages, the encrypted Claude copy if you turned it on, and your consent records.
- Garmin is the source of the data you allow and receives the workouts you approve.
- Apple distributes the iPhone app and Google distributes the Android app through Google Play; each handles Pro subscriptions bought in its store. Apple Health and Health Connect data stay on your device. If you allow location for heat advice, Apple Weather receives your approximate location to return the forecast.
- Anthropic is involved only through your own Claude account, and only if you connect Claude.
- Bluehost hosts this website, including the page Claude opens when you link it. It doesn't receive your training data.
We do not sell your data or share it with advertisers or data brokers. We disclose data to others only if the law requires it.
How long we keep it
- On your phone: until you delete it or the app.
- Relay messages: deleted when your phone collects them, and after 14 days at the latest.
- The Claude copy: until you disconnect Claude.
- Your Garmin connection: until you disconnect Garmin.
- Consent records (what you agreed to, yes or no, and when): kept as proof of your consent for as long as your relay account exists.
Settings, Your data, Erase everything deletes the data on your phone, disconnects Garmin and deletes your relay account and everything stored with it. Deletion on our server happens straight away, and in every case within 30 days.
Your choices and rights
- See and export your data: Settings, Your data, Export my data gives you a JSON file (without Garmin data, as explained above). Back up everything gives you a full copy, encrypted with a passphrase you choose.
- Correct it: edit it in the app.
- Delete it: Erase everything, Disconnect Garmin or Disconnect Claude, all in Settings.
- Withdraw consent: turn off Claude sharing or workout uploads to Garmin in Settings at any time.
We hold almost nothing about you on our servers, so most of this happens in the app. You can also email us. Depending on where you live, data protection law (such as Saudi Arabia's Personal Data Protection Law or the EU's GDPR) gives you these rights, and we honour them for every user.
Security
Everything travels over HTTPS. On your phone, data is protected by the phone's file encryption. On our server, Garmin data is encrypted to your phone's key, the Claude copy is encrypted so only our connector can open it, and Garmin tokens are encrypted. If a security incident affects your data, we will tell you, and Garmin as its terms require, without undue delay.
Health and safety
Fitness Hub is a training tool, not a medical device, and it doesn't give medical advice. Check with a doctor before starting a new training program, and stop if something hurts.
Children
Fitness Hub is not for anyone under 16, and we don't knowingly collect their data.
Changes to this policy
If this policy changes, the new version will be posted here with a new date. If a change affects how we use data you've already shared, we'll tell you in the app first.
Contact
Questions about privacy, or a request about your data? Email abdulaziz.aloshin@gmail.com. See also our Terms of Service.