Controller and contact
Yann Lephay, sole trader, 53 avenue Charles de Gaulle, 57530 Courcelles-Chaussy, France, is the controller. Data requests: [email protected].
Local by default
Without an account, equipment, preferences and workouts stay on your iPhone or in your browser. Workout preparation and adaptation work locally. Creating an account to retrieve these data across devices is optional; sharing reports to improve the engine is a separate choice.
Optional account and sync
If you sign in with Apple, Google or an email link, we store an account identifier, the email address provided and, if you choose one, a display name. After you choose to import or save your data, our server stores your equipment, supports, declared preferences and restrictions, and completed workouts: dates, exercises, sets, repetitions, loads and rests. Perceived effort and your optional summary feedback are included. Reported discomfort or pain and the details of safety signals stay on the device where you entered them: the server removes them before storage and keeps only the fact that an exercise was stopped, so it is not used as a progression reference. We do not ask for pregnancy or postpartum status. An ongoing workout stays on its device. Once connected, new completed workouts sync so you can retrieve your progress across devices. If you link a purchase to your account, we keep its Apple or Stripe reference to unlock your access. These data provide the account service you request, which is their basis, and are never used for advertising. They are hosted in Germany by netcup GmbH; sign-in emails go through Resend (Ireland region), and Apple, Google or Stripe process the sign-in or payment you choose.
Account retention and deletion
Synced data are kept while the account exists. Deleting the account in settings removes its profile and workouts from the active database. Earlier guest backups on your devices are separate and are not erased by this action. Encrypted technical backups may remain after account deletion; they are removed when a newer backup succeeds and they are more than 30 days old. Purchase references may be retained to restore access, handle refunds and meet applicable obligations.
Optional sharing
Only users with verified paid access are invited. Refusal does not affect access or local adaptation. Processing relies on explicit consent, to examine recommendations and improve the common engine, not to change your individual workout remotely.
Optional reports: data sent
New eligible workouts after consent, including interrupted workouts, include the UTC end day without time or timezone; exercises, sets, repetitions or durations, loads and rests planned or confirmed; interruption and engine/catalogue versions. The retained plan is the final plan. Earlier history is not uploaded. If you write optional feedback in the summary, that free-form comment, limited to 500 characters, is also sent. Avoid including information that could identify you or health information: the comment is sent as you write it, even without the health consent below. They also include the workout length, skipped exercises and, if you fill them in, overall difficulty, repetitions left in reserve and your answer about the length. Discomfort or pain rated from 0 to 10 and exercises stopped for safety are health data: they are sent only if you separately turn on Also share reported discomfort, based on your explicit consent. You can withdraw this consent at any time; the server then erases those data already received.
Pseudonymous, not fully anonymous
A random enrollment identifier links reports. Its secret stays in this iPhone’s keychain; the server stores its hash. These sharing reports exclude names, email, age, sex, menstrual data and photos; however, the free-form comment may contain information you choose to write. The discomfort or pain score and safety stops are sent only with your separate health consent; that consent does not filter the free-form comment. Performance history remains personal data. We do not link these reports to your account, use them for advertising tracking, sell them or send them to an AI service.
Hosting
Reports travel over HTTPS to our private server hosted in Germany by netcup GmbH. Only authorized people improving the engine can inspect them; the database is not public. The collector and its proxy do not log report bodies, secrets or IP addresses, although network transport requires an IP. Cloudflare provides collector DNS without proxying this traffic.
Optional reports: retention
Reports are retained for up to 90 days, purged at startup and hourly while running. One local backup is renewed daily and invalidated on deletion or purge. Consent version and date remain during enrollment. After withdrawal only a revoked hash, without reports or consent date, remains to prevent delayed uploads from recreating data.
Withdrawal and rights
Use Stop sharing and delete my data in app settings. This stops uploads and requests server deletion without deleting local history. Offline requests require reopening the connected app. Uninstalling does not send a deletion request; 90-day retention still applies. Request access, correction, deletion, restriction or portability at [email protected]; complaints may be sent to CNIL (cnil.fr). Your name or email alone cannot identify a pseudonym; contact us before uninstalling if you need help. Withdrawal does not affect earlier lawful processing.
Website and purchases
Equipment-tool inputs stay in your browser. The website and web app do not integrate advertising cookies or an audience measurement tool. Sign-in uses technical cookies; a web purchase without an account may use a recovery cookie and the payment email. Apple handles in-app purchases and Stripe handles web purchases. We do not store card details. Contact links open your email app; a message is transmitted only when you send it.