This Privacy Policy explains how VYKO TECHNOLOGIES LTD (“VYKO”, “we”, “our”, “us”) collects, uses, stores, and shares personal data when you use HyperResponder, including our mobile app, website, and related services.

HyperResponder is a workout logging and progress tracking app that uses AI and natural language processing to convert free-form workout notes into structured workout data and insights.

We are the data controller for personal data processed through HyperResponder under the UK GDPR.

1. Who We Are

Company: VYKO TECHNOLOGIES LTD
Company registration number: 16534635
Registered address: 52 Rupert Street, London, W1D 6DS
ICO registration number: ZB935904
Contact email: team@hyperresponder.com

We are based in the United Kingdom, but HyperResponder may be used by users outside the UK.

2. Data We Collect

We may collect and process the following categories of data.

Account data

This may include:

• email address;

• username or display name;

• login provider information;

• authentication identifiers;

• account settings;

• subscription entitlement status.

If you sign in using Google or Apple, those providers may share limited information with us, such as your email address or authentication identifier, depending on your settings.

Workout and fitness data

This may include:

• free-form workout entries;

• parsed workout data;

• exercises;

• sets;

• reps;

• weights;

• bodyweight entries used for bodyweight exercise tracking;

• workout duration;

• workout history;

• training notes;

• custom program notes;

• progress trends;

• achievements;

• shared logs or achievements;

• estimated calorie burn;

• related app-generated insights.

You choose what to enter. Some workout notes may reveal information about your fitness, body, health, injuries, or training condition if you include that information.

AI processing data

When you submit free-form workout text, we may send relevant text to OpenAI API services so the app can parse and structure your workout entries.

AI processing is used to provide core app functionality, such as converting notes into structured exercise data.

Device, usage, and technical data

This may include:

• device type and model;

• operating system;

• app version;

• crash logs;

• diagnostics;

• performance data;

• approximate usage events;

• error reports;

• security logs.

Subscription and purchase data

Payments are processed through Apple’s in-app purchase system. We use RevenueCat to manage paywalls, validate purchases, manage subscription status, and unlock paid entitlements.

We may process purchase-related information such as:

• product ID;

• subscription status;

• trial status;

• renewal, expiry, or cancellation status;

• transaction identifiers;

• app user identifiers;

• platform receipt or validation tokens.

We do not directly collect or store your full payment card details.

If HyperResponder becomes available through Google Play, Google Play purchase data may also be processed for subscription validation and entitlement management.

Website analytics data

Our website may use analytics tools such as Google Analytics and Framer analytics to understand website traffic and performance.

This may include:

• pages visited;

• approximate location;

• device and browser information;

• referral source;

• time on page;

• interactions with the website.

Our website does not currently include a waitlist form, newsletter signup, or visitor submission form.

3. Cookies and Similar Technologies

We do not knowingly use advertising pixels or marketing cookies on the HyperResponder website.

We have removed Meta Pixel, TikTok Pixel, Reddit Pixel, MailerLite tracking, and the previous cookie banner setup.

Our website may still use cookies or similar technologies that are strictly necessary for hosting, security, analytics, performance, or basic website operation. Google Analytics and Framer analytics may use cookies or similar identifiers depending on configuration and browser settings.

You can control cookies through your browser settings. Blocking some cookies may affect website performance or functionality.

If we introduce new non-essential cookies, advertising pixels, newsletter tools, or marketing tracking in the future, we will update this Privacy Policy and, where required, provide a consent mechanism.

4. How We Use Your Data

We use personal data to:

• create and manage your account;

• let you log, save, edit, and view workouts;

• parse free-form workout notes into structured workout data;

• generate workout history, progress trends, achievements, estimates, and insights;

• provide custom program and note features;

• allow sharing of logs or achievements where you choose to use sharing features;

• manage subscriptions, paywalls, trials, renewals, and paid entitlements;

• show ads in the app where applicable;

• maintain, debug, secure, and improve the app and website;

• analyse app and website performance;

• prevent fraud, abuse, misuse, and unauthorised access;

• respond to support, legal, privacy, or account requests;

• comply with legal obligations.

We do not sell your personally identifiable information.

We may use aggregated or anonymised information for analytics, product improvement, research, commercial insight, or reporting. Aggregated or anonymised information does not identify you.

5. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases.

Contract

We process data where necessary to provide HyperResponder, manage your account, process your workout logs, provide app features, manage subscriptions, and deliver the service you request.

Legitimate interests

We process data where necessary for legitimate business interests, including app security, debugging, analytics, fraud prevention, service improvement, product development, and understanding how users interact with the app and website.

Consent

We rely on consent where required, including where you voluntarily provide information that may reveal health or fitness-related information, where required for certain analytics or tracking technologies, and where future marketing communications require consent.

Legal obligation

We may process data where necessary to comply with law, regulatory obligations, tax, accounting, consumer protection, platform requirements, or lawful requests.

Special category data

HyperResponder is a fitness app. The information you choose to enter may include or imply health-related information.

Where your workout entries, notes, bodyweight data, or related inputs constitute special category data under UK GDPR, we process that information on the basis of your explicit consent and because it is necessary to provide the fitness tracking features you choose to use.

You can withdraw consent by deleting your account or contacting us, but this may prevent us from providing the service.

