HEAVY Rucking Coach

Privacy Policy

Last updated 17 September 2026

HEAVY is a rucking coach. It records your training so it can advise you, and backs it up so a lost phone doesn't cost you your log. This page says exactly what that involves.

What HEAVY collects

Location

While a ruck is recording, HEAVY reads your precise location to measure distance, pace and elevation, and to record your route. Your route is saved with the ruck and backed up to your account. Location is read only during an active ruck — never in the background at other times.

Health and fitness data

With your permission, HEAVY reads your heart rate during a ruck to show live zones, and your heart-rate variability, resting heart rate and sleep to judge whether today is a day to load up or back off.

Those recovery signals — HRV, resting heart rate and sleep — are used on your device and are never uploaded. A finished ruck's average heart rate, active minutes and estimated calories are part of the ruck record itself, and are backed up with it. Completed rucks can also be written back to Apple Health as workouts.

Motion and the barometer

HEAVY reads the barometer to measure elevation gain, which GPS alone judges poorly on real terrain, and step data to estimate distance over stretches where the GPS signal is too weak to measure with.

Your profile

Bodyweight, age, standard load, units, your training goal, and a callsign you choose. These are what the coaching calculations run on.

An account identifier

HEAVY creates an anonymous account for you the first time you open it, so your log has somewhere to back up to. It starts with no name, no email address and no password, and it can stay that way — signing in is optional.

Email address, if you sign in with one

If you choose email sign-in to make your log recoverable, your email address and a securely hashed password are stored with HEAVY's authentication provider. The address is used only to sign you in — no newsletters, no marketing, nothing sent to it at all.

Notification token

If you turn on notifications, your device's push token and time zone are stored so that reminders arrive at a sensible hour where you actually are.

What never leaves your device

Features that share something

Every one of these is off until you turn it on.

Weekly leaderboard

Shares the callsign you chose plus your weekly aggregate distance, coarse territory-cell count and tonnage with other operators in your cohort. It does not share your routes, your location, your profile, or anything that identifies you beyond the callsign itself. You can block or report another operator from the board at any time.

Beacon

If you start one, your position during that ruck is posted to a web page that anyone holding the link can open. It stops when you stop it, or when the ruck ends.

Squad

A share code you hand out lets someone follow the rucks you file.

Signing in

Optional, and offered so your log can survive a lost phone. Both options only attach a recoverable identity to the anonymous account you already have. Sign in with Apple requests no scopes at all — not your name, not your email address. Email sign-in stores the address you enter, as described above.

First-party app analytics

Starting with the next analytics-enabled app release, HEAVY records app interactions such as onboarding screen views and completion, navigation, workout lifecycle actions, paywall views, purchase outcomes, permission decisions and backup success or failure. Events include a random event and session identifier, your HEAVY account identifier, app version and timestamps. This helps us understand where onboarding gets difficult, which features are useful and whether the app is working reliably. Analytics are enabled by default and can be turned off in Profile. Turning them off also clears unsent analytics from your device.

Behavioral events do not contain your GPS route, heart-rate readings, age, bodyweight, onboarding answers, callsign, email address or other text you enter. Separately, the training data described above is still used to coach you and back up your log. Authorized HEAVY administrators can view aggregate training totals and pseudonymous app-event timelines in a restricted console. Raw routes and health readings are not exposed in that console.

App events are stored with Supabase, our hosting provider, and retained under a 90-day retention policy, with older events removed by a daily cleanup. Events associated with your account are removed when that account is deleted. We do not use these events for advertising, sell them, or combine them with activity from other apps or websites.

What HEAVY never does

Where your data lives

Backups and first-party app events are stored with Supabase, HEAVY's hosting provider. Training backups are scoped to your account at the database level. Restricted administrative endpoints return aggregate training metrics and app-event timelines, not your raw routes or health readings.

Your control

Export. Your entire log as a CSV, or any single ruck as a GPX file, whenever you want it.

Delete. Profile → Delete Account removes your log, your gear, your profile and your leaderboard entry from the server, and clears the app on this device. There is no undo and no way to recover it afterwards.

Children

HEAVY is not directed at children and does not knowingly collect personal information from anyone under 13.

Changes to this policy

If this policy changes in a way that materially affects what HEAVY collects or shares, the app will say so rather than quietly updating this page.

Contact

Questions about any of the above: hello@heavyrucking.app