Privacy Policy

Last updated: 1 May 2026

HzAma is designed to make running guidance personal, useful, and trustworthy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

HzAma is a rhythm-guided running application. For the purposes of UK GDPR, HzAma is the data controller responsible for your personal data. If you have questions about this policy or our data practices, contact us at privacy@hzama.app.

2. Information we collect

We collect the following categories of information:

• Account information: Your email address when you create an account.
• Location data: GPS data collected during calibration runs and training sessions, used to calculate stride length and pace. This data is processed locally on your device and only aggregated stride statistics are stored on our servers.
• Motion data: Accelerometer and gyroscope data from your iPhone, used to count steps and measure cadence. Processed locally on device only.
• Run data: Session statistics including duration, distance, cadence, and pace. Stored to build your personal stride model and run history.
• Usage data: Anonymised app usage information (features used, session frequency) to help us improve the product. No personally identifiable information is included in usage analytics.
• Device information: Device type, iOS version, and app version for technical support purposes.

3. How we use your information

We use the information we collect to:

• Provide and operate the HzAma app and its features
• Calculate your personal stride model and cadence targets
• Generate and manage your personalised training plan
• Send you product updates and announcements (with your consent)
• Improve the accuracy of our stride calibration algorithms
• Respond to support requests
• Comply with legal obligations

4. Location and motion data

Location and motion data are used to support running features such as GPS calibration, pace estimation, cadence tracking, and training session summaries. These data are processed locally on your device where possible and are used only to provide and improve the HzAma experience.

5. Legal basis for processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide the services you’ve requested (account, training plans, run tracking).
• Legitimate interests: Improving our product, preventing fraud, and ensuring technical security.
• Consent: Marketing communications. You can withdraw consent at any time by unsubscribing from any email or contacting us at privacy@hzama.app.

6. Data sharing

We do not sell your personal data. We share data only in the following limited circumstances:

• Service providers: Third-party services that help us operate (e.g. cloud hosting, payment processing via Apple). These providers are contractually bound to process data only on our instructions.
• Apple: Subscription payments are processed through Apple’s App Store. Apple’s privacy policy governs data shared with them during that process.
• Legal requirements: Where required by law, regulation, or court order.

We do not share your location or run data with advertisers, data brokers, or third-party analytics services.

7. Data retention

We retain your account data for as long as your account is active. Run data is retained to maintain your personal stride model — you can delete individual runs or your entire history from within the app at any time.

After account deletion, we retain anonymised aggregate data (no personal identifiers) for research purposes.

8. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erase your personal data (“right to be forgotten”)
• Restrict processing of your personal data
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@hzama.app. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit (TLS) and at rest. Location and motion data is processed locally on your device where possible. No system is perfectly secure, but we work to keep your data safe.

10. Contact

Questions about this Privacy Policy or your data:
Email: privacy@hzama.app