← Back to HeadStrong App

Privacy Policy & Google Play Health Data Safety

Effective Date: October 17, 2026 • Package ID: com.headstrong.app

Google Play Data Safety Summary:

1. Health & Biometric Data We Process

When you log workouts or optionally connect your Google Pixel Watch via the Fitbit Web API (OAuth 2.0 PKCE), HeadStrong processes:

2. How Your Data Is Stored & Protected

All workout sessions, custom exercises, and biometric logs are persisted locally on your device. If you authorize Fitbit Web API via OAuth 2.0 PKCE (RFC 7636), cryptographic code verifiers are held strictly in ephemeral session storage and connections occur over TLS/HTTPS directly between your device and api.fitbit.com.

3. Data Retention, Export & Permanent Deletion

In compliance with Google Play’s User Data and Account Deletion Policy, you have complete control over your data directly inside the app:

4. Non-Medical Fitness Disclaimer

HeadStrong is a fitness and strength training tool designed for educational and workout-tracking purposes only. Readiness scores, heart rate recovery indicators, and volume landmarks do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before starting an intensive strength program.

5. Contact & Support

For privacy inquiries or data protection support, contact: privacy@headstrong.app