Privacy Policy
Last updated: August 15, 2026
Short version: we collect strictly what the app needs to work, we don't sell data to anyone, and we don't run ads. Below is exactly what we collect, why, and who else sees it. For any question about your data, message us on WhatsApp at 0751 132 300.
What data we collect
About you, the trainer: the name and email address you sign in with, plus the session data needed to keep you logged in.
About your clients: first name, optionally email and phone number (so you can send the invite), time zone, and an invite token.
About workouts: programs, exercises, sets, weights, reps, duration, reported effort, personal records, and when they were logged.
Optionally, the training profile: biological sex, birth year, height, body weight, experience level, goal, days per week, available equipment, and any limitations you write in.
Technical: error reports when something crashes and, if you enable notifications, the data needed to deliver them to that device.
Data that may reveal health information
The limitations field, body weight, and training profile can reveal information about health status. GDPR treats these with extra care, and so do we: they're optional, you only fill them in if you want to, we use them solely to tailor the program, and you can delete them anytime.
If you enter this kind of information about a client, you need their explicit consent.
Why we process it
So we can provide the service you asked us for — that covers your account, programs, workout logging, and progression. The legal basis is performance of the contract between us.
On the basis of consent, for optional things: push notifications, digest emails, and the health details in your profile. You can withdraw consent anytime.
On the basis of legitimate interest, for security, abuse prevention, and debugging — strictly enough to keep the app running.
Who else sees it
We don't sell data and we don't advertise. We only share it with the providers the app needs to work, each with its own role: hosting and database; Google, if you choose to sign in with your Google account; an email service for sign-in codes and transactional messages; an SMS service if you send the invite by text; an AI provider for generating programs, which receives the program description, not clients’ medical history; an error-reporting service; and a service that runs scheduled jobs.
All of them are processors: they handle data only for us and only on our instructions.
Transfers outside the EU
Your core data — account, programs, and workouts — is stored on servers in the European Union.
Some of these providers are US companies. When data reaches them, the transfer relies on the standard contractual clauses approved by the European Commission, or another mechanism GDPR provides for.
How long we keep it
For as long as your account is active. If you ask us to delete it, we delete the account and its data, except what we're legally required to keep (for example, accounting records, once payments exist).
Error reports are kept for a short period and stripped of personal data where possible.
Your rights
You have the right to request a copy of your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. If processing relies on consent, you can withdraw it anytime.
Message us on WhatsApp at 0751 132 300 and we'll respond within a month at most. If you're not satisfied with the answer, you can contact Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.
Cookies
This marketing page uses one cookie: the one that remembers your chosen language (Romanian or English). It's strictly necessary for that function, so it doesn't require consent. We don't use analytics.
In the app, we use a single cookie, the one that keeps you signed in. It's strictly necessary for the app to function, so it doesn't require consent. If we ever add analytics, we'll ask for your consent first.
Minors
The app isn't intended for people under 16. If you train minors, you need a parent's or guardian's consent before entering their data.
Security
Traffic is encrypted, a trainer's access is limited to their own account, and a client's data is visible only to their trainer and to themselves. No system is perfect; if a breach affects you, we'll notify you as required by law.
Changes
If we change this policy, we'll update the date at the top and, for significant changes, notify you directly.