PRIVACY

YOUR PRIVACY.

Updated 24 September 2026. This notice covers the HARD. iOS app and dohard.today, operated by Thomas Kanze. Contact hey@dohard.today for privacy or support requests.

Your account and activity

Sign in with Apple gives HARD. an account identifier and, when provided, your name. We use these to create and secure your account. We do not store your Apple password or collect your Apple email address in the app. Authentication tokens are protected in the iPhone Keychain and encrypted on our service where necessary.

We store your chosen display name, the country you optionally choose (never detected from your location, not shown to friends, and used only for future anonymous country totals), challenge commitments, selected levels, completion records, difficulty feedback, friendships, invitations, Respect, blocks and reports. Exercise-related challenge results can reveal fitness activity. These records power the daily challenge, history, social features and personal recaps. We do not collect HealthKit data, GPS routes, precise location, contacts, photos, videos or the contents of private tasks.

What other people see

Accepted friends can see your name, current challenge status and chosen level, plus your CORE supporter mark if you choose to show it. An invitation recipient can see your name and the original event when reviewing an invitation. Worldwide participation totals do not show individual identities. Your difficulty feedback and report text are not shown to friends. When you export a share card, you choose its destination and the content becomes subject to that destination’s rules.

Optional friend nudges

Nudges require your permission. If enabled, we store an encrypted Apple push device token and your selected device time zone to deliver notifications and enforce quiet hours from 10 p.m. to 8 a.m. We allow one nudge per friend per challenge and at most three per recipient per challenge. Notifications use generic wording rather than names or private challenge details. Turn nudges off in YOU or manage notification permission in iPhone Settings. Disabling nudges removes device registrations and cancels queued nudges. Account deletion also removes these records.

CORE purchases

Apple processes payments; HARD. does not receive your card details. RevenueCat validates purchase and restore information using your HARD. account identifier, store transaction information and technical app/device information. Our backend keeps verified membership and purchase references to provide CORE benefits and handle refunds. CORE identity is optional, and ordinary challenges, friends, completion, basic history and standard sharing remain free.

Service providers and security

Cloudflare hosts the website, API and database and processes network information such as IP addresses for delivery, security and rate limiting. Apple provides sign-in, payment and push delivery. RevenueCat provides purchase verification. Providers can process information outside your country under their service terms and safeguards. We do not sell your personal information or use advertising trackers, cross-app tracking or a third-party advertising SDK.

We use encrypted connections, access controls and limited operational logs. No service can guarantee perfect security. The website uses locally served fonts and images, no analytics scripts, advertising cookies or persistent browser tracking. Its illustrative phone preview uses sample people and does not save your interactions.

Retention and deletion

Account records and challenge history remain until you delete your account. In YOU, choose Delete account and confirm your Apple identity. This removes the account’s service records and revokes HARD.’s Apple authorization. RevenueCat profile erasure is queued after a one-hour delay and retried if its service is unavailable. Detached purchase references may be retained to prevent purchase replay and handle ownership disputes. Deletion does not request an Apple refund.

Expired sessions and authentication challenges are cleaned automatically. Rate-limit records are short-lived. Restricted backups and provider security logs may retain information temporarily until their retention periods expire. If you send a support email, we use its contents to respond and handle the request; avoid sending passwords, payment details or sensitive private task contents.

Your choices and requests

You can hide the CORE mark, turn off nudges, block friends and delete your account in the app. Email hey@dohard.today to request access, correction, a copy or deletion of your data, or to raise a privacy concern. We may need to verify account ownership without asking for your Apple password. Additional rights may apply where you live, including raising concerns with your local privacy authority.

Audience and changes

HARD. is designed for adults. Challenges are voluntary and are not medical advice or a personalized training plan. We may update this notice when the app or its data practices change; the current version is published here.