Privacy Policy

Last updated: 14-06-2026

Welcome to Hoppa! At Hoppa AB ("we," "us," or "our"), we are committed to protecting your privacy and ensuring that your personal information is handled safely and responsibly. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you use our mobile application ("Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Introduction

This Privacy Policy complies with the Swedish Data Protection Act and the General Data Protection Regulation (GDPR). It applies to all users of the Service, regardless of their location.

2. Information We Collect

2.1 Personal Data

We collect minimal personal data necessary to provide and improve our Service. The personal data we may collect includes:

  • Email Address: To create and manage your account.
  • Username: To personalize your experience within the app.
  • Profile Information: An optional bio and profile photo that you choose to provide.

When you sign in with Apple or Google, we receive your email address and basic profile information from those providers to create and authenticate your account.

2.2 Health and Fitness Data

With your explicit consent, we collect data related to your fitness activities to provide personalized workout routines and track your progress. This may include:

  • Exercise Performance Data: Repetitions, durations, and completion status of exercises and workouts.
  • Workout History and Goals: Your campaigns, custom workouts, streaks, and fitness goals.

2.3 Camera Data

The Service uses your device's camera to detect your body movements and count repetitions in real time during workouts.

  • All pose detection and movement analysis is performed on your device. We do not upload, store, or transmit camera images or video to our servers. The camera feed is processed locally and is not retained after your workout.

2.4 Photo Library

If you choose to set a profile picture, we access the photos you select from your device's photo library solely to upload that image. We only access the specific images you choose.

2.5 Device and Usage Information

We collect information about the device you use to access the Service and how you interact with it, including:

  • Device Type and Operating System
  • App Performance Data: Crash reports and error logs to identify and fix technical issues.
  • Usage Analytics: Data about how you interact with features, used to understand and improve the Service.
  • Push Notification Tokens: A device identifier used to deliver workout reminders and notifications, if you enable them.

2.6 Advertising Identifier and Attribution Data

To understand how users discover Hoppa and to measure the effectiveness of our marketing, we use mobile measurement and attribution tools. With your permission, we may collect:

  • Advertising Identifier (IDFA / Advertising ID): A device identifier used for attribution and marketing measurement.
  • Attribution Data: Information about the marketing campaign, network, or referral through which you installed the app.

On iOS, we will ask for your permission through Apple's App Tracking Transparency prompt before accessing your advertising identifier for these purposes. If you decline, we do not use your advertising identifier, and the Service continues to work fully.

3. How We Use Your Information

We use the collected data for the following purposes:

  • To Provide and Maintain the Service: Ensuring the app functions correctly and delivers the requested features.
  • To Personalize Your Experience: Tailoring workouts and exercises to your fitness level and goals.
  • To Monitor Progress: Tracking your exercise performance to display your progress over time.
  • To Communicate with You: Sending notifications related to the Service (e.g., reminders, updates, changes), where you have enabled them.
  • To Improve the Service: Using analytics and crash reports to identify issues and enhance the user experience.
  • To Measure Marketing: Understanding how users find Hoppa and measuring the performance of our marketing campaigns.

4. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

  • Performance of a Contract: Processing is necessary to provide the Service you have requested.
  • Consent: We obtain your consent to process your health and fitness data, to access your advertising identifier, and to send you push notifications.
  • Legitimate Interests: Processing is necessary for our legitimate interests in operating, securing, and improving the Service and measuring our marketing, provided these do not override your rights.

5. Third-Party Service Providers

We work with the following third-party service providers, who process data on our behalf and are contractually obligated to protect it:

  • Google Firebase (authentication, crash reporting, analytics, cloud storage, push notifications, and remote configuration).
  • Adjust (mobile attribution and marketing measurement, including use of your advertising identifier where permitted).
  • Amplitude (product usage analytics).
  • Stripe (payment processing for purchases made through our website). Payments made through the app are processed by Apple (App Store) or Google (Google Play) under their respective terms.

These providers have access to your data only to perform tasks on our behalf and may process data outside the EEA under appropriate safeguards (see Section 7).

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Account and Profile Data: Retained until you delete your account or withdraw consent.
  • Exercise and Performance Data: Retained to provide you with historical progress unless you request deletion or delete your account.
  • Analytics and Technical Data: May be retained for up to 2 years to improve the Service.

When you delete your account, your personal data is permanently erased from our systems (see Section 9).

7. International Data Transfers

Your information may be processed at our operating offices and by the service providers described in Section 5, which may be located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as the European Commission's Standard Contractual Clauses.

8. Security of Data

We take reasonable measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

  • Encryption: Data transmitted between your device and our servers is encrypted using secure protocols.
  • Access Controls: Access to personal data is restricted to authorized personnel who require it for operational purposes.
  • Regular Reviews: We periodically review our data collection and processing practices to enhance security measures.

9. Your Rights and How to Delete Your Account

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

  • Right to Access: Request copies of your personal data.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restrict Processing: Request that we limit the processing of your personal data.
  • Right to Data Portability: Receive your personal data in a structured, commonly used format.
  • Right to Object: Object to our processing of your personal data.
  • Right to Withdraw Consent: Withdraw your consent at any time where we rely on your consent to process your personal data.

Deleting your account: You can permanently delete your account and all associated personal data directly within the app. Go to Settings → Delete Account and confirm. This action immediately and irreversibly removes your account, workout history, campaigns, preferences, and other personal data from our systems.

To exercise any of these rights, you can also contact us at contact@hoppa.com.

10. Children's Privacy

Our Service is intended for users aged 16 and above. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can take necessary actions.

11. Links to Other Services

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time:

  • Notification: We will notify you of any changes by posting the new Privacy Policy on this page.
  • Effective Date: Changes become effective when they are posted on this page.
  • Review Period: We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have any questions about this Privacy Policy, please contact us:

14. Complaints

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten):

Disclaimer: This Privacy Policy is provided for informational purposes only and does not constitute legal advice. We recommend consulting a legal professional to ensure compliance with all applicable laws and regulations specific to your business and location.