Privacy Policy
In effect from 22. 9. 2026
1. What we can read, and what we cannot
| What | Where it is kept | Can we read it? |
|---|---|---|
| Workouts, training log, plan, equipment, favourites | Encrypted on your device, stored on our server | No |
| Meals, food diary, goals | Encrypted on your device, stored on our server | No |
| Weight, measurements, sleep, check-ins, weight goal | Encrypted on your device, stored on our server | No |
| Photos you do not share | Encrypted on your device, stored on our server | No |
| What you share with a coach (section 2) | Our server | Yes, so your coach can see it |
| Your username and sign-in data | Our server | The username yes; the password never |
| Your email address | Our server, only while an access request or invitation is open | Yes, until it is used or turned down, then deleted |
| Visit statistics (section 4) | Our analytics | Only as totals, not linked to you |
| Server logs: IP address, time, page asked for | Our reverse proxy | Yes, kept for 30 days for security |
2. What you share with a coach
Only if you have a coach, each with its own switch, and each on until you turn it off:
- the results of workouts your coach assigned, and your note if you choose to send it;
- workouts you did on your own (Settings › Coaches and clients);
- your food diary (Settings › Eat);
- weight and measurements, sleep, check-ins and photos (Settings › Feel; each photo also has its own switch).
This part is readable on our server, because your coach has to be able to see it. Turning a switch off deletes that copy from the server; your own copy stays with you. So that your coach knows when there is something new, we also tell them when you added something and what kind of thing it was — never more than they could open anyway. When the connection with a coach ends, you lose nothing: your food diary, Feel and your workouts stay in your account as they were. Only the shared copies on the server go, once you have no coach left: the diary at once, Feel and your own workouts the next time the app syncs. Shared photos stay in your account, but no former coach can open them. Workouts the coach assigned you, with your results, stay with the coach as their history.
Comments and notes. Your coach can leave one comment on each thing you share with them, and you can leave a note for them on a meal, a photo, a weigh-in or a night's sleep. Neither of you can reply. Both are readable on our server, like the rest of what you share. You decide what can be commented on: for each kind of thing in Settings, or for one thing when you open it; turning comments off hides what was already written. A comment or a note goes when the thing it is about is deleted or no longer shared, a coach's comments go when they are no longer your coach, and all of it goes when you have no coach left.
3. Photos
Before a photo leaves your device, the app shrinks it and saves it again as a JPEG, which removes everything the camera wrote into it: the time, the camera model and the GPS position. A shared photo is stored as that JPEG so your coach can open it; a photo you do not share is encrypted on your device first. Deleting a photo is immediate and everywhere, including for your coach. There is no bin to restore it from.
4. Visit statistics (Umami), and why we use them
We want to know, at least roughly, how many people use the app and which parts they use: whether it is worth running, and what to improve next. For that we run our own copy of Umami, an open-source analytics tool, on our own server. It counts page views and a few named actions (for example "a workout was built"), as totals.
- It sets no cookies and does not follow you to other websites.
- It never receives the part of an address after the question mark, because in our app that part can carry an invitation link.
- It is not linked to your account, and nothing in it tells us who you are.
- If your browser or an ad blocker stops it, the app works exactly the same.
5. Email
We use your email address only to send an invitation or to answer an access request. Mail goes out through Google's Gmail servers, and a copy of each invitation comes to us. Once the invitation is used or the request is turned down, the address is deleted, and because we delete it, we will never contact you.
6. Cookies and storage on your device
One cookie keeps you signed in; it is strictly necessary and nothing else uses it. Your data, and the key that encrypts it, are kept in your browser's own storage on your device. The key is stored so that no script can read it out, only use it.
7. Where, and for how long
The server is in Slovenia, run by us. Your data stays until you delete your account. What you share with a coach stays until you turn sharing off or the account is deleted. Server logs are kept for 30 days.
8. Your rights
Under the GDPR you can ask what we hold about you, have it corrected, take it with you (Settings › Your data does most of this by itself) and have it deleted. You can delete your account yourself in Settings › Your data, with your password: that deletes the account, your encrypted data, everything shared with a coach, and your photos, at once and for good. We get an email saying which account was deleted, nothing more. You can also complain to the Information Commissioner of Slovenia (Informacijski pooblaščenec, ip-rs.si).
Why we may hold data at all: to run the app you asked for (your account and your encrypted data, kept on our server because it is the only way we can let you use your data on more than one device), because you chose to share with a coach (the switches in section 2), and our legitimate interest in keeping the service safe and knowing how much it is used (server logs, visit totals).
9. Once more: your data, your responsibility
Encryption on your device is what keeps your data private, and it is also why we cannot help you get it back. We accept no liability for lost data. Keep your own backups.