[ legal / privacy ]

Privacy Policy

last updated: 2026-07-10

// 01Who we are

Skill Hive is a calisthenics and workout tracking service operated by Hive Mindset ("we", "us"), the data controller for the processing described here. This policy covers the Skill Hive app (web, Android and Telegram) and this website. Contact: dev.hiveminds@gmail.com.

// 02Local-first by default

Your training data — exercises, sets, timers, settings — is stored on your device. The app is fully functional without an account, and nothing is sent to our servers unless you sign in or enable one of the optional features below.

This website sets no cookies, uses no cross-site trackers, and stores no identifier on your device. To measure overall traffic we count page views server-side, without cookies: for each visit we record the page path, the referring site's domain, and a country derived from your IP address that is then immediately discarded — your IP is never stored. Unique visitors are estimated with a salted hash that rotates every day and cannot be traced back to you. These statistics are anonymous and cannot identify you.

// 03Optional: account and sync

If you sign in (with Google, Apple or Telegram) to sync across devices, we store on our servers:

• An account record — a random internal ID, its creation date and your time zone.
• Your sign-in identity — the provider's user ID, your display name, and your e-mail address if the provider shares one (Google and Apple do; Telegram shares your Telegram ID and username instead).
• Session records — a hashed sign-in token, a device label and timestamps, so you can see and end sessions.
• Your synced training data — the exercise log, sets and settings you chose to sync, mirrored so every device converges to the same history.
• Telegram bot drafts — if you log a set via @skillhive_robot, the short-lived state of that chat dialog until it's saved or expires.

We use this data only to provide sign-in, sync and the bot (legal basis: performance of a contract, Art. 6(1)(b) GDPR). We don't use it for advertising and we never sell it.

// 04Optional: Google Drive backup

You can save snapshot backups of your training data to your own Google Drive. Those snapshots live in your Google account, not on our servers — we can't read them, and deleting your app data does not touch them. Manage or delete them directly in your Drive.

// 05Optional: usage analytics (opt-in)

Analytics is off by default and only runs if you opt in at onboarding. You can change your mind at any time in Settings → Usage analytics.

When enabled, we collect product usage events — which screens and features are used, on which platform and app version — under a random identifier (linked to your account ID when you're signed in). Events go to two places:

• PostHog, our analytics processor, hosted in its EU region;
• our own event log, hosted on the same EU servers as sync.

There are no advertising networks and no cross-site tracking. Switching analytics off stops collection immediately and also deletes any queued events and analytics identifiers from your device (legal basis: consent, Art. 6(1)(a) GDPR, withdrawable at any time).

// 06Deleting your data

Settings → Delete all data is the built-in eraser, with two scopes:

• This device — wipes the local database and identifiers on the device.
• Everywhere — first erases your account and all synced data from our servers, then wipes the device.

Google Drive backups stay in your own Drive under your control. Expired sessions and bot drafts are purged automatically, and residual copies in short-lived operational backups rotate out on their normal schedule.

// 07Your GDPR rights

You have the right to access, rectify and erase your personal data, to receive it in a portable format, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.

Most of it is self-serve, no e-mail required:

• Access & portability — Settings → Backup exports a complete, machine-readable copy of your training data (file download or Google Drive).
• Erasure — Settings → Delete all data → Everywhere.
• Consent withdrawal — Settings → Usage analytics.

For anything else, write to dev.hiveminds@gmail.com and we'll respond within the GDPR's one-month deadline.

// 08Where your data lives

Our servers run in EU data centres (Hetzner), and PostHog is pinned to its EU region. Your data is not transferred outside the EU/EEA by us; if that ever changes, this policy will be updated first.

// 09Children

Skill Hive is not directed at children and requires users to be at least 16 years old. If you believe a child under 16 has left personal data with us, contact us and we will delete it.

// 10Changes to this policy

The current version always lives at this address with its "last updated" date. Material changes will be flagged in the app before they take effect.

// 11Contact

Privacy questions and requests: dev.hiveminds@gmail.com