Home Hero / YOUR DATA
Privacy Policy
How Home Hero handles local data, accounts, Apple Health, purchases and support requests.
Last updated: September 8, 2026
Who is responsible
Luca Corsilli is the data controller for Home Hero and homeheroquest.com. For privacy questions or rights requests, contact luca.corsilli@gmail.com. This policy covers the app, the website and support correspondence.
Training on your device
The app stores your profile, goals, training preferences, baseline assessments, detailed plan, sessions, exercise measurements, activity history and feedback on your device. Feedback may include energy, perceived effort, pain and notes. The coaching rules run locally; these detailed records are not sent to Firebase. You can start as a guest.
Optional account and cloud sync
You can sign in with email and password or Sign in with Apple. Firebase Authentication processes account identifiers, email, authentication information, IP addresses and client information to operate and protect sign-in. Apple may provide a private relay email if you choose Hide My Email.
Cloud sync is off until you enable it. Sync sends your display name, training level, weekly rhythm, focus preference and activity-day dates and statuses to Firestore, linked to your account ID. Detailed workouts, pain, effort, energy, notes and Health measurements are not synced. A new device needs a new baseline assessment. Turning sync off stops future syncing; it does not erase cloud records already stored.
Apple Health
On supported iOS devices, you choose whether to allow reading steps, resting heart rate and heart rate variability (HRV), and writing completed workouts and mindful breathing sessions. Available readings can provide conservative local training guidance. Missing readings are not treated as zero. Health measurements remain on your device and are not sent to Firebase, used for advertising or sold.
You can change permissions in Apple Health or iOS settings. Revoking access stops future access; it does not automatically delete entries already saved in Apple Health. You manage those entries in Apple Health. Training guidance is not a medical diagnosis or an eligibility decision.
Subscriptions
Apple processes App Store purchases and payments. Home Hero uses StoreKit transaction and entitlement information to check Pro access and restore purchases. We do not receive your payment-card details. Apple handles its account and purchase information under its own privacy policy. Deleting a Home Hero account does not cancel an Apple subscription.
Website and support
Firebase Hosting receives connection information, such as IP address, requested URL and browser information, to deliver and secure this website. The website does not use advertising trackers, analytics scripts or non-essential cookies; fonts and app screenshots are hosted with the site.
If you email support, we receive your email address and whatever you include in the message or attachments, and use them to answer your request. The support form prepares an email draft locally in your browser. It does not submit the fields to a server. Your email app and provider process the draft and send it when you choose Send. Our support mailbox is hosted by Gmail. Please do not send passwords, payment-card details or Health exports.
Purposes and legal bases
Where EU or UK data-protection law applies, we use account, sync and purchase-status information to provide the services you request; optional Health access and optional processing of health-related information depend on your explicit permission or consent. Security and necessary website operations serve our legitimate interest in keeping the service safe and available. We handle support requests to provide assistance, fulfil the service or meet legal obligations, as appropriate. You can withdraw consent without affecting processing already carried out.
Service providers and international processing
Google Firebase provides hosting, authentication and cloud storage. Apple provides sign-in, Health and App Store services. Support correspondence is handled through Gmail and the email provider you choose. Data needed for these services may be processed outside your country, including outside the EEA. The provider policies linked below describe their processing locations and any transfer safeguards they offer. Contact us for information about the providers used for your data and the applicable safeguards.
How long data is kept
Local records remain in the app’s storage until removed. Deleting the app removes its local app data; device or cloud backups managed by your operating system may retain copies. Cloud profile and activity records are kept until you delete your account or request erasure. Support correspondence is kept for as long as needed to resolve the request and satisfy any applicable legal obligations. The website does not keep an archive of support-form drafts. Provider security logs and backup copies follow their applicable retention schedules.
Deletion and your choices
To delete your account, open Profile, then Account, and use Delete account. An internet connection and recent sign-in are required. A successful deletion removes the account’s cloud records, authentication account and its local training/profile records; separate guest records remain. You can also request help by email, including if you cannot sign in.
Deleting the app alone does not delete your cloud account. Deleting your account does not remove records already written to Apple Health or cancel your subscription. Manage those separately with Apple.
Your privacy rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Email the contact above; we may need to verify your identity without requesting your password. You can complain to your local data-protection authority, including the Italian Garante. No advertising profiles or automated decisions producing legal or similarly significant effects are used by this version.
Changes to this policy
We update this page when the app or its data practices change and revise the date above. Material changes requiring additional permission will be presented before the relevant new processing begins.