Introduction
FiftyStrong (“we”, “our”, “us”) is a twelve-week strength and mobility programme delivered through the FiftyStrong app and the website at fiftystrong.app. The service is operated by Eugene Chan, sole proprietor, in Hong Kong SAR.
This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. By creating an account or using the app or website, you agree to the practices described here.
A note on health information. To build your programme we ask about your age, sex, height, weight, where you have pain or stiffness, whether you are peri- or post-menopausal, and what you can and cannot do today. Many privacy laws treat this as sensitive personal information. We collect only what the programme actually uses, we do not sell it, we do not use it for advertising, and we do not share it with advertising networks.
What we collect
Information you give us
Quiz answers. Every answer you give in the movement quiz, and the profile we calculate from it — your emphasis, your starting level, your goal. This is what the programme is built from. You can take the quiz before you have an account; until you sign up those answers sit against an anonymous identifier, not your name.
Account details. Your email address, your display name if you set one, and your time zone.
Workout records. Which sessions you started and finished, which movements you completed and for how long, and your check-ins afterwards — how hard it felt, whether anything hurt, where, and any note you write.
Support messages. When you email us, we keep your address and what you wrote.
Information collected automatically
Usage data. Which screens you open, which buttons you press, how far you get in the quiz, and where you stop. We use PostHog for this, served through our own domain.
Session recordings — website only. On fiftystrong.app we record a replay of the pages you visit so we can see where the quiz and the checkout confuse people. Everything you type is masked before it leaves your browser — we see that a field was filled, never what was in it. Payment fields belong to Stripe and never appear in a recording. The app does not record your screen.
Technical data. Device type and model, operating system version, app version, browser, screen size, language, time zone, the country and city inferred from your IP address, and the page that sent you to us.
Crash and error reports. When something breaks, we capture the error and where it happened.
Information from other companies
Sign-in providers. If you sign in with Apple, Google or Facebook, we receive the name and email address that provider releases to us, plus an identifier so we can recognise you next time. If you use Sign in with Apple and choose to hide your address, we only ever see Apple’s relay address. We receive nothing else from your account and we never post anything.
Payments. Stripe (website) and Apple (in-app purchases) tell us whether your subscription is active, when the period ends, and the identifiers we need to match a payment to your account. We never see or store your card number.
Advertising measurement — website only. Our marketing pages carry the Meta pixel, which tells Meta that a visit or a purchase happened so we can measure our advertising. It is on fiftystrong.app only. The app contains no advertising SDK and does not use your device’s advertising identifier (IDFA). We do not track you across other companies’ apps or websites, and there are no ads inside the app.
Permissions the app asks for
None. The app requests no camera, no photo library, no microphone, no contacts, no location services, no Apple Health and no tracking prompt. If that ever changes, this policy will change before the feature ships.
How we use it
- To build and run your programme — your quiz answers and check-ins decide which movements you get, at what level, and how the plan adapts every four weeks.
- To give you access — signing you in, keeping you signed in, and restoring your programme on a new device.
- To take payment — starting, renewing and cancelling your subscription, and honouring free weeks and promotional codes.
- To email you — sign-in links, receipts and programme reminders. Marketing email only if you ask for it, and every one carries an unsubscribe link.
- To improve the product — understanding where people get stuck, testing changes, and fixing what breaks.
- To measure our advertising — on the website only, and never using your health information.
- To answer you when you write in.
- To keep the service safe and lawful — preventing fraud and abuse, and complying with the law.
We do not use your information to make automated decisions with legal effects, and we do not profile you for anyone else’s purposes.
Retention
- Quiz answers given before you subscribe are kept for up to 24 months, so your programme is still there if you come back, and then deleted.
- Account, programme and workout records are kept while your account exists.
- When you delete your account we remove your account, quiz answers, programme and workout history from our live systems within 30 days, and from encrypted backups within a further 90 days.
- Payment records are kept for 7 years where tax and accounting law requires it. Those are transaction records — amount, date, tax — not your health information.
- Analytics events are retained for up to 12 months; session recordings for 30 days.
International transfers
We are in Hong Kong SAR; our providers are largely in the United States and the European Union. Your information will be transferred and processed outside the country you live in. Where the law requires it, we rely on standard contractual clauses or an equivalent safeguard with each provider.
Your rights and choices
Whatever country you are in, you can ask us to:
- Show you what we hold about you, in a portable format.
- Correct anything that is wrong.
- Delete your account and everything in it.
- Restrict or object to how we use it, including withdrawing consent you have given.
- Stop marketing email, from the link in any of them.
To delete your account: in the app, go to Account → Delete account. That removes your account, your quiz answers, your programme and your workout history. You can also email us and we will do it for you.
Deleting your account does not cancel a subscription bought through the App Store — cancel that in Settings → Apple ID → Subscriptions. If you subscribed on the website, cancel from the billing link in your receipt or write to us.
To exercise any of these, email support@fiftystrong.app. We respond within 30 days. If you are in the EEA or the UK you may also complain to your data protection authority; in Hong Kong, to the Privacy Commissioner for Personal Data.
Children
FiftyStrong is built for adults and is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us personal information, write to us and we will delete it.
Changes to this policy
We update this policy when what we do changes, and the date at the top always tells you when it last changed. If a change is material we will tell you in the app or by email before it takes effect.
Contact
Questions, requests or complaints about this policy: support@fiftystrong.app.
FiftyStrong · Eugene Chan · Hong Kong SAR