HighFive (“we”, “us”) builds a fitness tracking application for iOS, Apple Watch, and the web at high5workout.com. This policy explains what we collect, why, and how to control it.
What we collect
- Account info — email, display name, optional avatar. Used to identify you across devices.
- Activity data — GPS tracks, distance, time, heart rate, manual notes. Stored in Firestore under your user ID.
- Health data (optional) — sleep, resting HR, HRV from Apple Health, only with your explicit permission. Used for the Readiness score. Never leaves your device.
- Diagnostic data — anonymous crash reports. No personally identifiable info attached.
Data we collect and how it’s used
| Data | Purpose | Linked to you |
|---|---|---|
| Health & fitness (workouts, heart rate, calories, HR zones) | App functionality | Yes |
| Location (precise, including in the background during recording) | App functionality | Yes |
| Contact info (email, display name) | Account & app functionality | Yes |
| User content (activity photos & titles) | App functionality | Yes |
| Purchases (subscription status) | App functionality | Yes |
| Diagnostics (crash reports) | App functionality | No |
None of this data is used for tracking or third-party advertising.
Apple Health (HealthKit)
With your permission, HighFive reads heart rate, steps, sleep, active energy, heart rate variability and VO₂ max from Apple Health to show your training load, recovery score and health trends, and writes your completed workouts and routes back to Apple Health so your data stays in one place. You can grant or revoke this access at any time in the iOS Health app.
Data obtained through HealthKit is never used for advertising or any marketing purpose, and is never sold or shared with third parties. It is used solely to provide the app’s fitness and health features to you.
What we do NOT collect
- Contacts, photos, calendar, microphone, or any data outside the app.
- Behavioural ad-tracking. We do not have an ad-tech stack.
- Cross-site cookies. The only cookie we set is the Firebase auth session.
Data processing & sub-processors
We process data on Google Cloud (Firestore, Cloud Functions, Cloud Storage) in the us-central1 region. Sub-processors we use:
- Google Firebase — auth, database, storage, push notifications
- RevenueCat — subscription state for Premium
We do not sell data to anyone. We do not share data with advertisers.
Your rights
- Export — To get a copy of your data, email support@high5workout.com.
- Delete — Profile → Delete Account wipes your record within 24 h. Your past activities are anonymised; the route geometry stays in segment leaderboards.
- Correct — edit any field in Settings → Profile.
- Object to processing — disable any feature in Settings → Privacy.
Children
HighFive is not for children under 13. We do not knowingly collect data from children under 13. If we learn we have, we delete it.
Contact
Privacy questions: support@high5workout.com. Data-subject requests are honoured within 30 days.