Skip to main content

Hollis Workouts Privacy Policy

Effective Date: 2026-09-24 • Last Updated: 2026-09-24

Hollis Workouts is operated by Hollis Health LLC. This Privacy Policy explains what information the Hollis Workouts app collects, how we use and share it, how long we keep it, and the choices you have.

Hollis Workouts Privacy Policy

Effective Date: September 24, 2026

This Privacy Policy explains how Hollis Health LLC, a Texas limited liability company ("Hollis Health," "we," "us," or "our"), collects, uses, shares, retains, and protects information when you use the Hollis Workouts mobile app for iOS and Android (the "App") and the Hollis account you sign in with.

This Policy covers the App only. Hollis Health's coaching, membership, and studio services are covered by our separate Privacy Policy.

Hollis Workouts is a training log and coaching tool. It is not a medical device and does not provide medical advice.

1. Who We Are and How to Contact Us

Hollis Health LLC
Attn: Privacy
818 Knights Cross Dr, Suite 5104
San Antonio, TX 78258

Privacy requests: admin@hollis.health
App support: support@hollis.health

Privacy Officer (including grievances for users in India): admin@hollis.health. Contact the Privacy Officer with any question or complaint about how we handle your information. We respond within the time required by applicable law.

2. Information We Collect

2.1 Account Information. When you create a Hollis account, we collect your email address and a password, which our sign-in service stores only as a hash. You may also give us a display name. If you sign in with Apple or Google, we receive your email address from that provider and, if you share it, your name. We keep your email address and display name in your Hollis Workouts profile. Each account has an internal user ID. The Hollis account is shared with other Hollis Health apps and services.

2.2 Training Data You Enter. This includes:

  • workouts, exercises, sets, repetitions, weights, rest times, and cardio activity
  • training programs
  • gyms, their equipment, and their addresses and map coordinates
  • custom exercises, their names and notes, and exercise names you use
  • pre- and post-workout check-ins, such as sleep, energy, stress, soreness, and hydration, whether you hit your nutrition targets, and any notes you add
  • body weight you enter
  • injuries and limitations you record
  • profile settings, such as experience level, training goals and phase, units, language, time zone, notification preferences, and gender if you choose to set it

We store this information on our servers under your account so it is backed up and syncs across your devices. We also store information the App calculates from it, such as strength estimates and progression history, training summaries, and weekly reviews.

2.3 Apple Health and Health Connect. Only if you grant permission, the App:

  • reads from Apple Health: body weight; dietary energy, protein, carbohydrates, and fat; active and basal energy burned; and sleep analysis;
  • reads from Health Connect: weight, nutrition, active calories burned, basal metabolic rate, and sleep;
  • writes your completed workouts, including estimated calories burned, to Apple Health or Health Connect.

Most of this information is used only on your device, for example to show body-weight and nutrition views. Two things leave your device:

  • Weekly review. To build your Sunday Review, the App calculates daily totals of sleep hours and dietary calories for your training days over the most recent eight weeks. It sends those totals to our servers, where they are stored with your weekly review so the review can be displayed. Our AI provider receives only aggregate statistics calculated from those totals, namely how strongly sleep or calories relate to your training, how many days were included, and which weeks were covered. It never receives the daily values.
  • Body weight. Your most recent body weight, whether you entered it or it came from Apple Health or Health Connect, is stored with your strength scores on our servers, and it is included in the information sent to our AI provider when you use the program builder.

You can turn off access at any time in the Health app on iOS or in Health Connect settings on Android. We do not use information from Apple Health or Health Connect for advertising or marketing, and we do not sell it.

2.4 Location. If you allow location access and at least one of your saved gyms has map coordinates, the App checks your device's location while it is open, for example on the home screen or when you start a workout, to suggest which of your saved gyms you are at. That comparison happens on your device, and this location is not sent to us.

When you save a gym, we store its address and map coordinates with the gym. They come from either your current location, if you choose to use it, or the address you pick from search results. Address searches are sent directly from the App to Google Maps Platform. Looking up the address of your current location uses your device's built-in geocoding service, provided by Apple on iOS and by Google on Android. The App never uses your location in the background.

