Privacy Policy

Who we are

RoxHype ("we", "our", "us") runs the RoxHype training app (the "App") and the websites roxhype.com and roxtimes.com (the "Sites"). RoxTimes is part of RoxHype. This policy explains what information we collect across the App and the Sites, why, who we share it with, and the choices you have.

If you have a question or want to use any of your rights, email mike@roxhype.com.

The short version

• We collect what you give us (for example your answers, your email, your training details) and some information automatically (for example the pages you visit and the buttons you tap).
• We use it to run the App and the Sites, write your plan and report, send emails you ask for, and understand what works.
• We use trusted providers to do this, including Supabase, Vercel, Anthropic, OpenAI, Resend, Google, Cloudflare and RevenueCat.
• We do not sell your personal information.
• You can ask us to see, correct or delete your information at any time.

Information we collect in the App

Information you give us

• Account information: name, email address, password.
• Profile information: age, gender, height, weight.
• Fitness information: 5K time, wall ball reps, race dates, training goals, workout results.
• Training preferences: equipment, training days per week, session length.
• Injury information (optional): if you tell us about an injury or pain, we use it only to adjust your plan.

Information collected automatically

• Usage data: how you use the App, features you use, workouts completed.
• Device information: device type, operating system, app version, device identifiers.

Information from other services

• Sign in with Google: we receive your name and email address.
• Payments: subscriptions are handled by the App Store or Google Play and managed through RevenueCat. We never see or store your card details.

Information we collect on the Sites

The readiness report and plan

When you use the readiness report on roxhype.com you answer questions such as your race, division, optional age group, goal, experience, 5K time, weekly running, training days, equipment and, if you choose, a note about an injury in your own words. If you say you have raced, you can type your name to find your published results.

• Your answers are sent to our server and to Anthropic (the company behind Claude) so our AI coach can write your report and your first week of training.
• We do not save your answers in our database. Anthropic processes them under its commercial terms and, by default, does not use them to train its models.
• Name searches are matched against publicly published HYROX results that we hold. We do not store your search.

Race results on RoxTimes

roxtimes.com shows race results that are already publicly published (name, category, times, splits and placing). If you want a result removed or corrected, email mike@roxhype.com and we will deal with it.

Email

If you give us your email address (for example "Email me this report"), we store it together with your race date, division, level and the report or plan we sent you. We send emails through Resend. You will get what you asked for plus occasional HYROX training emails. Every email has an unsubscribe link. If you unsubscribe, we keep a record of that so we do not email you again.

Feedback board and partner applications

• If you post on our feedback board or roadmap, we store what you write. We use Cloudflare Turnstile to stop spam; it checks that a real person is posting.
• If you apply to our partner programme, we store the details you enter in the form (such as name, email, phone number, country, social media handles, audience figures, links and your answers).

Analytics, advertising and our own click log

• Google Analytics 4 records the pages you visit, the buttons you tap, your device and browser, and your approximate location. It is linked across roxhype.com and roxtimes.com so we can see how people move between them.
• Google Ads tag: this helps us measure whether our adverts lead to app downloads.
• Our own click log: when you tap certain buttons or start the readiness report, we record the page, the button, a random ID for that browsing session, your IP address, your browser type and the page you came from.
• Hosting logs: our hosting and database providers (Vercel and Supabase) keep standard technical logs, such as IP addresses and request times, to keep the Sites working and secure.

Cookies and similar technology

The App does not use cookies.

The Sites use:

• Google Analytics and Google Ads cookies, to measure visits and advert performance.
• Session storage in your browser, to hold the random ID used by our click log for one visit. It is cleared when you close the tab.

You can block or delete cookies in your browser settings. You can also opt out of Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout) and control ad personalisation at adssettings.google.com.

How we use your information

We use your information to:

• create and manage your account and subscription;
• write your personalised training plans, reports and workouts using AI;
• track your training and progress;
• send emails you asked for and occasional training emails (you can unsubscribe at any time);
• answer support requests;
• understand how the App and Sites are used, and improve them;
• measure our advertising;
• keep our services secure and prevent spam and abuse;
• meet our legal obligations.

Our legal bases (UK and EU)

• Contract: to provide the App and the plans you sign up for.
• Consent: for marketing emails and, where the law requires it, for analytics and advertising cookies. You can withdraw consent at any time.
• Legitimate interests: to run, secure and improve the Sites, answer questions and understand how our services are used, where this does not override your rights.
• Legal obligation: where the law requires us to keep or share information.

Who we share information with

We do not sell your personal information. We share it only with providers who help us run our services, and only what they need:

• Supabase: database and file storage.
• Vercel: website hosting.
• Anthropic and OpenAI: AI that writes plans, reports and workouts.
• Resend: sending email.
• Google: analytics and advertising measurement.
• Cloudflare: spam protection on forms.
• RevenueCat, Apple and Google Play: subscriptions and payments.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy would continue to apply.

Where your information is stored

Our providers store and process information in the United States and other countries. When information is transferred out of the UK or EEA, we rely on the safeguards our providers offer, such as standard contractual clauses.

How long we keep information

• App account data: while your account is active. If you delete your account, we delete your data within a reasonable time unless we must keep it by law.
• Email address: until you unsubscribe or ask us to delete it. After you unsubscribe we keep a record of your address only to make sure we do not email you again.
• Click logs and analytics: only as long as we need them to understand how the Sites are used.
• Readiness answers: not stored by us.

Your rights

Depending on where you live, you can ask us to:

• give you a copy of your information;
• correct it;
• delete it;
• send it to you in a portable format;
• stop or limit how we use it, or object to our use of it;
• withdraw consent you have given.

To use any of these rights, email mike@roxhype.com. If you are in the UK or EU you can also complain to your data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).

California residents

Under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use and share it, to ask us to delete it, to correct it, and not to be treated differently for using these rights. We do not sell personal information for money. We use Google's advertising tag to measure our adverts; you can limit ad personalisation at adssettings.google.com.

Children

Our services are not intended for children under 13 (under 16 in the EU), and we do not knowingly collect their information. RoxTimes does not show results from youth events. If you think a child has given us information, contact us and we will delete it.

Security

We protect information with encryption in transit (SSL/TLS), access controls and trusted providers. No system is perfectly secure, but if a breach affects your information we will tell you as the law requires, normally within 72 hours of becoming aware of it.

Changes to this policy

We may update this policy from time to time. We will post the new version here and change the date at the top.

Contact us

Email: mike@roxhype.com App: RoxHype Developer: RoxHype Technologies