Privacy policy

The short version

• Your plans and workouts are private. Nothing is shared unless you share it.
• Buddies only see what you share with them, and only while you're buddies.
• You can download all your data or delete your account at any time.
• No ads, no tracking, no selling of data.

What we store

• Account: name, email, time zone, unit preference.
• Sign-in: your password as a one-way hash (we can't read it), which sign-in methods you use, and for each signed-in device the time, IP address and browser, so sessions can be kept secure and you can sign out everywhere.
• What you create: week plans, tasks, categories, programs, workout logs and exercises.
• Social: your buddies, what you share with whom, your comments and reactions, and your notifications.

We use this only to run the app for you and the buddies you choose. The legal basis is our agreement with you (GDPR art. 6(1)(b)).

Who can see it

You. Buddies you explicitly share with can see the plans or programs you shared, plus reactions and comments on them. If you stop sharing or remove a buddy, their access ends immediately. Comments you write on a buddy's plan are visible to them and to others they share with.

Where it lives

In a database hosted in the EU. Sign-in links, password resets and (if you turn them on) email notifications go through an email provider acting on our behalf. If you choose to sign in with Google or Apple, they tell us your name and email address; we don't receive anything else from them.

Cookies

One essential cookie keeps you signed in until 30 days after your last visit. While you're on the sign-in pages, a short-lived cookie passes your time zone so a new account starts with the right one. Your light/dark theme choice is kept in your browser's local storage. There are no analytics or advertising cookies, so there's no cookie banner.

How long we keep it

• As long as you have an account.
• When you delete your account, sharing stops immediately and everything is permanently erased after 7 days, including your comments on buddies' plans and notifications about you.
• Data exports are kept for 24 hours, then deleted.
• Signed-in device records are deleted when you sign out, or 30 days after that device was last used.

Your rights

You can access, correct, export and delete your data yourself under Me → Privacy & your data. You can also object, ask us to restrict processing, or complain to your data protection authority.