2.5 Camera, Photos, and Voice.

  • Smart Reader: the photo you take of gym equipment, and any description you add, is sent to our servers and our AI provider to identify the equipment.
  • Voice logging: your recording is sent to our servers and our AI provider to turn it into logged sets.

We do not keep these photos or recordings after the request completes. Photos you attach to your own custom exercises stay on your device. Only a reference to the file on your device is synced, not the photo itself.

2.6 AI Features. When you use the AI coach, the program builder, or other AI features, we store your messages, the AI's replies, program-builder drafts, and the AI-generated content shown to you, such as workout analyses, plateau notes, and weekly review summaries. We also keep a record of AI requests and the information they used, so you can review them in the App and so we can investigate problems.

2.7 Purchases. If you subscribe to Hollis Intelligence, Apple or Google processes your payment, and we never receive your card details. We and our subscription provider, RevenueCat, receive the transaction record, such as the product, dates, status, and store transaction ID. If you opened the App from a promotional link, we also receive the promotional code.

2.8 Push Notifications. If you allow notifications, we store a push token for your device. We use it to send workout reminders, weekly review notices, and, if you subscribe, smart notifications. Our AI provider writes smart notifications from your recent training, such as your planned workout or recent progress. We keep a copy of each notification we send.

2.9 Product Analytics. See Section 5.

2.10 Diagnostics. When the App or our servers hit an error or run slowly, we collect crash reports and performance data through Sentry. These reports are linked to a hashed identifier, not to your email address. They may include a short masked screen recording around an error, or occasionally from a small sample of normal sessions. In these recordings all text and images are hidden. Our servers also keep operational logs for troubleshooting, such as request path, status, timing, app version, and your user ID.

2.11 Feedback and Suggestions. If you cancel a subscription and choose to tell us why, we store the reason you select and any comment you type. If you suggest a custom exercise for the public exercise library, we store your suggestion and review it. If we approve it, it becomes part of the library available to all users, without your name or account ID.

We do not collect your contacts, your browsing history, or your device advertising identifier. We do not track you across other companies' apps or websites.

3. How We Use Information

We use information to:

  • provide the App: your account, syncing, workout logging, progression and analytics screens, gym features, reminders, notifications, and weekly reviews;
  • provide the AI features you choose to use: program building, the AI coach, voice logging, Smart Reader, exercise matching and search, workout analyses, smart notifications, and weekly review summaries;
  • process subscriptions and determine which features you can access;
  • keep the App working and secure: diagnosing crashes and errors, and preventing fraud and abuse;
  • improve the App through product analytics, as described in Section 5;
  • communicate with you about your account and respond to support requests.

We do not sell your personal information. We do not use your information for advertising, and we do not disclose health or fitness information to data brokers.

4. How We Share Information

We share information only with service providers that process it on our behalf, under our instructions:

  • Amazon Web Services (United States): hosting for our servers and database. It stores all App information kept under your account.

  • Google LLC, Gemini API (United States): AI features. It receives the information needed for the feature you use, such as:

    • your recent workouts, check-in answers, programs, and progression for the program builder, AI coach, workout analyses, and smart notifications;
    • injuries and limitations you record, and your gender and body weight if available, for the program builder;
    • gym equipment lists;
    • your messages to the AI coach and program builder;
    • voice recordings;
    • Smart Reader photos;
    • exercise names and search text;
    • aggregate statistics for the weekly review.

    We use Google's paid Gemini API service. Under its terms, Google does not use these prompts or responses to improve its products. It keeps them for a limited period only to detect and prevent abuse and for legal or regulatory disclosures.

  • Google LLC, Maps Platform (United States): gym address suggestions and locations. It receives the address text you type and the address you choose.

  • PostHog Inc. (United States): product analytics. See Section 5.

  • Functional Software, Inc. / Sentry (United States): crash and performance diagnostics for the App and our servers. It receives crash reports, performance traces, masked recordings, and a hashed user ID.

