HEROMINUTES is a fitness and wellness application. For privacy questions, contact us at support@herominutes.com.
| Data | Why |
|---|---|
| Name, email address | Account creation and identification |
| Date of birth | Age verification (18+ requirement) |
| Password (hashed) | Authentication — never stored in plain text |
| Injury intake responses | AI program personalisation |
| Pain logs (zone, score, date) | Phase progression and safety tracking |
| Session history | Streak tracking and progress |
| Phase assessment results | Clinical phase progression logic |
| Readiness scores | AI load adjustment |
| Consent timestamps | Legal audit trail of accepted agreements |
| Browser user agent (consent only) | Audit trail for liability |
| Payment information | Processed by Stripe — we never store card data |
HEROMINUTES uses Anthropic's Claude API to generate personalised training programs. When you generate a program, the following data is sent to Anthropic's servers for processing:
Anthropic's data handling is governed by Anthropic's Privacy Policy. Data sent to Anthropic's API is not used to train their models under their standard API terms.
Your data is stored on Supabase (a PostgreSQL database hosted on AWS infrastructure). Data is encrypted at rest and in transit. Supabase's privacy practices are governed by Supabase's Privacy Policy.
Subscription payments are processed by Stripe. HEROMINUTES never receives or stores your credit card information. Stripe's data practices are governed by Stripe's Privacy Policy.
We do not sell, rent, or trade your personal data to third parties. Data is shared only with:
Your account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., financial records for subscription payments).
Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, contact support@herominutes.com.
We use industry-standard security measures including HTTPS encryption, Supabase Row Level Security (RLS), and hashed passwords. No system is 100% secure; use a strong, unique password and never share your credentials.
HEROMINUTES is restricted to users 18 years of age or older. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at support@herominutes.com.
We may update this Privacy Policy. We will notify you of material changes via email or in-app notice. Continued use after changes constitutes acceptance.
Related documents: Terms of Use · Medical Disclaimer