Privacy Policy
Last updated 16 August 2026
Hey PT is a strength-training coach. To coach you it has to know things about your body — what you are training for, what equipment you have, and what hurts. That is sensitive information, and this page is a plain account of what happens to it.
Hey PT is operated by A Million Monkeys Ltd, a company registered in England and Wales. We are the data controller for the information described here, and UK GDPR applies.
What we collect, and why
| What | Where it comes from | What it is used for |
|---|---|---|
| Your email address, and your name if your provider shares it | Sign in with Apple or Sign in with Google. We never see or store a password. | Identifying your account. If you use Apple's Hide My Email, we only ever hold the relay address. |
| Training goals, experience, available equipment, and days you train | You, at onboarding | Deciding what to programme for you. |
| Injuries and health conditions you choose to tell us about | You, at onboarding and in conversation | Programming around them, and avoiding movements that would aggravate them. Under UK GDPR this is special category health data — see “The legal basis” below. |
| Your training log — exercises, sets, reps, weights, dates | You, as you train | Tracking progress, choosing loads, and detecting personal records. |
| Messages you send the coach, and how you react to prescribed exercises | You | Answering you, and adapting future sessions. |
| Bug reports, including app version, device model and OS version | You, when you shake to report or send feedback | Fixing what you reported. Sent only when you submit a report. |
We collect nothing else. There is no advertising SDK in Hey PT, no third-party analytics on the content of your sessions or messages, no location tracking, and no App Tracking Transparency prompt because we do not track you across other companies' apps or websites.
Where your data goes
Hey PT's coaching is generated by a large language model run by a third party. This is the part of the product most people want to be specific about, so:
To write your sessions and reply to you, we send relevant parts of your profile and training history — including injuries you have told us about — to the AI providers named below. We ask for your explicit permission for this when you first open the app, and you can withdraw it at any time by deleting your account.
What goes with it: the display name you chose, and your age and gender if you gave them, because a coach that cannot address you or account for either is a worse coach. What does not go with it: your email address and your account identifier. The provider receives a training profile, not the account behind it.
| Provider | What it does | Where | Retention |
|---|---|---|---|
| Anthropic | Generates your sessions and the coach's replies. | United States | Does not train on the data; retained transiently for abuse monitoring. |
These providers act as our processors under contract. Each is bound to protect your data to the same standard set out in this policy and required by the App Store Guidelines, to use it only to deliver the service to you, and not to train their models on it. Transfers outside the UK are made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Beyond those providers, we share your data with nobody. We do not sell it, we do not rent it, and we do not hand it to advertisers or data brokers.
Speech
You can talk to Hey PT instead of typing. On devices that support on-device speech recognition, your voice is transcribed on the phone and only the resulting text is used — the audio never leaves the device. On devices that do not support it, transcription falls back to Apple's speech recognition service, which means the audio is sent to Apple. Hey PT tells you which is happening at the point you use it, and you can always type instead. We never store your audio ourselves.
Infrastructure
The application and database are hosted in the United Kingdom. Exercise images and video are served from Cloudflare's CDN. These providers host data on our behalf and do not use it for their own purposes.
The legal basis
We process your account data to perform our contract with you. We process the health information you choose to give us — injuries, conditions, pain reports — on the basis of your explicit consent, which is what the consent screen at first launch is for. You are never required to disclose a health condition to use Hey PT; withholding it means the coach programmes without that context, not that the app stops working.
How long we keep it, and how to get rid of it
We keep your data for as long as your account exists, because a coach with no memory of last month is not a coach. We do not have a fixed expiry.
You can delete your account from inside the app — Settings, then “Delete my account”. It removes your profile, every session, every set, every message and every record of what you told the coach. It is immediate and it is not recoverable. If you signed in with Apple, deleting also revokes Hey PT's access to your Apple ID so the app stops appearing in your Apple account settings.
Withdrawing consent for AI processing and deleting your account are the same action, because the coaching is the product — there is no version of Hey PT that works without it. If you would rather export your data first, Settings has an export.
Backups are retained for 30 days, after which deleted data is gone from those too.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict that use. Most of this is available directly in the app; for anything else, email hello@heypt.app and we will respond within 30 days. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Hey PT is not intended for under-16s and we do not knowingly collect data from them. If you believe a child has an account, email us and we will remove it.
Changes
If we change this policy in a way that affects how your data is used — in particular if we add a processor — we will tell you in the app and ask for your permission again before the change applies to you.
Contact
A Million Monkeys Ltd — hello@heypt.app