Privacy details
What each screen does with your data.
This page describes what the current code does with the information you enter, surface by surface. It sits under the Privacy Policy, which is the policy that governs; where the two differ, the policy wins.
Lift log (/coach)
You choose lb or kg and which exercises you train, then log the weight and reps for each set. An optional daily tap (good, OK, rough) records how you feel. This is saved in this browser's local storage on every change, under one key. If you sign in to a Hewed account it also syncs to your account (next row); otherwise it stays on this device only. There is no AI call or analytics event. If you connect WHOOP (see the WHOOP row below), its daily numbers are used in page memory to plan today and are never saved into the log. Anyone using the same browser profile can read it, and it is not encrypted. Export downloads a JSON file you keep; Delete lift log removes the saved copy. Try a sample uses made-up numbers in page memory and saves nothing.
Coaching preview (/coach)
You enter broad choices only: an adult confirmation, one or two goal categories (focus, sleep routine, movement, everyday decisions, remembering), minutes per practice day, practice days, a cue, experience level, a prompt style and up to three constraints. Check-ins record a status per action (completed, partly, skipped) and one planning barrier. There is no free text, name, contact, measurement or health history field. Everything stays in page memory unless you choose Save on this device, which writes it to this browser's local storage under one key. That saved copy is not encrypted and anyone using the same browser profile can read it. It opens only when you choose Open saved preview. Export and import are local JSON files you control; Delete coaching data removes only that key. When you are signed in to a Hewed account, the saved copy (only the saved copy) also syncs to your account. Otherwise the route makes no network request of its own. There is no AI call and no analytics event.
Hewed account and sync (/coach)
Signing in is optional. An account stores your email address, a scrypt-hashed password, hashed session tokens (sessions last 180 days) and a count of recent wrong passwords, used to lock sign-in for 15 minutes after 10 misses. While you are signed in, your lift log and saved habit plan are copied to the operator's Postgres database so they appear on your other devices; each copy is checked against the same rules the app uses before it is stored. Nothing is sent to an AI provider or used for analytics. Password reset sends one email through Resend when the operator has configured it. Sign out keeps your data on the device; Sign out and clear this device removes it there. Delete account, with your password, removes the account and every synced copy at once, and disconnects WHOOP.
WHOOP connection (/coach, signed in)
Optional, and only when you choose Connect WHOOP and allow access on WHOOP's own page. Hewed asks WHOOP for read access to recovery, cycles (strain), sleep and your basic profile, plus offline access so the connection stays signed in. It stores your WHOOP member id, the access and refresh tokens, and one reading per day for the last 8 days: recovery score, HRV, resting heart rate, hours asleep and strain. Tokens and readings are encrypted with AES-256-GCM before they reach the database, and older days are deleted on every update. The readings are not copied into your lift log, this browser's storage or any export; the lift screen fetches them and uses them in page memory to plan today. Hewed refreshes them when you open the page, when WHOOP says a recovery or sleep changed, and once a day. Nothing from WHOOP is sent to an AI provider, used for analytics or shared with anyone. Disconnect revokes Hewed's access at WHOOP and deletes the tokens and readings; deleting your account does the same.
iPhone app waitlist (home page)
If you join the waitlist, Hewed stores your email address, the date you joined and which form you used, in the same Postgres database as accounts. Nothing else is collected and it is not linked to a Hewed account. The operator uses it to tell you when the iPhone app is ready. There is no self-service removal yet; ask the operator to remove you.
Hewed iPhone app (in development)
The iPhone app is not released. As built, it keeps your lift log on the phone and, if you sign in, syncs it with the same account and the same checks described above. The sign-in token is kept in the iPhone keychain. Apple Health reading is not built yet; when it is, it will ask your permission first, read only on the phone, and send nothing until this page describes it.
Lab archive pages (listed at /lab)
The rows below describe the earlier research and practice tools that now live in the lab archive. They are separate from the Hewed training app and share no data with your lift log.
Hewed 90-day practice plan preview (/phroneme-90/plan)
Goal, rough sleep and movement baselines, daily minutes, constraint and safety-factor choices and the 18+ and U.S. confirmation stay in temporary page memory and disappear when the page refreshes or closes. Nothing is written to storage or sent.
Fitness Lab journal (/fitness-lab)
Your week date, focus text, optional context text, chosen habit names and days, check-in marks and reflection text are saved in this browser's local storage on every change, on this device only. The page's own security policy forbids network connections. JSON and printable exports contain that personal text; delete removes the saved copy. Anyone using the same browser profile can read it, and it is not encrypted.
Live Brain phrase (/brain)
The citation engine runs in your browser and the phrase you type is not sent anywhere; the page makes no request for it. Live AI analysis is not available in this release. The site's /api/brain endpoint, if called directly, answers with the same citation engine and does not forward the phrase to any AI provider. The code does not store or log the phrase.
Adaptive assessment demo (/assessment)
Your answers to the demonstration items are scored in page memory in your browser. Nothing is written to storage, nothing is sent to a server, and the readout disappears when you leave or reload the page. The demo is not a research study: no consent form is presented because no participant data is collected. When a validation study opens, it will use its own consent process and a separate data store, described on this page before it begins.
Attention check (/test)
Your tap and keypress timings are scored in your browser. The reading is not saved and is not sent to hewed. The optional email form on that page is a separate choice, described next.
Email updates and Intelligence Hub accounts
If you enter your email on /test or sign up for the Intelligence Hub, Hewed stores your email address, display name (if given), a scrypt-hashed password, your notification preference, email-verification state and hashed session tokens (sessions last 90 days) in the site's SQLite database and, when the operator has configured a hosted Postgres, mirrors members and posts there. Verification and publish emails are sent through Resend when the operator has configured it; without that key nothing is delivered. The unsubscribe link in each email turns notifications off and keeps the account. Account deletion is not yet self-service in this release.
Analytics
Only if the operator sets a public Amplitude key does the site load Amplitude's browser library and send coarse events: page or lab viewed, consent selected, baseline started or completed, protocol generated, plan preview generated, evidence source opened (with the source id) and, in the inactive acceleration lab, a per-answer correct flag. Autocapture and IP address collection are turned off in code. Goals, constraints, safety choices, sleep values, free text, check-in statuses, cognitive readings and coaching data are never sent.
Fonts and third-party code
The website, coaching and article hub fonts (Cormorant Garamond, Hanken Grotesk and JetBrains Mono) are bundled with the site and served from Hewed; the article hub no longer downloads a font from Google at build time, and your browser does not contact Google when you visit. The statue images on the website are served from Hewed as well. No advertising, session-replay or chat code is included.
Research data and coaching data
This release holds no research dataset. Coaching, the Fitness Lab journal, the attention check and the assessment demo are consumer surfaces; none of their data is used for research, and the research program has no participant data to combine them with. Any future study will be announced here with its own consent, storage, retention and withdrawal terms before any data is collected.
Your control
Refreshing clears the Hewed 90-day practice preview. Coaching data, the lift log and the Fitness Lab journal stay on this device until you delete them or clear site data, and all offer exports first. If you sign in, the lift log and saved habit plan also live in your account until you delete them or the account. Browser local storage is readable by anyone who can use this browser profile and is not a secure store, so avoid medical records or other sensitive details.