HourSet

HourSet — Privacy Policy

Last updated: 23 September 2026

HourSet has no account and no sign-in. It collects nothing that identifies you. Your training stays on your own device.

There are three exceptions. All are worth stating at the top rather than burying.

The subscription screen talks to a payment service. It fetches prices, and checks whether you have already paid. If you never open that screen, the app never contacts anybody about money. What it sends is set out under "Purchases".

If the app hits an error, it sends the error. Not what you were doing, and not what you lifted. It sends the fault itself, where in the code it happened, and the phone model and operating system version. No identifier goes with it. Two reports from the same phone cannot be recognised as coming from the same phone. This is set out under "Crash diagnostics".

Once a day, the app sends anonymous usage counts. Counts such as "a workout was finished" or "an exercise was swapped for another". No identifier, nothing about your body, never your weights or reps. You can switch it off in Settings. This is set out under "Anonymous usage counts".

One other thing can leave your device. If you switch spoken cues on, the cue goes to your phone's own text-to-speech engine. That is described further down.

What the app stores

Everything HourSet knows about you is written to your own device and stays there:

• your training plan and the days in it
• the sets you log: weight, reps and time
• your settings: units, equipment available to you, injuries or exercises you have marked as not for you

This is held in the app's private storage. No copy is sent anywhere. Uninstall the app and all of it is deleted with it.

None of this is ever transmitted, including when you buy a subscription. Your training history is not part of a purchase. It is never sent with one.

Purchases

Browsing HourSet is free: today's plan, the exercise previews and your progress. Starting a workout needs a subscription or a one-time purchase. Payment is handled by Apple or Google. HourSet never sees your card, your billing address or your store account.

To know whether you have paid, the app uses RevenueCat, a subscription service operated by RevenueCat, Inc. in the United States. When it runs, it sends:

• a random identifier RevenueCat generates for this installation. Not your name, email, or any account of yours, and not linked to anything else
• the purchase receipt issued by Apple or Google
• your device platform, operating system version, app version and country

When it runs is deliberately limited. The app does not start RevenueCat when it launches. It contacts the service in two situations:

• When the subscription screen is shown. Before you subscribe, that happens when you press Start on a workout, or open the plans from Settings. Browsing the app - the plan, the exercise previews, your progress - shows no subscription screen and makes no such request.
• When a subscription you already have is within 2 days of renewing, to check it is still valid. This is the only thing that happens without you opening a screen. It never applies to anyone who has not subscribed.

One more question leaves your phone, and it goes to the store you installed from. Once a day, when you open the app, HourSet asks Google Play whether a newer version exists. The question is answered by the Play services already on your phone - the same ones that installed the app and could update it silently on their own - and it carries nothing about you or your training. Nothing downloads unless you tap the update.

Two consequences worth stating plainly. If you never open the subscription screen, the only network requests HourSet makes are that once-a-day version check to Google Play and, unless you switch them off, the once-a-day usage counts described below. And the one-time lifetime purchase cannot lapse, so it is never re-checked.

RevenueCat's own privacy policy is at https://www.revenuecat.com/privacy/.

Crash diagnostics

When something in the app goes wrong, a report is sent to Sentry (https://sentry.io), a diagnostics service. It contains the error, the line of code it came from, and the device model and OS version. That is the whole of it.

What it deliberately does not contain:

• No identifier. No account, no device id, no advertising id, no installation id. Reports arrive unattributable, so nobody can build a picture of one person from several of them.
• No IP address stored. The app attaches none. Sentry is configured to discard the one its servers see when the report arrives.
• No release health or session pings. Sentry can report every launch and foreground of the app, with an installation id attached. That is switched off. Nothing is sent unless something has gone wrong.
• No screenshots. Sentry can attach a picture of the screen at the moment of an error. On this app that would be a picture of your workout. It is off.
• No record of what you did. Sentry can log every tap and screen change alongside an error. That is switched off. A trail through the app is a log of your workout under another name.
• No performance monitoring. That is telemetry about ordinary use rather than about a fault. This app does not do telemetry.

