Privacy Policy
This explains what personal information Himova collects, why, who else handles it, and the choices you have. Ankit Paudel is the person responsible for your data ("we"). Himova is for people aged 18 or over.
1. What we collect
| What | Why |
|---|---|
| Account: name, email address, password (stored only as a one-way hash). If you use Google Sign-In, Google shares your name and email with us. | To create and secure your account and sign you in. |
| Health and fitness data: date of birth, sex, height, weight and weight history, goals, activity and training level, dietary preference and allergens, workouts and lifts, food and meal logs, pantry, readiness and training-load results, weekly reports. | To personalise workouts, calorie and nutrient targets and progress. This is sensitive information, so we ask for your explicit consent before using it. |
| Photos: a profile picture or post images you choose to upload. | To show them in your profile and your gym community. |
| Reports and blocks: reports you make (what you reported, why, and a copy of the reported text) and the members you have blocked. | To keep the community safe. Neither the reported person nor your gym is told who reported; a report is deleted if either account is deleted. |
| Community activity: gym membership, posts, comments, reactions, poll votes, leaderboard results. | To run your gym's community. |
| Push notifications: if you allow notifications, a push token that identifies your phone, and the text of a notification (for example the start of a comment). We remove the token when you sign out or delete your account, and you can turn each kind off in Profile. | To tell you when someone comments on your post or replies to you, or when your gym posts. |
| Technical data: crash reports (only if enabled in your version of the app), containing an anonymous numeric account ID and device and error details, and standard server logs (such as IP address and time). | To fix bugs and keep the service secure. |
We do not show advertising, do not sell your data, and do not use advertising or analytics trackers. Your camera is used only to scan a community QR code or take a photo you choose to add. Reminders are scheduled on your phone and do not send data to anyone; push notifications from the community are the exception described above.
2. Who can see your information
- Your gym community. If you join a gym, its staff and other approved members can see your name, avatar or photo, and your posts and comments. Other members can also see your leaderboard results and can compare selected lifts with you.
- Us. We can access member data to run and support the service and for moderation.
- Service providers who process data for us under their own security and data-protection terms: Amazon Web Services (hosting of the app's servers and photo storage, in Singapore), Neon (our database provider), Resend (sends the sign-up and password reset codes and other account emails, so it sees your email address), Google Firebase Cloud Messaging and Apple's push service (they deliver push notifications to your phone, so they see the token and the notification text) and, if crash reporting is enabled, Sentry. If you use Google Sign-In, Google handles that sign-in under its own privacy policy.
- Legal reasons. We may disclose information when the law requires it.
3. Our legal basis and your consent
We use your account and community information to provide the service you signed up for. We process your health and fitness data only with your explicit consent, which we ask for when you sign up. You can withdraw it at any time by asking us to delete your account; without that data, the app's personalised features cannot work.
4. Where your data is stored
Servers and photo storage are in Singapore, and our providers may process data in other countries. If you live outside those countries, your information will be transferred there. We rely on our providers' contractual safeguards for those transfers.
5. How long we keep it
We keep your information while your account is active. You can delete your account yourself in the app (Profile → Account → Delete account), which removes your profile, health and fitness data, posts, comments and photos immediately; see how to delete your account. If you can't use the app, email us and we will do it within 30 days. We may keep anything the law requires us to keep, and backups roll off on their normal cycle. Comments that other members have replied to are emptied and shown as "[deleted]" rather than removed, so those replies stay readable; they no longer contain anything about you.
6. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or stop using it, and withdraw consent. You can also correct most information yourself in the app (Profile), and get a copy of your data as a file with Profile → Account → Download my data. For anything else, email imankit.paudel@gmail.com and we will reply within 30 days. Under Nepal's Privacy Act and, where they apply to you, laws such as the EU/UK GDPR and India's Digital Personal Data Protection Act, you may also complain to the relevant regulator, but we would like the chance to fix things first.
7. Children
Himova is not for anyone under 18. We ask for your date of birth and do not create accounts for younger people. If you believe a child has an account, email us and we will delete it.
8. Security
Data is sent over encrypted connections, passwords are hashed, and your sign-in token is kept in your phone's secure storage. No system is perfectly secure. If a breach affects your personal information we will notify you and the authorities as the law requires.
9. Changes
If we change this policy in a way that matters, we will publish a new version here and ask you to accept it in the app before you continue. The version above shows which one is current.
10. Contact and complaints
Ankit Paudel · imankit.paudel@gmail.com. This is also our contact for privacy complaints.