Privacy Policy

In effect from 24. 10. 2026

1. What we can read, and what we cannot

2. What you share with a coach

Only if you have a coach, each with its own switch, and each on until you turn it off:

• the results of workouts your coach assigned, and your note if you choose to send it;
• workouts you did on your own (Settings › Coaches and clients);
• your food diary and your daily goals for calories and nutrients (Settings › Eat);
• weight and measurements, sleep, check-ins and photos (Settings › Feel; each photo also has its own switch).

This part is readable on our server, because your coach has to be able to see it. Turning a switch off deletes that copy from the server; your own copy stays with you. So that your coach knows when there is something new, we also tell them when you added something and what kind of thing it was — never more than they could open anyway. When the connection with a coach ends, you lose nothing: your food diary, Feel and your workouts stay in your account as they were. Only the shared copies on the server go, once you have no coach left: the diary and goals at once, Feel and your own workouts the next time the app syncs. Shared photos stay in your account, but no former coach can open them. Workouts the coach assigned you, with your results, stay with the coach as their history.

Comments and notes. Your coach can leave one comment on each thing you share with them, and you can leave a note for them on a meal, a photo, a weigh-in or a night's sleep. Neither of you can reply. Your coach can also leave one reaction (an emoji) on each thing, and you can acknowledge a comment with 👍. Both are readable on our server, like the rest of what you share. You decide what can be commented on: for each kind of thing in Settings, or for one thing when you open it; turning comments off hides what was already written. A comment or a note goes when the thing it is about is deleted or no longer shared, a coach's comments go when they are no longer your coach, and all of it goes when you have no coach left.

3. Photos

Before a photo leaves your device, the app shrinks it and saves it again as a JPEG, which removes everything the camera wrote into it: the time, the camera model and the GPS position. A shared photo is stored as that JPEG so your coach can open it; a photo you do not share is encrypted on your device first. Deleting a photo is immediate and everywhere, including for your coach. There is no bin to restore it from.

4. A watch (optional)

If you link a watch, the workouts you send to it and today's planned workouts are kept on our server in readable form (workout and exercise names, amounts, notes, and your coach's username) until the watch has them, or until your app replaces today's plan. A workout done on the watch (time, rounds, calories, average and maximum heart rate) waits on the server in readable form until your app takes it into your encrypted log; then it is deleted. The watch reaches us through its maker's app on your phone — Garmin Connect for a Garmin, Zepp for an Amazfit — and that app follows its maker's own privacy policy, not ours. You can unlink a watch in Settings, and everything about it goes when you delete your account.

5. Notifications (optional)

If you turn on notifications on a device (Settings › Notifications), we keep that device's push address and its public keys on our server, with the kinds of notice you want, so that we can tell it when your coach plans a workout or a week of meals or leaves a comment, or when a client does a workout you planned or leaves you a note. A notice says who and what kind of thing it is (for example "tina left you a comment"), never what a comment or a note says. It reaches your device through the push service of your browser's or phone's maker — Google, Apple, Mozilla or Microsoft — encrypted so that only your device can read it; that service learns only that something was sent to your device. Turning notifications off, signing out on that device, or deleting your account removes the device from our server.

6. How much the app is used, and why we look

We want to know, at least roughly, how many people use the app and which parts they use: whether it is worth running, and what to improve next. For that we run our own copy of Umami, an open-source analytics tool, on our own server. It counts page views and a few named actions (for example "a workout was built"), as totals.

• It sets no cookies and does not follow you to other websites.
• It never receives the part of an address after the question mark, because in our app that part can carry an invitation link.
• It is not linked to your account, and nothing in it tells us who you are.
• If your browser or an ad blocker stops it, the app works exactly the same.

Use of your account. Separately from Umami, our server notes on which days your account used the app, which parts (Train, Eat, Feel), which version of the app and what kind of device (for example "iPhone · Safari"). It never sees what you did there: your data stays encrypted. Only we see this record, in the app's admin pages, to know who still uses the app, whether everyone has the latest version, and how a new feature is taken up. Each day's entry is deleted after 90 days, and all of it when you delete your account.

Screenshots of an activity or a night's sleep. If you import an activity or a night's sleep from a screenshot, the picture goes to our server and is read there by an AI model that runs on our own computer, not with any outside service. The picture is not stored: it is deleted as soon as it is read, and only the numbers go back to your app, which keeps them encrypted like everything else. We count how many pictures each account sends a day, nothing more.

7. Email

We use your email address only to send an invitation or to answer an access request. Mail goes out through Google's Gmail servers, and a copy of each invitation comes to us. Once the invitation is used or the request is turned down, the address is deleted, and because we delete it, we will never contact you.

8. Cookies and storage on your device

One cookie keeps you signed in; it is strictly necessary and nothing else uses it. Your data, and the key that encrypts it, are kept in your browser's own storage on your device. The key is stored so that no script can read it out, only use it.

9. Where, and for how long

The server is in Slovenia, run by us. Your data stays until you delete your account. What you share with a coach stays until you turn sharing off or the account is deleted. Server logs are kept for 30 days, and the record of the days you used the app for 90 days.

10. Your rights

Under the GDPR you can ask what we hold about you, have it corrected, take it with you (Settings › Your data does most of this by itself) and have it deleted. You can delete your account yourself in Settings › Your data, with your password: that deletes the account, your encrypted data, everything shared with a coach, and your photos, at once and for good. We get an email saying which account was deleted, nothing more. You can also complain to the Information Commissioner of Slovenia (Informacijski pooblaščenec, ip-rs.si).

Why we may hold data at all: to run the app you asked for (your account and your encrypted data, kept on our server because it is the only way we can let you use your data on more than one device), because you chose to share with a coach (the switches in section 2), because you turned notifications on (section 5), and our legitimate interest in keeping the service safe and knowing how much it is used (server logs, visit totals, the days your account used the app).

11. Once more: your data, your responsibility

Encryption on your device is what keeps your data private, and it is also why we cannot help you get it back. We accept no liability for lost data. Keep your own backups.