The short version
Hewn is a nutrition and training tracker. To do its job it holds data about your body, what you eat and how you train — which is sensitive, and we treat it that way.
- We do not sell your data. Not to advertisers, insurers, data brokers or anyone else.
- We do not use your health data for advertising. Hewn shows no ads.
- You can delete everything at any time, and we mean everything.
What we collect
Almost all of it is data you enter yourself. We collect nothing you haven’t given us or explicitly connected.
- Account — your email address, and a Google account identifier if you sign in with Google.
- Profile — age, sex, height, weight, activity level, training experience and your goal. These are what your calorie and macro targets are calculated from.
- Food logs — meals, portions, calories and macros, saved meals, and any photos you take of food.
- Training — your plan, sessions, exercises, sets, reps and weights.
- Body — weight history, measurements, body fat estimates and any progress photos you add.
- Coach conversations — what you ask the coach and what it replies.
- Health Connect / Apple Health — only if you connect it, and only the types you approve: steps, calories burned, distance, exercise, weight, height, body fat, resting metabolic rate, heart rate, nutrition and hydration.
- App analytics — anonymous usage events (which screens are opened, whether a log succeeded) collected through Google Firebase Analytics, plus your device’s advertising identifier.
What we use it for
- Running the app — calculating your targets, storing your logs, syncing across your devices.
- Coaching — turning your recent intake, training and weight trend into the guidance you see on the dashboard and in chat.
- Recognising food — analysing a photo or description you submit to estimate its calories and macros.
- Improving the app — anonymous, aggregated usage patterns. Never your individual logs.
Hewn is a fitness tool, not a medical device. Nothing in it is medical advice, diagnosis or treatment.
AI, and what it sees
The food scanner and the coach are powered by AI. When you talk to the coach, you are talking to a machine, not a person.
These features run on our own servers, which pass your request to a third-party AI model (Google Gemini, accessed through OpenRouter). What gets sent is limited to what the feature needs: the food photo or description you submitted, and — for the coach — your targets, recent totals, weight trend and training plan. Your email address and account identity are not sent to the model.
Your data is not used to train these AI models.
Health Connect
If you connect Health Connect on Android or Apple Health on iOS, Hewn reads only the data types you approve, and only to display your activity alongside your logs and to keep your weight history current. You can revoke access at any time in Health Connect or the Health app, and Hewn will stop reading immediately.
- We never use Health Connect data for advertising or marketing.
- We never sell or transfer it to data brokers or information resellers.
- We never use it to determine credit, insurance or employment eligibility.
Data Hewn writes back into Health Connect stays on your device under your control — delete it there if you want it gone.
Who else touches your data
We use a small number of providers to run Hewn. They process data on our instructions only.
- Supabase — hosts the database, your account and our server functions.
- Google (Firebase Analytics, Google Sign-In) — anonymous usage analytics and, if you choose it, sign-in.
- OpenRouter and Google Gemini — the AI models behind food recognition and the coach.
These providers may process data on servers outside your country. Where that happens, transfers rely on the safeguards those providers have in place, such as the European Commission’s standard contractual clauses.
Why we’re allowed to hold it
If you are in the UK or the European Economic Area, these are our legal bases under the GDPR.
- Performing our contract with you — your account, logs, targets and sync. Without this data the app cannot work.
- Your explicit consent — health data such as weight, body composition, nutrition and anything from Health Connect. You can withdraw consent at any time by disconnecting the integration or deleting your account.
- Our legitimate interests — keeping the app secure and understanding, in aggregate, which features are used.
How long we keep it
- While your account is open — your logs stay, because their whole value is the history.
- After you delete your account — erased from live systems within 30 days.
- Encrypted backups — cycled out within 90 days.
- Anonymous analytics — retained in aggregate, with nothing linking it back to you.
Your rights
Email support@gethewn.fit to exercise any of these. We answer within 30 days and we don’t charge for it.
- Access — get a copy of everything we hold about you.
- Correction — fix anything wrong. Most of it you can edit in the app directly.
- Deletion — erase your account and data.
- Portability — receive your data in a machine-readable format.
- Objection and restriction — tell us to stop or limit a particular use.
- Withdraw consent — at any time, without affecting what we did before you withdrew it.
If you are in the EEA or UK and think we’ve got this wrong, you can complain to your national data protection authority.
Deleting your account
You can request deletion at any time, and you don’t need to email anyone to do it. The request page lists exactly what is erased and what is briefly retained.
Delete your Hewn account
Security, children and changes
Data is encrypted in transit and at rest, and access to it is restricted. No system is perfect, but we treat body and health data as the sensitive category it is.
Hewn is not intended for anyone under 16. We don’t knowingly collect data from children; if you believe a child has created an account, email us and we’ll remove it.
If this policy changes in a way that materially affects you, we’ll tell you in the app before the change takes effect.
Questions about any of this: support@gethewn.fit