Hara Fitness

Privacy Policy

Last updated: 3 October 2026. Applies to Hara Fitness version 0.2 and later.

Hara Fitness ("Hara", "we", "us") is published by Hara Technologies Sdn. Bhd. This policy explains what happens to your information when you use the Hara Fitness app for iPhone. It is written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. The short version

To use Hara you create an account, with Sign in with Apple or an email address and password. Your account, public profile and anything you publish are stored on Hara's servers so other people can see them.
Your journal, streaks, rest days, personal bests, goals and Apple Health data stay on your iPhone. We don't receive them.
We do not show ads, use analytics or tracking tools, or sell or share your data.
If you connect Apple Health, Hara reads your Activity rings and workout calories and saves your finished workouts there. Health data never leaves your iPhone through Hara and is never used for advertising.
You can delete your account and everything we hold at any time with Settings & Privacy → Delete Account.

2. What we store on Hara's servers

Your account: your email address (or the identifier and, if you allow it, the name and email Apple shares with us), your password in a securely hashed form that we cannot read, and when you signed up.
Your public profile: name, username, bio and profile photo. Anyone signed in to Hara can see these.
Programs you publish (coaches): titles, descriptions, workouts, cover photos, and the photos and videos you add. Published programs can be seen and played by anyone signed in to Hara. Drafts are visible only to you.
Your likes and follows: which programs and workouts you like, and which coaches you follow. Other people can find you in search and see the programs and workouts you liked on your profile, unless you make your profile private (Settings & Privacy → Account Privacy); then only you see your likes. Your profile is public until you change it. Like and follower totals are always shown.
People you block: who you blocked, so they don't appear in your search and neither of you sees the other's likes. You can unblock anyone in Account Privacy → Blocked Accounts.
Coach access: whether your account is a coach account, and the invite code you used.
Coach applications: if you apply to become a coach, the details you enter (your full name, specialties, years of experience, certifications, links, message and contact email). Only Hara's team reads them, to decide on your application, and we may email you about it. They're deleted with your account.
Reports: if you report a program, profile or comment, we store what you reported, your reason and who sent it, so Hara's team can review it. The person you report is not told who reported them.

We use this information only to run Hara: to sign you in, to show your profile and programs, and to count likes and followers. Hara's servers are operated for us by our hosting provider, Supabase, in Singapore. They process the data only on our instructions and under contract, and keep it secure and encrypted in transit. By using Hara you consent to this transfer outside Malaysia, which is made with safeguards as the PDPA requires.

3. What stays on your iPhone

Hara keeps the following on your device only, using Apple's on-device database. We don't receive a copy:

Your training: journal entries, logged difficulty, notes, active energy, rest days, streaks, personal bests and goals.
Drafts in progress: a program you're building is saved on your iPhone first, and uploaded only when you save it as a coach.
Your settings: notification, privacy and other preferences.

If your iPhone is backed up to iCloud or a computer, the backup is controlled by your own Apple settings, not by us.

4. What else leaves your iPhone

Sign in with Apple. Apple gives Hara an anonymous account identifier and, only if you allow it, your name and email address (which can be Apple's private relay address). Apple's handling of your Apple Account is covered by Apple's privacy policy.
Email from Hara. We email you only about your account: to confirm your address and to reset your password.
Hara Pro subscriptions. Purchases, free trials, renewals and refunds are handled entirely by Apple through the App Store. We never see your payment details. The app only receives whether your subscription is active.
Apple Health. Workouts Hara saves become part of your Health data, which Apple syncs according to your own Health and iCloud settings.
Contacting us. If you email us from the app (including Send Beta Feedback), we receive what you send, including your email address, and use it only to reply and to improve Hara.
TestFlight (beta testers). If you test Hara through Apple's TestFlight, Apple shares with us the information TestFlight collects under Apple's own privacy policy: your name and email address if you were invited by email, crash reports, device and iOS version, and any feedback or screenshots you choose to send. We use it only to fix problems and improve Hara.

5. Apple Health and Apple Watch

Connecting Apple Health is optional. You choose what to allow in Apple's permission sheet, and you can change it at any time in the Health app (Profile → Apps → Hara).

What Hara reads: your daily Activity rings (Move, Exercise and Stand) and the active energy your Apple Watch or iPhone records, so it can show your rings and the calories you burn during a workout.
What Hara writes: your finished workouts (type, start and end time), so they appear in Apple Health and the Fitness app.
What Hara does not do: Health data is read and used only on your iPhone. It is never sent to us or to anyone else, never used for advertising, marketing or data mining, and never stored in iCloud by Hara. The calories for a workout are saved with that journal entry on your iPhone.

6. Photos and videos

When you add a cover photo, profile photo or workout video, you choose it in Apple's photo picker. Hara can only see the items you pick — not the rest of your library. Videos are trimmed and resized on your iPhone. Your profile photo, and the photos and videos in programs you publish — including any sound in those videos, such as your voice — are uploaded to Hara's servers so others can see and hear them.

When you share a personal best or goal, any photo you put behind it is used only on your iPhone to make the image. It is not stored or uploaded by Hara. If you tap Save, Hara asks for permission to add that image to your photo library; it can add photos but can't see your library.

Likes, follows and blocks are saved to your account, and your liked programs and workouts appear on your profile unless it's private.

Comments on Bits are saved on Hara's servers with your name, username and profile photo, and anyone signed in to Hara can read them — except people you've blocked, or who have blocked you. Likes on comments are saved too; others see how many likes a comment has, not who liked it. You can delete your own comments at any time, and deleting your account deletes them all. If someone reports a comment, Hara's team reads it, along with who wrote it and who reported it, and may remove it. Comments go through a word filter on your iPhone before they're posted.

Share links (go.harafitness.com) contain only the ID of the program, coach or workout you share. Opening one doesn't send us anything about you.

Messages are not available yet. Before they launch, we will update this policy to explain what is shared and with whom.

8. No ads, no tracking

Hara does not include advertising, third-party analytics, crash-reporting or tracking tools (other than Apple's own TestFlight reports during the beta), and does not use your device's advertising identifier. We do not sell or rent your personal data, and we share it only with the hosting provider named above, to run Hara.

9. How long we keep your data

We keep your account and published programs for as long as you have a Hara account. Settings & Privacy → Delete Account permanently deletes your account, profile, programs, photos and videos, comments, likes and follows from our servers, and everything Hara stored on your iPhone. Server backups are overwritten within 30 days. If you contacted us by email, we keep that correspondence only as long as needed to help you.

10. Your rights

Under the PDPA you may ask for access to your personal data, ask for it to be corrected, withdraw your consent, and ask for it to be deleted. You can view and edit your profile and programs, and delete your account, directly in the app. For anything else, contact us using the details below and we will respond within 21 days.

11. Children

Hara is not directed at children under 13, and you must be at least 13 to use it. In Malaysia a person under 18 is a minor: if you are under 18, a parent or guardian must agree to our Terms of Use and this policy for you.

12. Changes

We will update this policy when the app changes how it handles information. The date at the top shows the latest version, and we will tell you in the app before any change to what we collect or share.

13. Contact

Hara Technologies Sdn. Bhd. (Company No. 201901010477 (1319805-K))
18 Dutamas Raya, 51200 Kuala Lumpur, Malaysia

Ms. Luna Kamarudin, Customer Relations Manager
Email: hejhej@haratechnologies.com
Phone: +60 10-279 5025