Privacy policy
Draft – will be legally reviewed before release. The text describes how the app actually works, but it is not a final legal document. Details in square brackets will be filled in by the operator.
Effective from [release date] · version 0.9 (draft)
Who processes the data
The controller of personal data is Jiří Schnapka, company ID (IČO) 03821838, registered at Sokolská 737, 783 44 Náměšť na Hané, Czech Republic (“we”). Contact for data protection: jiri.schnapka@gmail.com.
In short
- The app works with an account. We store your data in the cloud in the EU so it isn't lost and works on your other devices.
- Only you can see your data – every row in the database and every photo is tied to your account and protected by access rules.
- For AI features we pass to OpenAI only what is needed for the given answer – never your email. Your name only as a greeting, if you fill it in.
- We don't sell data and don't use advertising tracking or third-party analytics.
- You can delete your account and all data at any time right in the app.
What we store
| Data | Why |
|---|---|
| Account: user ID, email (with Apple possibly a hidden address), sign-in method | sign-in, password recovery, support |
| Training profile: age, goals, fitness, equipment, limitations and injuries, optionally height, weight, sex | building a safe workout |
| Daily check-ins including answers about pain and health issues, and notes | safety and adapting today's workout |
| Workout history, plans, set results | progression, history, statistics |
| Coach chat and agreements (pause, intensity…) | continuing the conversation, adapting plans |
| Gamification: XP, level, achievements, personal records | motivation, showing progress |
| Weight entries | weight chart, energy estimate |
| Visual progress photos (front, side, back) and their analysis | comparing visible changes over time – only if you use the feature |
| Subscription: App Store transaction identifiers, status and validity | verifying Premium |
| Technical records of AI requests: feature, time, status, model, token counts | limits, abuse protection, costs – without message content |
We process health information (pain, injuries, health issues, weight, physique photos) only with your explicit consent and only for the app to work. The app only writes finished workouts to Apple Health if you allow it; it reads nothing from it.
Where the data is stored
- Supabase (database, sign-in, photo storage) – data centre in the EU (Frankfurt). Photos are in private storage accessible only to your account.
- On your iPhone – a copy of the data for offline use. It is deleted from the phone when you sign out.
What is passed to OpenAI
Workouts, coach replies, reviews and visual progress are created by AI from OpenAI. Requests are sent by our server, not by the phone. OpenAI receives:
- your profile without email, a summary of recent workouts, today's check-in (shortened notes), active agreements and the list of allowed exercises,
- your name (first name or nickname) – only if you fill it in, and only so the morning message can greet you,
- in the chat, your message and a short summary of the previous conversation,
- for visual progress – only with your consent and after you tap Analyse – three photos and the previous result.
We send requests with a setting that asks OpenAI not to store them for further use (store: false); OpenAI may keep them briefly for abuse monitoring (at most 30 days under its terms) and does not use them to train models. OpenAI processes data in the USA on the basis of standard contractual clauses approved by the European Commission (part of the data processing agreement with OpenAI).
Other processors
- Apple – Sign in with Apple, purchases and subscriptions in the App Store.
- Google – Sign in with Google, if you choose it.
- Resend – sending account emails (confirmation, password recovery).
- Vercel – hosting of this website.
How long
- We keep account data until you delete your account. Deletion removes the account, all data and photos from the database and storage immediately; they disappear from backups within 7 days at the latest.
- The server automatically deletes the helper copy of an AI answer (kept in case of a connection drop, so a request isn't processed and counted twice) after 24 hours. Your conversations with the coach and your workout plans stay in your account.
- We keep technical records of AI requests (without content) for 12 months for limits and billing; then they are deleted automatically.
- Subscription data required by accounting regulations may be kept for the period set by law.
Your rights
You have the right to access your data, have it corrected or erased, restrict processing, data portability, withdraw consent (e.g. for visual progress – in the app's Visual progress section) and the right to lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz), or the authority in your country. Write to us at jiri.schnapka@gmail.com.
Security
- Encrypted transfer (HTTPS), data access only for the signed-in owner.
- No passwords, tokens, photos or health notes in operational logs.
- The app doesn't use advertising identifiers or cross-app tracking.
Children
The app is intended for people over 16 years of age.
Changes
We'll inform you about significant changes to this policy in the app.