Plain-language summary: Hero Workout has no accounts and no ads. Your routine, your daily logs and your progress photos are stored only on your own device, and nothing you record is ever sent to us. To improve the App we use Google Firebase for anonymous usage statistics and crash reports (see section 4). Payments for Hero Pass are handled entirely by Google Play or the App Store. We never sell your data.
1. About This Policy
This policy explains what information Hero Workout (“the App”) handles, where it lives, and what rights you have. It applies to the App on Android and iOS, and should be read alongside our Terms of Service.
2. Who We Are
The App is published by ZiBa Entertainment, based in Gouda, the Netherlands. Under the EU General Data Protection Regulation (GDPR), ZiBa Entertainment would be the data controller for any personal data we processed — for the limited usage and crash data described in section 4. Your training data and photos never leave your device.
3. What the App Stores, and Where
Everything below is stored locally on your device only, in the App’s private storage. None of it is uploaded to ZiBa Entertainment or to anyone else.
- Your routine: the exercises you train, their targets, the muscle groups they work, and the days of the week you train.
- Your daily logs: which exercises you completed and how much you logged (reps, kilometres or minutes).
- Progress photos: any photos you choose to add to your journal (see section 5).
- Hero Pass status: whether a Hero Pass purchase is active on your store account, so the App can unlock paid features.
We operate no account system and no server that holds your training data. The App contains no advertising, and it does not collect your location, your contacts, or health data from other apps. The only data that leaves your device is the usage and crash information described in section 4.
4. Usage Analytics and Crash Reports
To understand how the App is used and to fix problems, the App uses three Google Firebase services. Google acts as our data processor under the Firebase Data Processing Terms.
- Firebase Analytics records app events, such as opening a screen, completing a routine, viewing the Hero Pass offer or starting a free trial, together with basic device information (device model, operating system and app version, language, approximate country derived from your IP address) and an app-instance ID. On Android it can also use your device’s advertising ID to measure which of our app-store campaigns bring in users. It does not receive your exercises, amounts, notes or photos.
- Firebase Crashlytics sends a technical report when the App crashes or hits an error: the stack trace, device model, operating system and app version, and an installation ID. It contains no training data or photos.
- Firebase Remote Config downloads settings from Firebase, for example when to show the Hero Pass offer, so we can adjust the App without an update. It does not send your data to us.
We use this information only to improve the App and measure our own marketing, under our legitimate interest in running and improving it (GDPR Article 6(1)(f)). We do not sell it, use it to show you ads, or combine it with other data to identify you. Analytics data is kept for up to 14 months and crash reports for up to 90 days. You can reset or delete your advertising ID in your Android settings, and you can object to this processing at any time by contacting us (section 17).
5. Progress Photos
Adding a progress photo is always optional. When you tap Add a photo, you can take a new photo with your camera or choose one from your library:
- On Android, the App uses the system photo picker, which shares only the photo you select — the App cannot browse the rest of your library.
- On iOS, the App asks for camera or photo-library access the first time you use it. You can decline, and change your mind later in Settings.
The photo you choose is copied into the App’s private storage on your device. It is never uploaded to us and never shared with anyone unless you share it yourself using your device’s own features.
6. Hero Pass Purchases
Hero Pass (monthly, yearly or lifetime) is sold through Google Play on Android and the Apple App Store on iOS. The store processes your payment and handles your billing details; we never see your name, payment card or billing address. The App only receives confirmation from the store that a purchase is active, so it can unlock Hero Pass features, and it can ask the store to restore a purchase you made before.
Purchases are governed by the store’s own terms and privacy policy: the Google Privacy Policy and the Apple Privacy Policy.
7. Exporting Your Data
Hero Pass includes an export feature. When you tap it, the App copies your training data to your device’s clipboard in a readable format so you can keep your own copy. Nothing is sent anywhere by the App; where you paste it is entirely up to you.
8. Links to Websites
Links in the App, such as this policy and the Terms of Service, open in your device’s web browser. The “More from ZiBa” section links to our other apps in Google Play or the App Store. Following a link only records that the link was tapped (section 4); nothing else is sent.
9. App Permissions
- Camera — only when you choose to take a progress photo.
- Photo library — only when you choose a photo to add (on Android through the system picker, without broad library access).
- In-app billing — so Google Play or the App Store can process Hero Pass purchases.
- Internet access — for Hero Pass purchases and the Firebase services in section 4.
- Advertising ID (Android) — used by Firebase Analytics for campaign measurement, as described in section 4.
10. Device Backups
Depending on your own Android or iOS backup settings, your device may include the App’s data in a Google or iCloud backup. Those backups are made and held by Google or Apple under their policies and your account settings — not by us, and we cannot access them.
11. Keeping and Deleting Your Data
Your data stays on your device until you remove it. Inside the App you can delete individual progress photos, delete exercises from your routine, and reset a day’s progress. To remove everything, uninstall the App or clear its storage in your device settings.
Because we hold no copy of your training data or photos, we cannot recover them if you delete the App or lose your device. Firebase usage and crash data is deleted automatically after the periods in section 4; contact us if you want it deleted sooner.
12. Children’s Privacy
The App is not directed at children under 13 and should not be used by them, as set out in our Terms of Service. We do not knowingly collect personal data from children; if you believe a child has used the App, contact us and we will delete any related usage data.
13. Your Rights Under GDPR (EU / EEA Users)
Under the GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to its processing. Your training data and photos stay on your device, so you exercise these rights for them directly in the App. For the Firebase usage and crash data in section 4, contact us and we will help. If you have a question or a concern, contact us using the details below. You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.
14. International Data Transfers
ZiBa Entertainment is based in the Netherlands (EU). Google may process Firebase data outside the EEA, including in the United States, relying on the EU–US Data Privacy Framework and Standard Contractual Clauses. Payment processing by Google Play or the App Store is covered by their own policies.
15. Security
Your data is protected by your device’s own security and the App’s private storage, which other apps cannot read. Keeping your device locked with a PIN, password or biometrics is the best way to protect your training history and photos.
16. Changes to This Policy
If the way the App handles information changes, we will update this page and its effective date before the change reaches the App. If we add anything else that sends data off your device, this policy will say so plainly first.
17. Contact Us
Questions about your privacy? Get in touch:
- Email: info@zibaentertainment.com
- Developer: ZiBa Entertainment — Zico Bakker
- Location: Gouda, Netherlands
- App: Hero Workout (
com.zibaentertainment.heroWorkout/com.zibaentertainment.hero_workout)
We typically respond within 5 business days.