Privacy Policy
Hitmap keeps your data on your phone. This policy explains what the app stores, what leaves your phone if you choose the AI features or anonymous stats, and the choices you have.
Contents
- The short version
- Who we are (data controller)
- What the app stores on your device
- AI features (only with your permission)
- Who processes AI requests
- Anonymous usage stats (only if you opt in)
- Your choice
- Microphone, notifications and sharing
- Subscriptions
- Why we use data, and on what basis
- How long we keep data, and deleting it
- Sending data abroad
- Your rights
- Children
- Security
- Changes to this policy
- Contact
01The short version
- No account, no login, no ads and no tracking. Anonymous usage stats are optional and stay off until you turn them on.
- Your profile, workouts and settings are stored only on this device.
- AI analysis is optional and needs your permission. Without it, everything runs on your phone.
- If you allow it, we send only what is needed to a service that runs AI models, and we do not keep the content.
- You can change your mind at any time in Settings. Turning stats off also deletes what we stored for your install.
02Who we are (data controller)
Hitmap is published by Coldter (“we”, “us”), based in Thailand. We are the data controller under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) for the limited data described in this policy. For privacy questions and requests, write to nitiszaza27@gmail.com. Support: https://hitmap.coldter.com/support.
03What the app stores on your device
Hitmap has no servers that hold an account or workout history for you. The following is stored in the app’s storage on your phone:
- Profile: the name you enter, sex, age, height, weight, goal and focus areas.
- Check-in: your answers (including optional notes such as injuries) and the capacity scores calculated from them.
- Workouts: the sessions you log, saved presets, capacity test results, trophies and streaks.
- Pain spots you mark: where it hurts, how much, and how it is going. They stay on this device only and are never sent to the AI or to stats.
- Settings: language, theme, notification choices, your AI choice and your subscription status.
We cannot see or retrieve this data. If you back up your iPhone with iCloud or a computer, Apple may include the app’s data in that backup, under your Apple settings.
04AI features (only with your permission)
Smart parsing, voice logging, the check-in read-out and coach tips use AI. When you start using Hitmap we ask whether to allow this. If you allow it, the app sends the following to our service:
- The workout text you type, with your sex, age and weight (so calories are estimated sensibly), and the names of your saved presets (up to ten) so “my usual” can be understood.
- Your voice recording when you hold the mic, to turn speech into text.
- Check-in answers: your name, sex, age, height, weight, training habits and any notes you write.
- A weekly summary for coach tips: muscles worked, muscles still fresh, cardio minutes, capacity scores, your goal and focus areas.
We do not send your full workout history, the pain spots you mark, photos, contacts, location or advertising identifiers.
To keep the service fair and to prevent fraud and abuse, our service applies daily fair-use limits to AI requests. For this the app makes a random “AI token” on your phone and sends it with AI requests only. It is never sent with anonymous stats and is not linked to the random install ID those stats use. If there is no token, we use your IP address instead. We store only a one-way hash of the token (or IP address), salted with a secret that changes every day, together with that day’s request count and the number of requests refused as off-topic or abusive. We never store the raw token or IP address, and these rows are deleted after 2 days. This is used only for fraud prevention and security. It is not used to track you or to work out who you are. Text that is not about exercise, or that is abusive, may be refused.
05Who processes AI requests
Requests go to our own small service (a Cloudflare Worker), which passes them to Cloudflare Workers AI. There they are processed by models that Cloudflare hosts: GLM-5.3 Flash for understanding text (a model from the same GLM Flash family is used as a backup if it is unavailable) and Whisper large-v3-turbo for speech to text.
Our service only relays your request and returns the result. It does not save the content of your requests or the AI’s replies, and it does not write them to a database. Our fair-use counters are described above. Cloudflare keeps standard technical logs for our service (time, request path, status and IP address or approximate location) for up to 7 days for troubleshooting.
We do not use your data for advertising, profiling or to train AI models, and we do not sell it or share it with anyone else. Cloudflare processes it only to run the models and operate the service, under Cloudflare’s privacy policy. Data may be processed in data centres outside your country, because Cloudflare runs a global network.
