This Privacy Policy explains how Harper ("Harper," "the app," "we," "our," or "us") handles information when you use Harper: Workout Coach, our website, account features, AI coaching, workout sharing, and related services. Harper is designed to collect and transmit only the information needed to provide its features. Much of your fitness and workout information remains on your device unless a feature clearly requires information to be processed or shared.
1. Information we handle
a) Information you send to the AI coach
Harper's AI Coach is provided using Anthropic, a third-party AI provider. When you ask Harper to create or adjust a workout, your request is sent from your device to Harper's backend, which sends the information needed to generate a response to Anthropic and returns the response to your device.
The information sent to Anthropic is:
- your messages to the coach and the recent conversation (including the coach's replies);
- your saved coaching preferences (such as your goal, experience level, available equipment, preferred session length, and any coaching notes you enter);
- today's workouts, including their names, exercises, start times, active work time, whether each was completed, partial, or interrupted, and whether you rated it too easy, just right, or too hard;
- a summary of your recent workout history, such as the name, intensity, and exercises of recent workouts, how recently you trained, a day-by-day summary of the last two weeks, and 7-day and 30-day totals;
- your favorite workouts, the workouts others shared with you that you chose to save, and your upcoming planned workouts; and
- your streak and session counts.
It is used only to generate your coaching responses and workouts. Health Connect and other wearable measurements are not included (see section 1e).
Your device also sends Harper's backend some additional workout context: your 0–10 effort rating and any written notes you add to a workout. Harper's backend does not send this to Anthropic and does not store it. (Your too easy, just right, or too hard rating is different: it is part of the summary sent to Anthropic, as listed above.)
Harper does not attach your name, your Harper account, or its internal profile identifier to AI Coach requests. Your messages may still contain personal details if you type them, so please avoid including information that is not necessary for your fitness request, such as precise location or unrelated private information.
In the iPhone and Android apps, Harper asks your permission before sending anything to Anthropic. If you choose Not now, AI Coach requests are not sent, and the rest of Harper keeps working. You can change your choice at any time in Settings → Privacy → AI Coach data sharing.
Harper's backend does not store AI Coach requests or keep a copy of your conversation after the response is generated. Anthropic may retain API inputs and outputs for up to 30 days under its standard API terms, or longer where needed to enforce its usage policy or to comply with law, unless a different retention arrangement applies.
Sharing a workout is a separate action that you choose (see section 1d). Using the AI Coach does not share your workouts, and sharing a workout does not send anything to Anthropic.
b) Workout, progress, and preference data
Harper may store information on your device such as workout history and results, streaks and progress, favorites and scheduled workouts, training preferences and profile information used by the coach, and workout feedback.
This workout and progress information is currently stored locally on your device. Signing in to a Harper account does not currently upload, back up, or synchronize this local workout history across devices.
If you clear Harper’s local app data, uninstall the app, or change devices, locally stored information may be lost. On Android, some app data may be restored from a device backup as described in section 1(e).
c) Optional account and authentication information
You may use Harper as a guest. Harper supports optional account functionality where it is offered, such as on the web. The iPhone and Android apps do not currently offer sign-in or account creation. If you have an existing Harper account, you can request its deletion using the process below.
If you choose Continue with Google, Google authenticates you and Harper receives information needed to establish and maintain your Harper account, which may include a Google-provided account identifier, your verified email address, and authentication information needed to establish and maintain your signed-in session.
Harper does not receive or store your Google password. Harper maintains its own internal account identifier and authentication/session records needed to recognize your account and keep you signed in. Authentication records are separate from the workout history that remains locally stored on your device.
d) Shared workouts
When you explicitly choose to share a workout, Harper sends a versioned snapshot of that workout to Harper's sharing service so that a recipient can open the same workout. The snapshot is stored under a random share identifier, without your name or account, and is kept for up to 90 days.
A shared workout may include information needed to reproduce the workout, such as exercise names or identifiers, exercise order, sets, repetitions, intervals, work/rest timing, instructions, and other workout-prescription details.
Harper does not automatically include your private profile, AI-coach memory, complete workout history, raw wearable data, heart-rate history, or device identifiers in a shared workout. Anyone who receives or obtains a valid share link may be able to view the information intentionally included in that shared workout.
e) Wearable and health information
Where supported and when you grant permission, Harper may read selected fitness or activity information made available through supported device health platforms. On Android, Harper reads exercise sessions (to find the matching workout), heart rate, and active calories from Health Connect. Harper does not request steps, distance, or total calories burned, and it does not request Health Connect's background-access or history-access permissions.
Harper uses this information only for Harper workouts you have already finished and saved. Harper does not read live data for a workout while it is in progress. Harper may check Health Connect for a matching exercise session at these times: shortly after you save a workout, repeating the check for a short time; when you open Harper or return to it, for workouts from the past 24 hours that do not yet have measurements; when you open the details of a saved workout that does not yet have measurements, tap "Check again", or connect Health Connect from that workout and return to Harper; and when you tap "Sync recent workouts" in Settings, which checks up to 10 of your 30 most recently saved workouts, including ones that already have measurements. Measurements can appear only after your watch or other device has written the workout to Health Connect, which can take several minutes or longer, so they may not be available right away. Because Harper does not request history access, Health Connect may not provide data from more than 30 days before you first granted Harper permission.