  • RevenueCat, Inc. (United States): subscription management. It receives your user ID, transaction records, and a promotional code if you arrived through one.

  • Expo / 650 Industries, Inc. (United States): app updates and push notification delivery. It receives your push token and the content of notifications.

  • Apple and Google: sign-in, in-app purchases, push delivery, device geocoding, and the Apple Health and Health Connect integrations, as needed to provide each service.

Hollis Health coaching. Hollis Health's coaching service is part of our company and uses the same Hollis account. If you link the App to a Hollis Health coaching membership, your coach can see your recent workout activity for the last 30 days: dates, program and day names, completion status, and duration. Your coach can also send programs to your App. Hollis Health staff can look up a Hollis Workouts account by name or email to assign a program or to provide support.

We may also disclose information:

  • when required by law;
  • to protect the rights, safety, and security of our users, Hollis Health, or others;
  • as part of a merger, acquisition, or sale of assets, subject to this Policy.

5. Product Analytics

We use PostHog to understand how the App is used, such as which screens people open, which features they finish, and where they get stuck.

What we send. We send:

  • product interaction events, for example that a workout was started or a purchase screen was viewed;
  • rounded ranges instead of exact values, for example the number of sets or the length of a workout, and basic program details such as the number of training days;
  • choices you make in settings, such as your experience level or training phase, and whether a permission was granted;
  • the app version and build;
  • language, time zone, and screen size;
  • a country derived from your IP address.

We do not store your IP address. Analytics events identify you by a one-way, salted cryptographic hash of your account ID, not by your email address or name.

What we never send. We never send:

  • workout values, such as weights, repetitions, or estimated maxes;
  • body measurements;
  • anything read from Apple Health or Health Connect;
  • anything you type or say, such as notes, search text, voice recordings, AI conversations, or names you create;
  • exercise names;
  • gym addresses or precise location;
  • photos.

PostHog does not record your screen.

Your choice. If your device's region is set to a country in the European Economic Area, the United Kingdom, Switzerland, or India, we ask for your consent before collecting any product analytics and collect nothing until you agree. Elsewhere, product analytics is on by default. Wherever you are, you can turn it off or back on at any time in Settings → Account → Data & privacy. When you delete your account, we ask PostHog to delete your analytics profile.

Purchases. Our subscription provider sends records of subscription purchases, renewals, cancellations, and refunds to PostHog. These records are sent on a separate legal basis, performing our contract with you and meeting our billing and accounting obligations, so they are sent whether or not product analytics is on. They are linked to the same hashed identifier used for analytics. They cover the transaction only, and do not include product usage events for users who have turned analytics off.

6. Legal Bases (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we rely on:

  • Contract: your account, syncing, core features, the AI features you use, and subscriptions;

  • Consent:

    • product analytics in the EEA, UK, and Switzerland;
    • Apple Health and Health Connect access;
    • location, camera, microphone, and notifications.

    You may withdraw consent at any time. Withdrawal does not affect processing that happened before you withdrew.

  • Explicit consent: health information such as check-in answers, injuries, body weight, and information from Apple Health or Health Connect;

  • Legitimate interests:

    • security, fraud and abuse prevention, and crash diagnostics;
    • product analytics where consent is not required;

  • Legal obligation: tax and accounting records, and responding to lawful requests.

7. International Transfers

Hollis Health is based in the United States, and our service providers process information there. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on:

  • the EU–U.S. Data Privacy Framework, its UK Extension, and the Swiss–U.S. Data Privacy Framework, where the recipient is certified;
  • otherwise, the European Commission's Standard Contractual Clauses in our data processing agreements.

Amazon.com, Inc. (for Amazon Web Services), Google LLC, PostHog Inc., Functional Software, Inc. (Sentry), and 650 Industries, Inc. (Expo) are certified under these frameworks. RevenueCat, Inc. is not certified; transfers to it rely on the Standard Contractual Clauses, with the UK and Swiss addenda, in its data processing agreement.

