- Records are stored on your device first. Signing in and completing the required consent steps connects supported records and progress photos to your private cloud account.
- We do not sell personal information or use your health records for targeted advertising.
- You can export records, delete your account, or contact us about your privacy rights.
Who is responsible
HOPE is operated by THA MOTORS TRADING - FZCO, the controller of personal information for this service. Our address is Dubai Digital Park, Dubai Silicon Oasis, Building A1, Dubai, United Arab Emirates.
For privacy questions or requests, contact support@hopetraining.app.
Information you provide
Account information includes your email address, account identifier and sign-in provider. Apple, Google and Firebase process the authentication information needed for your chosen method. We do not ask you to send your password to support.
Profile and fitness records can include date of birth, sex, height, weight, goals, training experience, equipment, schedule, dietary preferences and allergies; workouts, sets, repetitions, loads and effort ratings; meals, nutrients and water; body measurements, progress photos, recovery entries, habits, supplements and coach conversations. Some of this information can reveal sensitive health information.
You choose the records and photos you enter. The current coach produces suggestions from rules and your records; messages and photos are not sent to an external generative-AI provider in this version. Apple Health and Health Connect data import is not active in this version. We will explain and obtain any required permissions before enabling additional processing.
On your device and in your cloud account
HOPE stores records on your device. Once you sign in and complete the required consent steps, supported records and progress photos sync with Firebase. Changes require a connection to reach the cloud. Account and sync status are shown in Settings → Account.
Cloud access rules restrict access to your account’s records. This is not end-to-end encryption. Signing out can let you keep or remove this device’s records; keeping them means someone with access to your unlocked phone may still see them. Account deletion and device-only deletion are different actions.
Widgets and notifications may show summaries on your home or lock screen. Use the app and device settings to control them. Exports, shared reports, operating-system backups and copies already stored elsewhere are managed separately.
Usage, diagnostics and external requests
We record limited first-party usage events, such as setup completion, consent version, a meal being logged, and a workout’s set count and duration. These events can be associated with your HOPE account. They do not contain meal contents, body measurements or coach-message text. We do not use Google Analytics or advertising analytics in the app.
Firebase Crashlytics processes crash diagnostics, including device and app information, installation identifiers and error traces. Firebase App Check and authentication services process technical signals and tokens to help protect the service. Infrastructure providers may also process connection and security logs.
When you look up a product barcode, the barcode and connection information are sent to Open Food Facts. Remote exercise images or videos may send your IP address, requested asset and connection information to their hosting providers.
If you email us, Google Workspace processes your address, message and attachments so we can respond. The app’s feedback draft can include app version, platform and device model; you can review or remove those details before sending.
This website has no advertising pixels, visitor analytics or tracking cookies added by us. Website hosting through Cloudflare can process IP addresses, requested pages and browser/connection information for delivery and security. Clicking an email link opens your email app; it does not submit a form or send a message automatically.
Why we use information
We use necessary information to provide accounts and sync, calculate fitness targets and progress, keep records, respond to support, prevent abuse, diagnose failures and meet legal obligations.
The applicable legal basis can be a contract, a legal obligation, legitimate service/security interests balanced against your rights, or consent. Where required, health information needs your separate explicit consent. Accepting terms or reading a privacy policy does not replace that consent.
You may withdraw consent by contacting us. To stop new account syncing immediately, sign out; to remove your account and associated records, use the deletion options. Withdrawing consent does not make earlier lawful processing unlawful. Some features cannot work without the information they require.
Providers and processing locations
We use Google Firebase/Google Cloud for authentication, private data/photo storage, syncing, server functions, app verification and crash diagnostics; Open Food Facts for requested barcode lookups; media hosts for exercise assets; Google Workspace for support; and Cloudflare for this website.
Our operator is in the UAE. HOPE’s Firestore database, progress-photo storage and server functions are configured in europe-west1, Belgium. That does not mean all information stays in Belgium: authentication, crash reporting, email, media and web infrastructure providers can process information in other countries, including the United States.
International transfers must satisfy the safeguards required by applicable law. You may ask us about relevant safeguards. This policy does not replace any required contractual or other transfer arrangements.
We may disclose information when required by law or when necessary to protect the service and users. We do not sell or rent personal information. Subscription processing and external generative-AI services are not connected in this version; before adding them, we will update the information and obtain any consent required.
Retention and deletion
Device records remain until you remove them. Cloud records remain while your account is maintained. Account deletion removes the account’s active Firebase records and stored photos and then its sign-in account. Interrupted cleanup is retried.
A minimal deletion record containing the account identifier and deletion status/timestamps prevents stale sessions from recreating deleted records. After successful cleanup, it is scheduled to expire after 24 hours; automatic removal can occur later. A pending record remains until cleanup succeeds.
Provider-managed recovery copies and security/diagnostic logs follow the applicable service retention settings and may outlast deletion from the active app. Support correspondence is retained as needed to resolve requests, handle disputes and meet legal obligations. Contact us for a deletion request covering support records or information held by a provider.
Deleting your HOPE account does not remove exports you sent, other people’s copies or operating-system backups. App deletion alone does not delete your cloud account. Store subscriptions, if any, must be cancelled separately.
Your controls and rights
Settings → My data provides an export option. Settings → Account → Delete my account starts account deletion after identity verification. If you cannot access the app, you can request deletion by email through our deletion page.
Depending on your location and applicable law, you may have rights to access, copies, correction, deletion, portability, restriction, objection and withdrawal of consent, and to complain to a data-protection authority. Write to support@hopetraining.app. We ask only for information needed to verify your request, never your password or verification codes.
We respond within the applicable legal period and explain any permitted extension. To appeal a decision about your request, write to the same address with the subject Privacy appeal. For records held only on your phone, we can guide you through local export or deletion.
Age, security and changes
HOPE is intended for people aged 16 and over. Contact us if you believe a child’s information has been improperly processed.
We use authentication, account access rules and transport/storage security. No system can guarantee absolute security. Protect your phone lock and account access.
We update this policy as the app, providers or law change. The date above identifies this version. We provide any required notice and obtain new permissions when a new use requires them.