06Anonymous usage stats (only if you opt in)
To learn which features people use and to improve Hitmap, you can choose to share anonymous stats. This is separate from AI analysis and is off until you turn it on (on the first-run screen or in Profile → Share anonymous stats). If you turn it on, the app sends:
- Your check-in answers as ranges: sex, an age range (for example 25–34), height and weight ranges in steps of 10, a BMI range, the multiple-choice answers about your training habits and fitness, your goal, your focus areas, the activities you picked, and the starting score, level and type the app worked out.
- Which features you use: for example finishing the check-in, saving a workout (how it was entered, how many items and what kinds, never what you wrote), using voice, seeing the paywall or an offer, starting a free trial, sharing a card, opening the weekly recap, unlocking a trophy, turning on reminders, redoing the capacity test, and opening the app (once a day).
- Technical basics: a random install ID made on your phone, the app version, the platform (iOS or Android), your language, and the time of each event.
We never send your name, your notes, your exact age, height or weight, the text of your workouts, the pain spots you mark, your voice, photos, contacts, location or advertising identifiers, and we do not store your IP address with the stats.
The install ID is random. It is not linked to your name, e-mail, Apple ID or any advertising ID, and with this data we cannot tell who you are. We use the stats only to understand and improve the app and to see, in aggregate, who Hitmap is for (for example which age ranges and goals are common). We do not use them for advertising or tracking, we do not sell them, and we share them with no one except Cloudflare, which hosts them for us.
The stats are stored in a database (Cloudflare D1) in our Cloudflare account and are deleted automatically after 18 months. Because Cloudflare runs a global network, the data may be processed in data centres outside your country.
To stop, turn the switch off in Profile → Share anonymous stats. Sending stops immediately, anything waiting to be sent is thrown away, the app asks our server to delete the stats stored for your install, and it forgets the install ID. If you are offline at that moment, the request is sent the next time you open the app. Turning it on again starts with a new random ID.
07Your choice
- Allow AI analysis: the features above work as described.
- Use on-device only: nothing is sent. Workout text is read by a built-in parser and the check-in is scored on your phone. Voice logging is unavailable because it needs AI.
- Change it at any time in Profile → Smart parsing → AI data use. Turning AI off stops sending immediately.
- Anonymous stats are a separate switch, off by default: Profile → Share anonymous stats (also offered on the first-run screen).
08Microphone, notifications and sharing
- Microphone: used only while you hold the mic button. The recording is kept briefly in the app’s temporary storage on your phone. It leaves your phone only if you have allowed AI analysis, to be transcribed. We do not keep it.
- Notifications: reminders are local notifications scheduled on your phone. We run no push server and receive no device token. They are off until you turn them on.
- Sharing: share cards are made on your phone. You choose where to send them (share sheet or clipboard). The app never posts anything for you.
- Backups: “Export backup” creates a file you save or share yourself; we never receive it. “Import backup” reads a file you pick.
09Subscriptions
Purchases are handled by Apple through the App Store. We never see your card or Apple ID details. To confirm that your subscription is active, the app checks your purchase status with Apple. If we use a subscription-management service for this, it receives only an anonymous app identifier and your purchase status, never your name, email or workout data.
Apple may give us aggregated, anonymous statistics (sales, downloads and, for people who opted in, crash data) through App Store Connect.
10Why we use data, and on what basis
Under the PDPA (and the GDPR, where it applies) every use of personal data needs a legal basis. These are ours:
- AI analysis (reading your workouts, voice logging, the check-in read-out, coach tips). Purpose: to give you the feature you chose. Basis: your explicit consent. Information about your body and training can count as health data, which the PDPA treats as sensitive, so we ask before anything is sent and never assume consent.
- Anonymous usage stats (only if you opt in). Purpose: to understand and improve the app. Basis: your consent.
- Keeping the service safe and running (fair-use limits, technical logs). Purpose: fraud prevention and security: to stop abuse, keep limits fair and fix problems. Basis: our legitimate interest in keeping the service secure and available. We keep this data only briefly and use it for nothing else.