8. Retention and Deletion

We keep information for these periods:

  • Account and training information: while your account exists. It is deleted when you delete your account, except as described below.
  • Items you delete one at a time: removed from the App right away.
    • Workouts and programs, along with the progress records, exercise settings, and plateau notes that belong to them, have their contents erased from our servers about 30 days after you delete them. We keep only a record that the item was deleted, so your other devices remove it too.
    • Gyms, custom exercises, and injuries you delete, and weekly reviews and AI records that mention a deleted workout, are kept on our servers until you delete your account.
    • To have any of these erased sooner, email admin@hollis.health.
  • Database backups: automated backups expire after 30 days. We occasionally take a manual snapshot before database maintenance and delete it once the maintenance is confirmed.
  • Server operational logs: kept for 90 days.
  • Product analytics:
    • product analytics events may be kept by our analytics provider, PostHog, for up to 7 years. These are pseudonymous usage and telemetry events only: which screens and features are used, and rounded workout counts. They contain no health values and no text you type or say (see Section 5);
    • your analytics person record is deleted when you delete your account.
  • Diagnostics (Sentry): kept for 30 days.
  • Voice recordings and Smart Reader photos: not stored by us after the request completes.
  • Transaction records: kept as required for accounting and tax purposes, including records of lifetime purchases. Apple, Google, and RevenueCat keep their own records under their own policies.

Delete your account in the App. Open Settings → Account, choose Delete Workouts Account, and pick one of two options:

  • Delete Workouts only removes your Hollis Workouts data and keeps your shared Hollis login for other Hollis Health apps and services.
  • Delete shared Hollis login removes your Hollis Workouts data and also deletes your Hollis login.

Either option removes:

  • your profile, workouts, programs, and gyms;
  • custom exercises and progression records;
  • check-ins, injury notes, and weekly reviews;
  • AI conversations, drafts, and other AI-generated content;
  • notification history, cancellation feedback, and usage records.

It also signs you out on this device and requests deletion of your analytics profile. It deletes your customer record at our subscription provider, RevenueCat, unless a subscription or Hollis Health coaching access is still active. Information stored in Apple Health or Health Connect stays under your control there. We keep transaction records as described above, and records of a linked Hollis Health coaching membership are handled under the Hollis Health Privacy Policy. Exercise suggestions still waiting for review are deleted. Exercises you suggested that became part of the public library stay there, without your account ID.

Delete without the App. Follow the steps at hollis.health/workouts/delete-account, or email admin@hollis.health. You can also ask us to delete specific information while keeping your account.

Deleting your account does not cancel an App Store or Google Play subscription. Cancel it in your store account settings.

9. Security

We protect information by:

  • encrypting it in transit and at rest;
  • restricting access to people who need it;
  • storing passwords only as hashes;
  • keeping credentials in a managed secrets store;
  • stripping identifiers such as your email address from crash reports before they leave your device.

No method of transmission or storage is completely secure.

10. Your Rights and Choices

Depending on where you live, you may have the right to:

  • access, correct, delete, or export your information;
  • object to or restrict certain processing;
  • withdraw consent.

In the App:

  • export your training data as JSON or CSV in Settings → Account → Data & privacy;
  • manage product analytics in the same place;
  • review AI conversations in Settings;
  • manage Apple Health, Health Connect, location, camera, microphone, and notification permissions in your device settings.

For a complete copy of your information, including AI conversations, or to make any other request, email admin@hollis.health. We verify requests before acting on them and respond within the time required by applicable law, usually within 30 days.

If you are in the EEA or the UK, you may also complain to your local data protection authority. Residents of California and other U.S. states have the rights provided by their state's law. We do not sell or share personal information for cross-context behavioral advertising.

11. Children

The App is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect their information. If you believe a child has created an account, contact admin@hollis.health and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. If we make a material change, we will update this page and notify you in the App or by email. The "last updated" date above shows when this Policy was last revised.

Delete your Workouts account•Terms of Service•Support