Privacy Policy
This Privacy Policy describes how Hundred X ("we," "our," or "the app") handles your information. Hundred X is operated by Alute Media, based in the Netherlands.
In plain terms: Hundred X is a local-first app. The vast majority of your data — your daily check-ins, life scores, habits, ranks, bodyweight logs, weekly notes, and invite codes — stays on your device and is never sent to us. We don't run a server that stores your personal data. We don't have user accounts. We follow the principle of data minimization: we only process data necessary to provide the features you use.
1. What we collect
Data stored only on your device:
- Your profile information (name, username, bodyweight, goals, unit preferences, bio)
- Your daily check-ins across the ten life categories (Gym, Sleep, Nutrition, Productivity, Health, Relationship, Discipline, No Porn, Screen Time, Cortisol)
- Your daily scores, rank tiers, streaks, and Perfect Day records
- Your weekly review notes and weekly focus selections
- Your bodyweight history
- Your nutrition logs (when used)
- Your habit history and custom habits
- Your invite codes and referral records
None of the above is transmitted to Hundred X servers or any third party. It lives in your device's local storage and is removed when you uninstall the app.
Data shared with third parties (described in section 3):
- Anonymous purchase records (via RevenueCat and Apple, for subscription verification only)
- Apple HealthKit data (read-only, device-local only — not transmitted to us)
2. What we do NOT collect
- We do not use analytics tools (no Google Analytics, Mixpanel, Amplitude, PostHog, Firebase, or similar).
- We do not use third-party crash reporting or error tracking (no Sentry, Crashlytics, or similar). Apple may automatically send anonymized crash reports from your device to us through App Store Connect; these contain device model and OS version but no personal data, and you can disable this in iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers.
- We do not use advertising identifiers or any ad networks.
- We do not operate a backend database that stores your personal information.
- We do not have user accounts — there is nothing to "log into" and no password to remember.
- We do not track your location.
- We do not read your contacts, photos, or device storage outside of what you explicitly share with us.
- We do not write to Apple HealthKit. Hundred X is read-only with respect to your Health data.
3. Third-party services
RevenueCat — we use RevenueCat to manage in-app subscriptions and verify purchases. When you start a subscription or trial, RevenueCat receives an anonymous, randomly-generated install ID along with your Apple purchase receipt. This ID is not linked to your name, email, or any personal information we hold. RevenueCat's privacy policy: revenuecat.com/privacy.
Apple StoreKit / App Store — all purchases are processed by Apple. We never see your payment method, billing address, or Apple ID. Apple's privacy policy applies to all payment transactions: apple.com/legal/privacy.
Apple HealthKit — with your permission, Hundred X reads from Apple Health (steps, resting heart rate, active calories, sleep, workouts). Hundred X does not write any data back to Apple Health. All HealthKit data is processed on your device. Apple does not share HealthKit data with us, and we do not transmit it to any server. You can revoke HealthKit permissions at any time in iOS Settings → Health → Data Access & Devices → Hundred X.
Apple Push Notification Service — Hundred X schedules local notifications for daily check-in reminders, bedtime prompts, and weekly review nudges. These are scheduled on your device and do not involve any remote server.
4. Apple HealthKit disclosure
In accordance with Apple's HealthKit requirements, we confirm:
- HealthKit data is used only to power features inside Hundred X (auto-ticking habit completion, daily score calculation, sleep/recovery insights).
- We do not use HealthKit data for advertising or other data-mining purposes.
- We do not share HealthKit data with third parties.
- HealthKit data is not backed up to a cloud service we control. It stays on your device and may be backed up by iCloud if you have enabled iCloud backup for Health data in your iOS settings.
5. Legal basis for processing
Where the EU General Data Protection Regulation (GDPR) applies, we process data on the following legal bases:
- Contract performance: subscription and purchase data processed via RevenueCat is necessary to deliver Hundred X Pro features you have purchased.
- Consent: Apple HealthKit data is read only after you grant explicit permission in iOS. You may withdraw this consent at any time in iOS Settings.
6. Data retention
Because Hundred X stores your data on your device, retention is controlled by you. Your data persists as long as the app is installed and is permanently removed when you uninstall. RevenueCat and Apple retain transactional records according to their own policies and applicable accounting laws (typically 7 years for tax compliance).
7. Children
Hundred X is not directed at children under the age of 13. We do not knowingly collect information from children. If you believe a child has used the app, please contact us and we will advise.
8. Your rights (GDPR and similar regulations)
Because Hundred X does not store your personal data on our servers, most data rights are exercised directly on your device:
- Right to access your data: your data is visible to you inside the app at all times.
- Right to rectification: you can edit any of your data inside the app.
- Right to delete your data: uninstall the app, or clear the app's data in iOS Settings → General → iPhone Storage → Hundred X → Delete App. This removes everything except your subscription record with Apple.
- Right to restrict or object to processing: you can disable HealthKit access, revoke notification permissions, or stop using the app at any time.
- Right to data portability: you can export your progress using the in-app Share functions, where available.
- Right to withdraw consent: you can revoke any permission you previously granted at any time, in iOS Settings.
- Right to lodge a complaint: if you believe your rights have been violated, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.
We do not perform automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. All scoring and ranking algorithms run locally on your device for your own use.
For questions about data Apple or RevenueCat hold about you, please contact them directly using the links above.
9. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act gives you specific rights regarding your personal information.
Categories of personal information collected: in the past 12 months, we have collected the categories described in Section 1 above. We do not collect categories that we have stated we do not collect (Section 2).
Sources of information: directly from you (when you enter data into the app), from your device (HealthKit, with your permission), and from Apple (purchase receipts, via RevenueCat).
Business purpose: to provide the app's functionality, to verify purchases, and to enable features you opt into.
Categories of third parties data is shared with: as described in Section 3 (RevenueCat, Apple). We do not share data with any other parties.
Sale or sharing of personal information: we do not sell or share your personal information with third parties for monetary or other valuable consideration. We have not done so in the past 12 months and do not intend to do so.
Your California rights: you have the right to know what personal information we collect, to request deletion of your data, to correct inaccurate information, to opt out of any sale or sharing (we do neither), and to non-discrimination for exercising these rights.
How to exercise these rights: contact us at contact@alutemedia.com. Because Hundred X stores most data on your device, you can also exercise access and deletion rights directly within the app or by uninstalling.
10. International data
Alute Media is based in the Netherlands. RevenueCat and Apple operate globally and may process data in the United States or other jurisdictions. By using Hundred X you acknowledge this possibility.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through an app update or prominent notice.
12. Contact
For privacy questions or requests, contact us at contact@alutemedia.com.