- Answering your messages (e-mails you send us). Purpose: to reply and help you. Basis: taking steps at your request, and our legitimate interest in supporting our users.
- Your subscription. Apple takes the payment and tells the app whether your plan is active; we do not receive your payment details. Basis: performing our contract with you (the Terms of Use).
We do not use your data for advertising, profiling or decisions about you made only by a machine, and we use or disclose it where the law requires.
11How long we keep data, and deleting it
- On your phone: until you delete it. Profile → Data → Reset everything erases your profile, workouts, presets and results (your AI choice and subscription status are kept). Deleting the app removes everything it stored.
- Backup files you exported: they belong to you. Delete them where you saved them.
- AI requests: we do not store their content. Technical logs are kept up to 7 days.
- Fair-use counters: a one-way hash of your random AI token (or of your IP address if there is no token), salted with a secret that changes daily, with that day’s request count and the number of refused requests. Deleted after 2 days. We never store the raw token or IP address.
- Anonymous stats (only if you opted in): up to 18 months, then deleted automatically, or right away when you turn the switch off while online.
- E-mails you send us: kept only as long as needed to deal with your request and any follow-up, then deleted.
- Subscriptions: managed by Apple. Deleting the app does not cancel a subscription; cancel it in your Apple ID settings.
12Sending data abroad
Cloudflare runs a global network, so AI requests and anonymous stats may be processed or stored in data centres outside Thailand, including in countries whose data-protection rules may differ from the PDPA. Cloudflare is the only service that handles this data for us. We rely on your explicit consent for AI analysis and anonymous stats (this policy and the consent screen tell you about the transfer before you choose) and on the data-protection terms Cloudflare offers its customers.
If you would rather your data never leaves your phone, choose “Use on-device only” and keep anonymous stats off. Nothing is sent then.
13Your rights
Because your data lives on your phone, you already hold it: export it from Profile → Data → Export backup, change it in the app, or delete it as described above.
Under the PDPA you have the right to:
- Withdraw consent at any time, as easily as you gave it (Profile → Share anonymous stats, and Profile → Smart parsing → AI data use). It takes effect immediately and does not affect what was done before.
- Access the data we hold about you and get a copy.
- Portability: receive your data in a common format. For data on your phone, use Profile → Data → Export backup.
- Object to our processing of your data.
- Erasure: ask us to delete or anonymise your data.
- Restrict how we use your data.
- Correct data that is wrong.
- Complain to the Personal Data Protection Committee (PDPC) through its office at pdpc.or.th if you think we have broken the PDPA. We would like the chance to put it right first, but you do not have to contact us before you complain.
To use any of these rights, write to nitiszaza27@gmail.com. We may ask you to confirm it is you, and we will reply within 30 days, free of charge. Our only processing of your data is AI analysis and, if you opt in, anonymous stats. Anonymous stats carry only a random install ID, so we can find and delete them only through the app (turning the switch off does exactly that). If you removed the app and the ID is gone, we cannot tell which records are yours; they are deleted automatically after 18 months. If you live elsewhere (for example under the EU or UK GDPR or California law) you may have similar rights, and you can also complain to your own data protection authority.
14Children
Hitmap is not directed at children under 13, and we do not knowingly collect personal data from them. If you are a minor where you live (in Thailand, generally under 20), a parent or guardian must consent before you allow AI analysis or anonymous stats, or subscribe, where the PDPA or other law requires it. If we learn that we hold a child’s data without the consent that is needed, we will delete it. Parents and guardians can contact us at nitiszaza27@gmail.com.
15Security
Requests to our service are sent over HTTPS. Data on your phone sits in the app’s own protected storage on iOS. No method is perfectly secure, so protect your phone with a passcode.
If a data breach is likely to put your rights and freedoms at risk, we will notify the PDPC within 72 hours of learning of it, and tell you directly where the law requires.
16Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change affects what is sent to AI services or to our anonymous stats, we will ask for your permission again in the app.
17Contact
- Data controller: Coldter
- Email: nitiszaza27@gmail.com
- Support: https://hitmap.coldter.com/support
- This policy online: https://hitmap.coldter.com/privacy