Privacy
Privacy Policy
Last updated June 2026. We treat your data like ours — because it is.
HighFive (“we”, “us”) builds a fitness tracking application for iOS, Apple Watch, and the web at high5workout.com. This policy explains what we collect, why, and how to control it.
What we collect
- Account info — email, display name, optional avatar. Used to identify you across devices.
- Activity data — GPS tracks, distance, time, heart rate, manual notes. Stored in Firestore under your user ID.
- Health data (optional) — sleep, resting HR, HRV from Apple Health, only with your explicit permission. Used for the Readiness score. Never leaves your device unless you opt in to AI Coach (Premium).
- Diagnostic data — anonymous crash reports via Sentry. No personally identifiable info attached.
Data we collect and how it’s used
| Data | Purpose | Linked to you |
|---|---|---|
| Health & fitness (workouts, heart rate, calories, HR zones) | App functionality | Yes |
| Location (precise, including in the background during recording) | App functionality | Yes |
| Contact info (email, display name) | Account & app functionality | Yes |
| User content (activity photos & titles) | App functionality | Yes |
| Purchases (subscription status) | App functionality | Yes |
| Diagnostics (crash reports) | App functionality | No |
None of this data is used for tracking or third-party advertising.
What we do NOT collect
- Contacts, photos, calendar, microphone, or any data outside the app.
- Behavioural ad-tracking. We do not have an ad-tech stack.
- Cross-site cookies. The only cookie we set is the Firebase auth session.
Data processing & sub-processors
We process data on Google Cloud (Firestore, Cloud Functions, Cloud Storage) in the us-central1 region. Sub-processors we use:
- Google Firebase — auth, database, storage, push notifications
- RevenueCat — subscription state for Premium
- Sentry — anonymous crash diagnostics
- OpenAI — AI Coach / Recovery insights, only if you opt in (Premium)
We do not sell data to anyone. We do not share data with advertisers.
Your rights
- Export — Settings → Data → Export gives you everything in GPX/FIT/GeoJSON.
- Delete — Profile → Delete Account wipes your record within 24 h. Your past activities are anonymised; the route geometry stays in segment leaderboards.
- Correct — edit any field in Settings → Profile.
- Object to processing — disable any feature in Settings → Privacy.
Children
HighFive is not for children under 13. We do not knowingly collect data from children under 13. If we learn we have, we delete it.
Contact
Privacy questions: privacy@high5workout.com. Data-subject requests are honoured within 30 days per GDPR Art. 12.