Last updated: 1 September 2026
Hardset has no account, no server and no analytics. Nothing you type into it is sent to us, because there is nowhere for it to be sent.
None. The app contains no analytics, advertising, tracking or crash-reporting SDK, and no third-party code of any kind. It makes no network requests: there is no networking code in the app at all.
Your training, in two JSON files in the app's own container (hardset-store.json and hardset-live.json in Application Support):
Deleting the app deletes all of it. The only other copy is whatever your device backup holds, which is Apple's business and not ours. Workouts already written to Apple Health stay in Health, where you can delete them yourself.
Your purchase is not in those files. It is held by the App Store and read back through StoreKit, so there is no unlock flag in a file you can edit.
Only if you allow it, and each direction is a separate permission you can change at any time in Settings ▸ Privacy & Security ▸ Health.
Hardset writes: the workout you just finished, its per-exercise stretches, active energy where a sensor measured some, and an effort score worked out from what you said you had left after each set. On Apple Watch it also writes the heart rate it recorded. Nothing is estimated: a number no sensor measured is left out rather than invented.
Hardset reads: your heart rate and active energy during a workout, and the runs, walks and other workouts you recorded in other apps, which is what puts them on the day grid on Stats. Those imported workouts are held in memory for as long as the screen needs them and are never written to the save file.
Health data goes between Hardset and Apple Health on your device. It is not copied anywhere else, and it never leaves your phone through this app.
Nothing the phone recorded reaches Health until you press Save on the workout summary. The watch app is the one exception, and it is deliberate: it saves the workout it measured a minute after the workout ends if the phone has not said yes or no by then, because samples thrown away are gone for good while a workout you did not want can be deleted in Health.
If you install the watch app, your iPhone tells your own paired watch which exercise you are on, which set, and when rest ends, over Apple's WatchConnectivity. That is device to device between two of your devices. Nothing in it goes anywhere else.
Rest can appear as a Live Activity on the Lock Screen and in the Dynamic Island. It carries the countdown, the next exercise and its target, and it is drawn on your device by iOS. No push notification and no server is involved.
Everything here is something you start, and you choose where it goes:
Import reads only the one file you pick, and only while you have it open.
If you hand your workout file to an AI assistant, that is a service of somebody else's with its own privacy policy. Hardset ships no assistant, sends nothing to one, and has no idea which one you used.
Watch on YouTube, on an exercise, opens a YouTube search for that exercise's name in your browser or the YouTube app. That request is between you and YouTube, under Google's privacy policy, and the only thing that travels with it is the name of the exercise. Hardset embeds no video player and loads nothing from YouTube itself.
One purchase, non-consumable, through Apple's StoreKit. Apple processes it entirely. Hardset receives no name, no email address and no payment details, and stores nothing about the purchase.
Apple Health, and nothing else. There is no request for location, camera, microphone, contacts, notifications or your address book, because nothing in the app uses any of them. Refusing Health costs you heart rate, energy, the day grid and the workout appearing in Fitness, and costs you nothing else: every screen in the app still works.
There are none. No SDKs, no dependencies, no frameworks beyond Apple's own, and no service behind the app.
Hardset collects no data about anybody, so there is nothing collected from a child either.
If this ever changes, the date at the top changes with it, and the version in the repository's history says exactly what moved.
Questions: me@nuc.gr