The short version
We keep what the app needs to work: your email, your handle and picture, your settings, the classes you did with their heart-rate readings, and what you post. Your heart-rate readings are never used for advertising, never sold, and never shown to other members. Delete your account in the app and it is deleted, as described below.
01Who we are
híbrido is operated by Everseed Ventures, based in Calgary, Alberta, Canada, which is responsible for the personal information described here. A mailing address for legal notices is available on written request to team@everseedventures.com.
Our Privacy Officer is responsible for this policy and for how we handle your information, and can be reached at team@everseedventures.com with "Privacy Officer" in the subject.
02What we collect
Your account: your email address, which you sign in with, or, if you use Sign in with Apple, the email address Apple shares with us (which may be a private relay address) and your name.
Your member profile: your handle, the avatar you choose or the photo you upload.
Your settings: your name (private, never shown to other members), your age, your sex and weight if you choose to give them (used only to estimate calories), your maximum heart rate, your equipment, your machine paces, your coach and your reminder preferences. We use them to set your heart-rate zones and adapt each class.
Your classes: for every class you finish, the date, the class, the options you chose, how long it lasted, the heart-rate source (Apple Watch or a strap), your heart rate sampled every 10 seconds, your peak heart rate, the time you spent in each zone, an estimate of calories and the embers you earned.
What you post: how a class felt, your comments, any photo you add, your likes, the members you block and the reports you make.
Early access sign-up: your email address and the answers you give about where and how you would train. The website also keeps the IP address of each sign-up attempt for about 24 hours, to stop abuse.
Crash and error reports: when the app hits an error, it sends a report with your device model, its operating system version, what the app was doing, your account ID and your IP address, so we can fix it.
We do not use advertising trackers or third-party analytics, and we do not track you across other apps or websites.
03Heart rate and Apple Health
Before híbrido uploads any heart-rate data, it asks for your consent on a screen of its own, separate from these terms. If you decline, classes still work and stay on your phone: they are not saved to your account and cannot be shared with the class. Your age, and your sex and weight if you give them, are saved with your settings either way, because they set your zones.
With your permission, híbrido reads your heart rate from Apple Health during a class, and saves each class to Apple Health as a workout with its heart-rate readings. You can change these permissions at any time in the Health app or in Settings.
Heart-rate data is sensitive, and we treat it that way:
- it is used only to run your classes, show your history and zones, and calculate embers
- it is never used for advertising or marketing, never sold, and never shared with data brokers
- your heart-rate readings are never shown to other members. When you post a class, the post shows its length and your embers (the minutes you spent in your top two heart-rate zones), and posting is always your choice
- data we read from Apple Health is not used for any purpose other than providing híbrido to you
04Consumer health data (Washington, Nevada and other states)
Some U.S. states, including Washington and Nevada, treat information about your body and fitness as consumer health data and give you specific rights over it. This section is our consumer health data privacy policy.
What we collect: your heart rate during classes; the zones, embers, peak heart rate and calorie estimates calculated from it; your age and maximum heart rate; and your sex and weight if you give them.
Where it comes from: your Apple Watch or Apple Health, a Bluetooth heart-rate strap, and what you enter in the app.
Why: only to run your classes, show your history, zones and embers, and estimate calories. We collect and share it only with your consent, or as needed to provide the service you asked for.
Who we share it with: Supabase, which stores it on our behalf, and Apple Health, when you allow híbrido to save workouts there. We never sell it.
Your rights: you can confirm whether we hold your consumer health data, see it, have it deleted, and withdraw your consent. To withdraw, turn off “Save heart-rate data” in the app's settings, turn off Health access, stop using a heart-rate monitor with híbrido, or delete your account, which deletes the heart-rate data already uploaded. For anything else, write to us from the contact page and choose "Privacy request". If we decline a request, you can appeal by replying to our answer, and we will respond within 45 days.
05Why we use it
To provide híbrido: sign you in, run and adapt your classes, keep your history, and run the community.
To keep the community safe: review reports, enforce the community rules and act on blocks.
To send you the sign-in code and, if you signed up for early access, one email when your invite is ready.
We rely on your consent for heart-rate and health information and for early access emails, and on what is necessary to provide the service you asked for for everything else. You can withdraw it by turning off “Save heart-rate data” in the app's settings, by turning off Health access, by not connecting a heart-rate monitor, or by deleting your account; heart-rate data already uploaded is deleted with your account.
06What other members can see
Signed-in members can see your handle, your avatar or photo, and your posts, comments and likes. They cannot see your email, your name, your settings, your class history or your heart rate. When you block a member, you stop seeing their posts and comments; blocking does not hide your posts from them.
Photos are stored at unlisted web addresses: anyone who has a photo's address can open it, even without the app.
07Who else handles it
Our database, sign-in and file storage are provided by Supabase, and this website is served by Vercel. Apple provides Sign in with Apple, Apple Health and the App Store. Crash and error reports from the app are sent to Sentry. They handle your information on our instructions and not for their own purposes.
We do not sell or rent personal information, and we do not share it for targeted advertising. We may disclose information if the law requires it, or to protect someone's safety.
08Where it is stored
We are a Canadian company and our providers' servers may be in the United States or elsewhere. Crash and error reports are processed by Sentry in the United States. Your information may be processed outside the province or country where you live and may be accessible to authorities there under local law.
09How long we keep it
We keep your account information for as long as you have an account. When you delete your account from the app, your profile, settings, class history, posts and their photos, comments, likes and blocks are deleted. Copies in backups expire on their normal schedule. Classes already saved to Apple Health stay there; delete them in the Health app.
Reports may be kept for up to 12 months, so we can deal with repeated abuse. Early access emails are kept until you get your invite or ask us to remove them.
10Your rights
You can see, correct, download or delete your information, and withdraw consent. You can delete your account yourself in the app; for anything else, write to us and we will respond within 30 days.
Depending on where you live, you may have further rights, including under Canada's PIPEDA and Alberta's PIPA, and under U.S. state laws such as those of California and Washington, including Washington's My Health My Data Act. We honour these requests wherever you live. We do not sell or share personal information as those laws define it.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the privacy regulator where you live.
11How we protect it
Your information is protected in transit with encryption, and each member can read only their own private data, enforced in the database itself. Photos are stored in a folder only you can add to or change.
No system is perfect. If a breach puts your information at risk, we will tell you and the relevant regulators as the law requires.
12Children
híbrido is for adults 18 and over. We do not knowingly collect information from anyone under 18, and we will delete any account we learn belongs to a child.
13Changes to this policy
If this policy changes we will update the date at the top. If a change affects how we use your heart-rate or health information, we will ask for your consent again before it applies.
14Contact
Everseed Ventures, Calgary, Alberta, Canada. Write to us from the contact page or at team@everseedventures.com, and choose "Privacy request".