This information is attached to matching workouts stored on your device, and appears in that workout's Health metrics: the matched session's duration; the average and maximum heart rate and active calories recorded during the part of the matched session that overlaps your Harper workout; and whether the full workout or part of it was measured. Steps, distance, and total calories read by an earlier version of Harper may remain in Harper's app data on your device; Harper no longer shows them, and they are replaced if Harper successfully matches that workout again. Health Connect and other wearable measurements are stored locally in Harper's app data on your device and are not transmitted by Harper: they are not sent to Harper's servers or to Anthropic, they are not included in AI Coach requests, and they are not included in workouts you share. If Android device backup is enabled, Android may include Harper’s locally stored app data—including matched Health Connect values—in a device backup associated with the user’s Google Account and restore it to another device. Harper does not operate or have access to that backup. Harper treats wearable and health information as private by default.
The iPhone app does not currently read Apple Health (HealthKit) or Apple Watch data.
Harper does not use wearable or health information to diagnose, treat, cure, or prevent any disease or medical condition.
f) Technical information
Our hosting and infrastructure providers may process standard technical information required to deliver and secure internet services, such as IP address, request time, device/browser information, and request metadata. Harper does not use IP addresses to determine your location. Runtime logs available to Harper through Vercel are retained for one hour under our current plan.
Harper's Android and iPhone apps include their fonts and do not download fonts from Google or any other font service.
Our legacy web app at pace710.vercel.app uses Vercel Web Analytics to count page views. It does not use cookies, and it records anonymized, aggregated events that are not associated with an individual or an IP address. Harper's Android and iPhone apps do not use Vercel Web Analytics.
Harper does not use advertising identifiers for behavioral advertising and does not sell personal information.
2. How we use information
We use information only as reasonably necessary to operate Harper's requested functionality, including to authenticate an optional Harper account and maintain signed-in sessions; generate AI-coach responses and personalized workout prescriptions; provide workout, progress, timer, and coaching features; process wearable or fitness information when authorized; create and retrieve explicitly shared workouts; protect Harper against abuse, fraud, and security threats; and operate and troubleshoot Harper's backend and website.
We do not sell personal information or share it with third parties for their own behavioral advertising.
3. Service providers
Harper relies on service providers to operate portions of the service. Current providers may include:
- Anthropic — processes AI Coach requests (described in section 1a) to generate responses. Anthropic may retain API inputs and outputs for up to 30 days under its standard API terms, or longer where needed to enforce its usage policy or to comply with law, unless a different retention arrangement applies.
- Google — provides optional Google authentication when you choose Continue with Google, where sign-in is offered.
- Vercel — provides hosting and backend infrastructure used by Harper and its web services. Vercel processes standard technical information, such as IP addresses and request metadata, to deliver and secure those services. Vercel Web Analytics measures page views on our legacy web app (see section 1f).
- Upstash — stores Harper account and sign-in records, session records, and shared-workout snapshots through Vercel's storage integration.
- MoveKit — provides licensed exercise demonstration content used by Harper.
We do not sell your information or share it with third parties for their own advertising or marketing purposes.
4. Data storage, retention, and deletion
Local fitness data
Workout history, progress, preferences, and related local fitness information described above are currently stored on your device. Clearing the app's local data or uninstalling Harper may permanently delete that local information.
Account and authentication data
If you create or use a Harper account, Harper may retain the account identifier, provider association, verified email address, session records, and other records needed to operate and secure the account. Signing out does not necessarily delete the Harper account or its server-side authentication records.
To request deletion of a Harper account and the server-side account information associated with it, visit coachharper.com/delete-account or contact support@coachharper.com. In the Android app, you can also open that page from Settings → Privacy → Delete Harper account data. We may need to verify the request before deleting account information. We may retain limited records when reasonably necessary for security, fraud prevention, legal compliance, or to document fulfillment of a deletion request.
AI-coach messages
Harper's backend relays AI Coach requests for response generation and does not store AI Coach requests or keep a transcript of your conversations. Anthropic may retain API inputs and outputs for up to 30 days under its standard API terms, or longer where needed to enforce its usage policy or to comply with law, unless a different retention arrangement applies. Our infrastructure providers may process technical request data according to their applicable service terms and privacy practices.
Shared workouts
A workout you intentionally share is kept by Harper's sharing service for up to 90 days so its link works, and is then deleted automatically. For assistance with a shared workout, contact support@coachharper.com.
5. Your choices and controls
You can:
- Use Harper's guest experience without signing in.
- Choose whether to sign in with Google, where sign-in is offered.
- In the iPhone and Android apps, allow or decline AI Coach data sharing, and change it at any time in Settings → Privacy → AI Coach data sharing. Turning it off stops future AI Coach requests; it does not remove information Anthropic has already received.
- Sign out while leaving locally stored workout data on your device.
- Choose whether to grant supported health or wearable permissions and revoke them through your device settings.
- Choose whether to create and send a shared-workout link.
- Clear locally stored Harper data through your device settings or by uninstalling the app.
- Contact us to request access to server-side account information associated with you, or request deletion of your Harper account.
Deleting local app data and deleting server-side account information are separate actions because Harper's current workout history is stored locally.
6. Security
We use reasonable technical and organizational safeguards designed to protect information handled by Harper. Network communications use encrypted connections where supported, and authentication credentials are handled using platform-appropriate security mechanisms.
No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Children's privacy
Harper is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Harper, contact us at support@coachharper.com.
8. Health and fitness notice
Harper provides fitness and informational features and is not a medical service. Information generated by Harper, including AI-generated workout suggestions and information derived from fitness or wearable data, is not medical advice and should not be used as a substitute for professional medical care.
9. International processing
Harper's service providers may process information in the United States or other locations where they operate. Information necessary to provide online Harper features may be processed in those locations, subject to applicable law and provider terms.
10. Changes to this policy
We may update this Privacy Policy as Harper changes. When we make material changes, we will update the "Last updated" date and make the revised policy available through our website or app. New features that materially change how Harper handles personal information may require additional notice or consent.
11. Contact us
Questions, privacy requests, or account-deletion requests can be sent to: