Legal
The short version
Hone reads your sleep, heart-rate variability and resting heart rate from your wearable to adapt your training plan to how recovered you are. That is the whole point of the app. This data is sensitive, so we only ever process it with your explicit consent, we never sell it, and you can disconnect your wearable or delete your account at any time. The full detail is below.
01
This policy explains how Hone Fitness Limited (“Hone”, “we”, “us”), trading as Hone, collects and uses your personal data when you use the Hone app and related services.
We are the data controller for that data under the UK GDPR and the Data Protection Act 2018.
Company
Hone Fitness Limited, company no. 17222563
Registered address
32–33 St. James's Place, London, England, SW1A 1NR
ICO registration
ZC160765
Contact
02
Account & profile. Your name and email address, and the training details you give us during onboarding: your goal distance, target time, race date, recent fitness, weekly mileage and the days you can train.
Health & recovery data from your wearable. When you connect a sports watch or recovery device — Garmin, COROS, Polar, Suunto, Whoop or Oura — we receive, with your consent, your overnight heart-rate variability (HRV), resting heart rate and sleep data, along with your completed activities (runs, including pace, distance, heart rate and running dynamics). This data reaches Hone through Terra, a specialist wearable-data platform that connects to your device brand's official service. This is special-category data concerning your health and is treated with the heightened protections that status requires.
Usage & device data. Basic technical information needed to run the service reliably — app version, device type, and logs of how you interact with the app.
Payments. Subscriptions are handled by Apple through the App Store. We do not collect or store your card details. We receive confirmation of your subscription status only.
03
Under the UK GDPR we must have a lawful basis for each use of your data. For health data we rely on your explicit consent, which you give when you connect your wearable and which you can withdraw at any time.
| What we do | Lawful basis |
|---|---|
| Generate and run your training plan | Art. 6(1)(b) — contract |
| Read sleep / HRV / resting HR to adapt sessions to your recovery | Art. 9(2)(a) — explicit consent |
| Keep the service working, secure and free of abuse | Art. 6(1)(f) — legitimate interests |
| Meet our legal and tax obligations | Art. 6(1)(c) — legal obligation |
We do not use your health data for advertising, and we do not sell your personal data to anyone.
04
You connect your device to Hone through your device brand's own secure authorisation screen — for example Garmin Connect if you use a Garmin. We never see your password. Terra passes your data to Hone only after you have given consent, and only the data types you have approved.
You can disconnect at any time — from within Hone or from your device brand's own account settings. When you disconnect, no new data is sent to us. To also remove data we already hold, delete your account or contact us (see sections 09 and 12).
06
We aim to store and process your data within the UK or European Economic Area. Where a processor transfers data outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Addendum.
07
We keep your account and training data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep limited records to meet legal, tax or security obligations.
08
We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and restricting health data to the systems that need it. No system is perfectly secure, but we treat recovery data as among the most sensitive we hold.
09
Under UK data protection law you have the right to:
To exercise any of these, contact us at lewis@weare-hone.com. We respond within one month.
10
Hone is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11
We may update this policy from time to time. If we make a material change to how we use your health data, we will tell you in the app or by email before it takes effect. The “last updated” date above always reflects the current version.
12
Questions about this policy or your data: lewis@weare-hone.com.
If you are unhappy with how we handle your data, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk — though we would appreciate the chance to put things right first.