Privacy
Last updated: November 11, 2026
Hunbroken is an app to prepare for a HYROX race. It works without an account and keeps as much as it can on your phone. This page explains what data we process, why, who it is shared with, how long we keep it and how to use your rights.
- Your answers about pain (whether you felt one, the area, the side, the intensity) never leave your phone.
- Your progress is backed up to our servers so you don’t lose it, and you can delete everything from the app.
- We measure how the app is used with an identifier of your installation, with no third-party analytics tool.
- No ads, and we don’t sell your data.
1. Who is responsible
Hunbroken is published by Alexis Duprat, as an individual, who is the controller of your data. For any question about your data, write to hello@hunbroken.app.
A postal address is given on request at that address; it will appear on this page once the business is registered.
2. What stays on your phone
Your plan, your sessions, your answers and your settings are stored on your phone. Some data never leaves it:
- the details of your pains — the area, the side and the intensity, whether you give them when you sign up, in a debrief, before a session or in “My pains”;
- in your debriefs, everything but the difficulty: whether you felt a pain, what limited you most and the physical state Hugo derives from it;
- your profile photo;
- your sex and your date of birth, if you give them in “My profile”;
- the strength level you declared and your equipment;
- your estimated time;
- your adjustment requests (“Adapt”) and their reasons — the time you have, the equipment you are missing, your fatigue, your pains;
- your reminders, which are notifications scheduled on your phone.
Your last name stays on your phone too, except while you look up your HYROX results (see 8).
3. What we back up
Once you finish signing up, the app creates a profile on our servers and backs up your progress automatically whenever your phone is online. That is what lets you recover it on another phone. We back up:
- your profile: your first name (as you gave it when signing up), your race (its date and its category, which states the men’s, women’s or mixed category), your training days, your reminder time, your target time, your HYROX record, your running reference and whether you have raced a HYROX before;
- your plan: its sessions, the ones you move or skip, and the mobility sessions of your rest days;
- the sessions you did: their results, times and sets, the corrections you make to them, and the session as you actually did it — adjusted where it was, but without the reason for the adjustment;
- your debriefs: the difficulty you felt, and only that (see 4);
- your evaluation results, for older plans that included them;
- technical identifiers: your profile’s identifier on the phone (the “Support ID” shown in Settings), an identifier of your installation of the app, and sign-in tokens.
If you create an account (Apple, Google or email), we also keep the provider you used, the identifier it gives us and your email address when it is provided — with Apple, it may be a relay address. With Apple, we also keep a token whose only use is to revoke Hunbroken’s access at Apple when you delete your account.
If you change your first name in “My profile”, the change stays on your phone for now: our servers keep the first name given when you signed up. Write to us to correct it.
4. Your health data
Everything you say about your pains — whether you felt one, the area, the side, the intensity — stays on your phone. None of it is ever sent to our servers, nor to your partner, nor into our statistics, nor to our providers. Hugo’s suggestions that take it into account are computed on your phone.
Of your debrief, only the difficulty you felt is backed up with your sessions — “easy”, “good”, “hard” or “impossible”. It is used to recover your history on another phone; it is not shown in our support tools. Your answer to “Did you feel any pain?”, what limited you most and the physical state Hugo derives from them stay on your phone: on a new phone, your history comes back without them.
Your training history (sessions, times, regularity) can also say a lot about your physical condition: we handle it with the same care.
Hunbroken gives no medical advice (see the Terms).
5. With your partner
If you join a duo, a team or a training partner, each of you sees, of the other:
- their first name and their streak;
- for each session of the week, its name, its planned length and its status, and once done, the time it ended, its duration and the difficulty felt;
- the race they entered (place, event, category).
Never your pains, your physical state or your notes. Encouragements are predefined messages: they arrive as a notification with the sender’s first name, through Expo’s notification service and then Apple’s or Google’s. To receive them, we keep your phone’s notification token; you are asked for the permission only when you share, copy or join a duo. Leaving the duo stops the sharing.
6. Usage statistics
To understand how the app is used and improve it, we measure events: the steps of signing up, sessions opened, started, finished, skipped or moved (their duration and number of sets, with no load, reps or pace), the difficulty given in a debrief, the use of adjustments (the kind of constraint: time, equipment or fatigue), the Premium screen, the welcome offer and purchases (with no amount or product), notification permissions. Added to them: the app’s openings (with the platform, iOS or Android, and the app’s version), the sign-in method chosen (Apple, Google or email) and its outcome, signing out and deleting the account, the use of the Duo (its format, the answer to an invitation, the kind of encouragement — never your partner or the code), the gentle mobility of rest days, the choices made in Settings (never the time of your reminders), session corrections and shares, the outcome of the search for your HYROX results (never your name or your times), the stars of a review and the number of photos or videos of a bug report (never their text). We also receive your age bracket and how you heard of Hunbroken — with the text you wrote if you chose “Other”.
