Legal

Privacy Policy

Last updated: 6 September 2026  ·  Halegro · England & Wales

Summary: We collect the data you enter and the data your device shares with us in order to run Halegro for you. We do not sell your personal data. You have full rights to access, correct, export, or delete it at any time. Reach us at privacy@halegro.co.uk.

Contents
  1. Who we are
  2. What we collect
  3. How we use your data
  4. Who we share data with
  5. Apple Health & Google Health Connect
  6. Your rights under UK GDPR
  7. Data retention
  8. Security
  9. Cookies & tracking
  10. Changes to this policy

1. Who we are

Halegro is operated by Marc Flaherty ("we", "us", "our"). We are the data controller for personal data processed through this app. You can contact us at privacy@halegro.co.uk.

2. What we collect

We collect the information you provide during onboarding (age, sex, height, starting weight, goal, activity level, dietary preferences), food and weight entries you log, and training sessions you record. If you connect Apple Health or Google Health Connect, we read steps and weight data with your explicit permission. We collect your email address when you create an account. We receive push notification tokens to send you reminders you have set up.

3. How we use your data

Your data is used to calculate personalised nutrition targets, generate meal plans and training plans, run the adaptation loop (adjusting your targets as your weight changes), and power the Alex AI coach. We use aggregated, anonymised data to improve the product. We do not sell personal data to third parties.

4. Who we share data with

Your data is stored in Supabase (PostgreSQL database hosted in the EU/UK). AI-generated content is processed by Anthropic (Claude API) — only the context needed to generate a response is sent; no data is retained by Anthropic for training. Subscription management uses Adapty; only your Supabase user ID is shared. We do not share individually identifiable health data with any other party unless required by law.

5. Apple Health & Google Health Connect

Health data read from or written to Apple Health or Google Health Connect is used solely within the app and is never transmitted to third parties or used for advertising. You can revoke access at any time in your device Settings.

Halegro reads: step count, body weight. Halegro writes: body weight (when you log your weight in the app). No other health data types are accessed.

6. Your rights under UK GDPR

You have the right to:

To exercise any of these rights, email privacy@halegro.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data retention

Account data is retained for as long as your account is active. Food logs, weight entries, and training records are retained for the lifetime of your account to power the adaptation loop and progression tracking. When you delete your account, all personal data is permanently deleted within 30 days.

8. Security

Data in transit is encrypted using TLS. Data at rest is encrypted at the database level. Authentication is handled by Supabase Auth using industry-standard JWT tokens.

9. Cookies & tracking

Halegro is a mobile app and does not use browser cookies. We do not use cross-app advertising trackers. Analytics, if used, are aggregate and anonymised.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app. Continued use of the app after changes take effect constitutes acceptance.


privacy@halegro.co.uk