6. Third-Party Services

We use trusted third-party services to operate HyperResponder.

These may include:

• Firebase / Google Cloud: app infrastructure, authentication, database, storage, diagnostics, analytics, and security;

• OpenAI API: AI and natural-language processing for workout text parsing;

• Apple: App Store distribution, Apple sign-in, in-app purchases, subscriptions, and platform services;

• RevenueCat: paywalls, purchase validation, entitlement management, subscription analytics, and subscription status;

• Google: Google sign-in, analytics, Firebase services, and future Google Play distribution where applicable;

• Framer: website hosting, website performance, and possible website analytics;

• Google Analytics: website traffic and usage analytics;

• Zoho Mail or relevant email provider: support, legal, and contact email handling;

• domain, DNS, hosting, and security providers needed to operate the website and service.

These providers process data either as our processors, independent controllers, or platform providers depending on the service. Their processing is also governed by their own terms and privacy policies where applicable.

We do not share your private workout entries, personal notes, or detailed workout logs with advertising networks for targeted advertising.

7. AI Processing

HyperResponder uses OpenAI API services to help parse free-form workout text into structured workout data.

We send the information needed to perform the parsing task. This may include the workout text you submit and related context required to interpret it.

We use AI processing to provide core app functionality. AI outputs may be inaccurate, incomplete, or inconsistent. You should review and correct parsed logs where needed.

We do not use OpenAI API processing to intentionally create public profiles about you, make medical decisions, or provide professional health advice.

8. Advertising

HyperResponder may show ads in the app.

Ads may be displayed to support free or lower-tier app experiences. Advertising systems may process technical identifiers, device information, ad interaction data, or platform-level advertising information.

We do not provide advertising networks with your private workout notes, parsed workout logs, bodyweight data, or personal training history for ad targeting.

You can manage ad personalisation through your device or platform settings, including Apple advertising settings on iOS.

The HyperResponder website does not currently use Meta Pixel, TikTok Pixel, Reddit Pixel, or other paid advertising pixels.

9. International Transfers

Some of our providers may process or store data outside the United Kingdom or European Economic Area.

Where this happens, we use appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, UK international data transfer agreements or addenda, data processing terms, or other lawful transfer mechanisms.

10. Data Security

We use technical and organisational measures designed to protect personal data, including:

• encryption in transit;

• access controls;

• authentication controls;

• secure cloud infrastructure;

• monitoring and diagnostics;

• restricted access to production systems;

• backups and recovery processes;

• internal data minimisation practices.

No online service can guarantee complete security. You are responsible for keeping your account credentials safe and for protecting access to your device.

11. Data Retention

We keep personal data only for as long as needed for the purposes described in this Privacy Policy.

Workout logs, account data, and app data are kept while your account remains active, unless deleted earlier.

When you delete your account, associated personal data and workout data are deleted from active systems. Backup copies may be retained for a limited period for security, legal, or disaster recovery purposes before being overwritten or deleted.

Anonymous or aggregated analytics may be kept for longer because it does not identify you.

We may retain limited records where required for legal, tax, accounting, fraud prevention, dispute resolution, or platform compliance purposes.

12. Your Rights

Depending on your location and applicable law, you may have the right to:

• access personal data we hold about you;

• correct inaccurate data;

• request deletion of your data;

• request restriction of processing;

• object to certain processing;

• withdraw consent where processing is based on consent;

• request a copy of your data;

• complain to a data protection authority.

In the UK, you can complain to the Information Commissioner’s Office.

To exercise your rights, contact us at team@hyperresponder.com.

We may need to verify your identity before fulfilling a request.

13. Account Deletion

You may delete your account through the app where available or by contacting us.

Deleting your account may permanently remove your workout logs, notes, custom program data, achievements, subscription-linked app data, and other account information from active systems.

Deleting the app from your device does not automatically cancel an active Apple subscription. You must cancel subscriptions through your Apple account settings.

14. Children’s Data

HyperResponder is intended for users aged 16 and over.

We do not knowingly collect personal data from users under 16. If we become aware that a person under 16 has provided personal data, we may delete the account and associated data.

We do not knowingly show personalised ads to users under 18.

15. Emails and Communications

Our website does not currently collect newsletter, waitlist, or beta signup submissions.

If you contact us by email, we process your email address, message content, and related correspondence data so we can respond and manage the request.

We may send essential service, account, legal, billing, or security communications where necessary. We will only send marketing emails where we have a lawful basis to do so.

16. App Store and Platform Services

HyperResponder is distributed through the Apple App Store.

Apple may process data as an independent controller for App Store downloads, Apple sign-in, in-app purchases, subscriptions, refunds, device services, and platform analytics.

If HyperResponder becomes available through Google Play, Google may process data as an independent controller for Google Play downloads, Google sign-in, purchases, refunds, device services, and platform analytics.

You should review the relevant Apple and Google privacy policies for details of their processing.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make significant changes, we may notify you through the app, website, email, or another reasonable method.

The latest version will be available on the HyperResponder website.

18. Contact

For privacy, data protection, account, or legal questions, contact:

Email: team@hyperresponder.com

Company: VYKO TECHNOLOGIES LTD
Registered address: 52 Rupert Street, London, W1D 6DS
Company registration number: 16534635
ICO registration number: ZB935904