Privacy policy

What we collect

• Account details: your email address, name, profile picture if you add one, password (stored only as a hash), language, time zone and weight unit.
• Training data: the workouts, exercises and sets you log, notes, plans and programs, and body weight.
• Progress photos: stored privately. A coach sees a check-in only while you choose to share it.
• Coaching data: messages and files sent in chat, appointments, and the notes and plans a coach writes for a client.
• Content you give the AI coach: questions to the assistant, and documents a coach uploads to teach it their method.
• Devices: when each device signed in, and a push-notification token if you allow notifications.
• Billing: which plan a coach is on and the status of its subscription, as Polar reports them. Payment details stay with Polar and never reach us.
• Messages you send us through the contact form or in-app feedback.
• On the web dashboard only: usage events linked to an anonymous account id, and error reports, to find bugs and improve the product.

Why we use it

• To provide the service you signed up for: logging, plans, coaching, messages and reminders (performance of a contract).
• To share your training history with a coach you connect with. You agree to this when you accept their invitation, and it stops when the coaching ends (consent).
• To generate AI assessments and assistant replies from training data and messages, only after you allow AI data sharing (consent).
• To keep accounts secure, prevent abuse and fix errors (legitimate interest).
• To keep billing and tax records (legal obligation).

Optional AI data sharing

AI features are off for your data until you explicitly agree in the app. OpenAI, Anthropic or Google may receive the name, training history, body weight, plans, coaching notes and content needed for the feature you use. A coach cannot enable AI processing of a client’s training data on that client’s behalf.

You can decline and continue using workout logging and regular coaching. Change or withdraw your choice under More → Security → Privacy & AI in the mobile app or Settings → Security on the web. Withdrawal stops future AI sharing; it cannot undo a request already sent. A changed choice starts a fresh AI conversation so old client context is not sent again.

Health data

Body weight, photos and training logs can say something about your health. We process them only to provide the features you use, and never sell them or use them for advertising.

What your coach can see

When you connect with a coach, they see your workout history, body weight and plans, and they can message you and write notes. Progress photos stay private unless you share a check-in. Some coach notes are private to the coach. When the coaching ends, the coach loses access to your data. A coach who works in a gym can be seen by its owner and managers, who may move you to another trainer in the same gym.

Payments

Paid coaching plans are sold by Polar Software, Inc. (polar.sh), our merchant of record. When you buy a plan, Polar, and Stripe as its payment processor, receive the name, email address, billing address and payment details needed for the purchase, and handle them under their own privacy policies. We never see your card number. Polar tells us only which plan you are on and the status of your subscription.

Who processes it for us

We use service providers who process data only on our instructions and under data processing agreements:

• Convex: database, file storage and servers.
• Vercel: hosting of the website and web dashboard, and telling from your IP address which country you are in, so prices show in your currency. The country is not stored.
• Resend: sending sign-in codes and invitation emails.
• OpenAI, Anthropic or Google: AI models that write assessments and assistant replies. They receive only what a request needs and do not train on it.
• Expo, Apple and Google: delivering push notifications.
• PostHog and Sentry: product analytics and error reports on the web dashboard.

Transfers outside the EU

Some of these providers are based in the United States. Where data leaves the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

How long we keep it

• Your data is kept while you have an account.
• AI assessments and assistant conversations about a coaching relationship are deleted 90 days after the relationship ends.
• When you delete your account, your sign-in is removed at once and the rest is erased shortly after. Copies in backups are overwritten within 30 days.
• Billing records are kept by Polar, which sells the plans, for as long as tax law requires.

Deleting your account

You can delete your account at any time in the app under More → Security → Delete account, or on the web dashboard under Settings → Security. This deletes your training data, photos, plans, library and AI data, and ends every coaching relationship you are in, deleting its messages and notes for both people. A paid plan is cancelled. A client’s own training stays theirs when their coach deletes an account.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it is used, receive it in a portable format, and withdraw consent at any time. Contact us to use any of these rights. You can also complain to your data protection authority; in Slovenia that is the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

Children

Honno is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

We will update this policy as Honno changes, and tell you in the app or by email about changes that matter. Last updated 31 October 2026.