These events carry an identifier generated for this measurement only, specific to your installation of the app. It is linked neither to your profile nor to your account, but it is stable and the events arrive from the same IP address as your backups: so it is pseudonymous, not anonymous. These statistics contain neither your pains nor your physical state after a session. They are stored on our own servers, with no third-party analytics tool, and are used for no advertising.
This measurement is on by default, on the basis of our legitimate interest. You can object to it by writing to hello@hunbroken.app. The app has no setting yet to turn it off yourself, and because this identifier is linked neither to your profile nor to your account, we cannot always find the events already sent from your phone.
7. Your messages
When you report a bug, we receive your text, up to three photos or videos if you attach them, the app’s version, your phone’s system and version, and its language. When you give feedback, we receive your rating, your comment if any and the app’s version. They are kept on our servers and read by the Hunbroken team; your feedback is never passed on to a store. Don’t put any health information in them, such as a screenshot of your pains.
8. Looking up your HYROX results
When signing up, if you look up your HYROX results, your first and last name go through our server to HYROX Result API (hyroxresultapi.com), which provides public HYROX race results. Our server does not keep that name and does not write it in its logs; that provider handles it under its own rules. The races found and the analysis of your record stay on your phone; only your record (the time and its category) joins your profile.
9. Subscriptions
Subscriptions are sold and billed by the App Store or Google Play: we never see your payment details. RevenueCat manages access to Premium on our behalf; it knows your profile by its identifier on our servers, without your name or email address, and receives the stores’ purchase receipts.
10. Why, and on what basis
- Providing the service — your plan, its backup, your account, your partner, your subscription: it is necessary to perform our Terms.
- Measuring and improving the app (statistics, bug reports, crash reports, feedback) and keeping the service secure (logs, rate limiting): our legitimate interest.
- Reminders and notifications: with your consent, given to your phone, which you can withdraw at any time in Settings or in your phone’s settings.
11. Our providers
They process data to run Hunbroken. We sell your data to no one.
| Provider | What for | What it receives |
|---|---|---|
| Hosting of our servers | Running the API and the database | Everything we back up, and the request logs. The provider and the hosting country will be stated here once they are chosen, before the service goes live. |
| RevenueCat | Managing subscriptions | Your profile’s identifier on our servers, purchase receipts |
| Sentry | Being told when the app crashes | The error, the screen it happened on, the phone’s model and system, the app’s version — hosted in the European Union, without your name, your email, your profile or your pains |
| Apple and Google | Stores, sign-in with Apple or Google, delivering notifications | What their own services process; duo notifications, with the encouraging partner’s first name |
| Resend | Sending sign-in emails | Your email address, your language, the sign-in link and code |
| Expo | Sending duo notifications | Your partner’s notification token, the encouragement’s text and the sender’s first name |
| HYROX Result API | Finding your public HYROX results | The first and last name searched |
Sharing a session’s image goes through your phone’s share sheet: you choose where it goes, and we receive nothing.
12. Outside the European Union
Some of these providers (Apple, Google, RevenueCat, Resend, Expo, Sentry, the HYROX results provider) may process data outside the European Union, in particular in the United States, with the safeguards the GDPR provides.
13. How long we keep it
| Data | Period |
|---|---|
| Your profile, your account and your training | As long as your profile exists. Deleted at once when you delete your account from the app, or after 3 years without activity. |
| Bug reports and feedback, with their photos and videos | 2 years, or less if you delete your account before |
| Usage statistics | 25 months |
| Our servers’ request logs (IP address, address requested) | 30 days |
| Email sign-in links and codes | 15 minutes, single use |
| What is on your phone | Until you delete your account or the app |
To delete your account, and to see what is deleted and what remains, see Delete my account.
14. Security
Sign-in tokens are kept on our servers only as a hash, never in clear. Access to data is restricted to the Hunbroken team, and our support tools show neither your name, nor your email address, nor your health data.
15. Minimum age
Hunbroken is for people 16 and over, HYROX’s own minimum age for racing Singles. If you are 16 or 17, you may use it; purchases follow the App Store’s or Google Play’s rules for minors.
16. Your rights
You can access your data, correct it, delete it, ask for a copy, restrict its use or object to some processing by writing to hello@hunbroken.app. We answer within one month. The app has no export yet: we send you a copy of your data on request. We may ask you to confirm the request comes from you.
You can also delete your account and your data yourself, in the app: Settings, “Delete account”.
If you think your rights are not respected, you can lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
17. Changes
This page may change with the app: the date at the top of the page says when it was last updated.