An error inside the app does not register as a crash with Apple or Google. Without these reports, a fault could only be reported as "it broke". A bug nobody can locate is a bug that stays.

Sentry's privacy policy is at https://sentry.io/privacy/.

Anonymous usage counts

From version 1.0.1, HourSet counts a few things about how the app is used, so it can be improved without asking anyone to sign up. The counts are added up on your phone and sent at most once a day.

What is counted:

• Changes to the plan: which exercise was swapped out and which replaced it, and which exercises were marked as not for you.
• Workouts: that one was started, finished or left early. For one left early: which part it was in (warm-up, main work or cool-down), roughly how far through, and roughly how long it had run compared with the time planned. Both are in quarters, such as "under half", never exact.
• Setting up the app: which of the three setup steps were reached, and whether setup was completed.
• The subscription screen: that it was shown, which option was tapped, whether a purchase went through, was cancelled or failed, and that the screen was closed. Not the price, not the receipt, nothing about your store account.
• How the app is set up: session length, days per week, units, sets per exercise, and which equipment is switched off. These go once per sending day. Injuries you have entered are never sent.
• Which parts of the app have been opened, once each, ever: progress, adjusting a workout, settings, sharing a workout, opening a shared workout.

What is never sent:

• No identifier of any kind. No account, device id, advertising id or installation id. Every phone's counts are added to everyone else's. Nobody can tell which counts came from which phone, or that two days of counts came from the same one.
• No weights, reps, times or notes. What you lift stays on your phone.
• No timestamps. The server records only the date a batch arrived.
• No IP address stored. The server does not read or keep it, and its request logging is switched off.
• No free text. The app can only send items from a fixed list, as short codes. Anything else is refused on the phone and again on the server.

Where it goes. To HourSet's own small server, which runs on Cloudflare Workers (Cloudflare, Inc., United States). It keeps nothing but the daily totals. Nobody else receives the counts.

Switching it off. Settings → Privacy → "Share anonymous usage counts". Switching it off also deletes any counts on your phone that had not been sent yet. Counts already sent cannot be deleted on request, because nothing in them says which were yours.

Cloudflare's privacy policy is at https://www.cloudflare.com/privacypolicy/.

What the app does not do

• No tracking. The usage counts above carry no identifier, are not linked to you, and can be switched off. The crash reports are sent only when a fault happens
• No advertising, and no advertising identifiers
• No accounts, sign-in or email collection
• No location, contacts, photos, camera or microphone access
• No profiling, and no selling or sharing of anything with anybody
• No third-party SDK that collects data, other than RevenueCat and Sentry as described above. One answers "has this person paid". The other answers "what went wrong". The usage counts go to HourSet's own server, not to an analytics company

Permissions

HourSet requests one permission: notifications. It is used only to show your rest timer on the lock screen while a workout runs. You do not have to keep the app open. It is optional. Decline it and the app works normally, with the timer on screen.

Spoken cues

Turn on spoken cues and HourSet passes the exercise name and the cue to your phone's own text-to-speech engine. On most Android phones that is Google Text-to-Speech. It may process the phrase on the device, or on Google's servers. Your own system settings decide which. HourSet sends it nothing else. No information about you is included.

Backups

Android Backup is your device's own setting. With it on, Android may include HourSet's stored data in that backup. That is handled by Android under Google's terms, not by HourSet. You control it in your device settings.

Your rights over purchase data

The identifier RevenueCat holds is random. It is not tied to your name or email. That means we cannot look you up from your own details. To have the record for your installation deleted, email the address below. Send it from the account you bought with, and we will pass the request on. Deleting it does not cancel or refund a subscription. That is done in the App Store or Google Play.

Your training data needs no request. It is on your phone. Uninstalling deletes it.

Children

HourSet is a general-purpose fitness app. It is not directed at children under 13. It collects nothing that identifies anyone, of any age. Apart from the anonymous usage counts, which can be switched off, it collects nothing at all about anyone who does not open the subscription screen or hit an error.

Changes

If this policy changes, the new version is posted at this address. It carries a new date at the top.

Contact

Questions about this policy: adriannehlee@gmail.com