Privacy Policy
How account, workout, measurement, authentication, and technical data are handled.
- Effective date
- July 28, 2026
- Legal owner and jurisdiction
- His And Her Workout, an independently operated online service · United States
Information collected
We process your verified email address used as a username and recovery method, display name, preferences, workout plans and logs, favorites, optional measurements, progress records, Cognito identity identifiers, and security/technical logs. We do not collect payment information because the service is free.
How information is used
Information is used to provide your account and training tools, verify and recover your account, restore your signed-in browser session, calculate progress you request, protect the service, troubleshoot failures, and meet legal obligations. Optional measurements are private and are not used to make medical conclusions.
Browser storage and AWS service providers
AWS Amplify stores Cognito authentication tokens in your browser so you can remain signed in. The interface follows your device color-scheme setting without offering a separate app theme preference. Amazon Web Services processes data for Cognito identity, email verification and recovery, hosting, databases, object delivery, logs, and backups under its applicable service terms.
Retention, export, and deletion
Settings provides a machine-readable data export and account deletion workflow. Active account data is retained while your account is open. A confirmed deletion removes account-controlled data from active systems; encrypted recovery copies may remain for up to 35 days. Production security logs are retained for up to 90 days, and contact submissions are scheduled for deletion after 24 months. Limited records may be retained longer when legally required or reasonably necessary to investigate abuse, enforce these terms, or protect users.
Rights and contact
Depending on your location, you may have rights to access, correct, export, object to, restrict, or delete personal data. Submit a privacy request through the contact form and provide a reply email you control. Identity verification may be required before fulfilling a request. This online service does not maintain a public visitor office.