Privacy Notice

1. Data we collect and why

Account data (first name, last name, email, login credentials managed by our authentication provider, chosen language) — to create and secure your account. Legal basis: performance of our contract with you.

Health and fitness data you give us (sex, age, height, current/target body weight, weight entries, goals, available days, sports, injuries or limitations, pain and safety reports, session logs, effort ratings, notes) — to generate and adapt your training plan and show your progress. This is special-category data, so we process it on the basis of your explicit consent, which you give by entering it and can withdraw by deleting the data or your account.

Coach conversations — the messages you exchange with the AI coach, kept so the coach has context and so you can read your history. Legal basis: performance of our contract.

Subscription data (plan status, period dates, provider customer and subscription identifiers, monthly usage counters) — to give you the right access and enforce quotas. Legal basis: contract and our legitimate interest in preventing abuse.

Technical data (IP address, device and browser information, error and request logs) — to keep the service secure and diagnose faults. Legal basis: legitimate interests.

Card numbers never reach us: payment details are collected and stored by Paddle.

2. Automated processing by AI

Your profile answers, coach messages and session logs are sent to our AI provider to generate plans, feedback and adaptations. No decision with legal or similarly significant effect is made about you automatically. Do not share information you do not want processed this way — for example detailed medical records or third-party data.

3. Who we share data with

Hosting and database/authentication infrastructure providers who run the app on our behalf.

Our AI model provider, which processes your prompts and plan data to return generated content.

Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.

Professional advisers (legal, accounting) and public authorities where we are legally required to disclose.

We do not sell your personal data and do not use your health data for advertising.

4. International transfers

Some providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

5. Retention

We keep your account and training data while your account is active. Delete your account from the Profile tab and your profile, plans, session logs, weight entries, safety reports and coach messages are deleted; billing records are retained by Paddle and by us where tax law requires (typically up to 10 years). Technical logs are kept for a short period for security purposes.

6. Your rights

You can request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent at any time. Write to najzarpro@gmail.com and we will respond within one month. You may also complain to your local data protection authority.

7. Security and cookies

We use encryption in transit, access controls and row-level database rules so each account can only reach its own data.

We use only essential storage: a session token to keep you signed in and your language preference. No advertising or third-party tracking cookies are set. Paddle may set cookies necessary for checkout and fraud prevention.

8. Children

The service is not intended for anyone under 16. We do not knowingly collect their data; contact us if you believe a minor has registered.