Privacy Policy
Last updated: 4 October 2026
1. Introduction
Welcome to Crave Fitness (“Crave,” “we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Crave Fitness website and iOS application (together, the “Service”).
2. Information we collect
2.1 Account information
An account is optional. You can use Crave to log sessions and plan the week on this device without registering. We ask for an account only when you want training to follow you to another device or to sync Apple Health. When you create an account, we collect email address; password (stored securely by our authentication provider; we do not store plain-text passwords); and full name and profile details you choose to provide (for example height or weight).
2.2 Apple Health / HealthKit (iOS)
On iOS, if you grant permission, Crave may read workouts and activity history; heart rate associated with workouts; active energy; distance for walking, running, cycling, and swimming; and GPS workout routes (where available) for maps and Explore. Crave does not write data to Apple Health. HealthKit access is optional; you can revoke it in iPhone Settings → Health → Data Access & Devices. We do not use HealthKit data for advertising, marketing, data mining, or sale to data brokers. Route points come from workouts you already saved in Apple Health; we do not use device location for continuous background tracking.
2.3 Fitness data from Apple Health
When you connect Apple Health on iOS, we may collect and store workout activities, duration, distance, timestamps, heart rate, calories, related metrics you authorise, and downsampled GPS route points for maps and Explore.
2.4 Data you enter in Crave
Strength workouts, sets, plans, goals, notes, and similar information you enter are stored in your account.
2.5 Platform connection data
When you connect Apple Health, we may store connection status, last sync timestamps, and authorisation state for HealthKit data types you grant.
3. How we use your information
We use your information to provide and maintain the Service (analytics, plans, workouts, progress); sync authorised data from Apple Health; show maps of your past routes and Explore nearby roads; improve reliability; respond to support; and comply with legal obligations. We do not sell your personal information. We do not use Apple Health / HealthKit data for advertising or for any purpose other than providing health, fitness, and related map features in Crave.
4. Data storage and security
Account and app data are stored with our providers (including Supabase) with encryption in transit (HTTPS/TLS). Access to your rows is restricted with authentication and Row Level Security where configured.
5. Third-party services
- Supabase: authentication and database
- Apple: Apple Health / HealthKit on iOS
- Vercel: hosting and API deployment
- Analytics: if enabled, aggregated product analytics. We do not use ATT / IDFA for cross-app tracking.
6. Your rights
You may access and correct your account information; disconnect Apple Health at any time; delete your account and associated Crave data in the app under Settings → Account → Delete account; and contact us about privacy questions.
7. Data retention
We retain your Crave account data while your account is active. When you delete your account, we delete associated stored data as soon as reasonably practicable (typically within 30 days), except where we must retain limited information for legal or security reasons. Deleting your Crave account does not delete data stored in Apple Health on your device.
8. Children’s privacy
The Service is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age.
9. Changes
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date.
10. Contact
Questions: privacy@cravefitness.co.uk