Privacy Policy
Last updated 25 October 2026
The short version: we collect what the App needs to work (your account, your workouts and your food log) and nothing for advertising. We don't sell your data, there are no ads and no tracking across other apps or websites, and you can delete everything from the App at any time.
1. Who is responsible
The controller of your personal data is VXC SYSTEMS S.R.L. (Trade Register no. J20250079590003 · CUI 51237495), Str. Vasile Alecsandri nr. 3, et. 2, ap. 8, Timișoara, Timiș County, Romania. For anything about your data, email [email protected].
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: email address, and the name and account identifier your sign-in provider (Apple or Google) shares with us | Creating your account, signing you in, contacting you about your account | Contract (Art. 6(1)(b)) |
| Profile: sex, age, height, weight, activity level, goals and training preferences | Calculating your calorie and macro targets and generating training programs | Your explicit consent (Art. 9(2)(a)), as this can count as health data |
| Training and nutrition: workouts, sets, routines, exercises, foods, food diary, bodyweight entries and app settings | Providing the App's features and syncing them across your devices | Contract, and your explicit consent for health-related data |
| Purchases: whether you have Pro, your subscription status and history, and an anonymous purchase identifier linked to your account | Unlocking Pro on every device you sign in on, and restoring purchases | Contract |
| Crash reports: technical details when the App crashes or hits an error (device model, operating system and app version, and the error itself). They don't include your name, email or the content you log. | Finding and fixing bugs | Legitimate interest in a working App (Art. 6(1)(f)) |
We do not collect your location or contacts, run advertising or analytics trackers, use your data to profile you for marketing, or track you across other companies' apps and websites.
Camera. The camera is used only on your device to read food barcodes. No images or video are stored or sent anywhere. Only the barcode number is looked up (see section 3).
You give consent for health-related data when you set up your profile. You can withdraw it at any time by deleting your account (section 6); this doesn't affect anything processed before.
3. Who processes your data for us
We use a small number of service providers, each bound by a data processing agreement and allowed to use your data only to provide their service to us:
- Supabase: database, sign-in and sync. Your account and app data are stored in the EU (Ireland).
- RevenueCat (USA): manages Pro subscriptions purchased through the App Store and Google Play.
- Sentry: crash reporting, hosted in the EU (Germany).
- Apple and Google: if you choose Sign in with Apple or Google, and as the app stores that process your payments under their own privacy policies.
Food lookups go to two public food databases, Open Food Facts (France) and USDA FoodData Central (USA). They receive only the barcode or search text, never your account or any personal data.
Where data is transferred outside the European Economic Area (for example to RevenueCat in the USA), the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
We never sell your personal data or share it for advertising.
4. How long we keep it
- Account and app data: for as long as you have an account. Deleting your account erases it.
- Crash reports: up to 90 days.
- Purchase records: as long as needed to provide your subscription and as required by tax and accounting law.
Encrypted backups kept by our hosting provider are overwritten on a rolling basis within a few weeks.
5. How we protect it
Data is encrypted in transit (HTTPS) and at rest on our servers. Each account can read only its own data, enforced by the database itself. Your sign-in session is stored encrypted on your device.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data (most of it you can edit directly in the App);
- erase your data: delete your account in the App under Settings → Delete Account, which permanently removes your account and data from our servers;
- data portability: receive your data in a machine-readable format;
- restrict or object to processing based on legitimate interest;
- withdraw consent at any time, without affecting earlier processing.
To use any of these rights, email [email protected] from the address on your account. We reply within one month. You also have the right to complain to a data protection authority. In Romania that is the ANSPDCP (dataprotection.ro), or the authority in the EU country where you live.
7. Children
The App is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
8. Changes to this policy
If we change this policy, we will update the date at the top. For significant changes we will also tell you in the App before they take effect.