Privacy policy

What data WorkoutFlow stores, why, and who can see it.

What we store

• Email — to sign in: login codes are sent there. Nobody but you sees it.
• Profile — nickname, name, bio, avatar, date of birth, language, units and other settings.
• Training — programs, sets, ratings, notes, rest times.
• Body — weight, measurements, check-in photos.
• Social — posts, comments, likes, messages, follows, groups, communities.
• Files — photos, set videos and voice notes you attach.
• Account — top-ups, charges and the Plus subscription. We do not store bank card data.
• Technical data — a session cookie to keep you signed in, and app error reports.

There are no ads or third-party analytics trackers in the service.

Who sees your data

By default — only you. You open it to others yourself: with privacy circles ("Who sees me"), groups, public links, coaching and by publishing a post. A coach sees exactly the level you granted and loses access when coaching ends.

Who data is shared with

• Login code emails are sent through the Resend email service.
• The built-in AI runs on Claude (Anthropic): when you ask a question, Anthropic receives the question and the data needed to answer it. Nothing is sent while the AI is off.
• By connecting AI tools — the built-in Claude or an external assistant — you allow them access to your data in the app: programs, workouts, progress, measurements and notes. A coach who enables Claude opens a student’s data to it within what the student shared with the coach. AI answers are not medical advice: it can be wrong, check what matters with a specialist.
• An external assistant you connected with a key or OAuth gets access within the rights you granted; you can revoke them at any time.
• Calls with a coach go directly between devices or through a relay (Cloudflare).

No one else, except where required by law.

Retention and deletion

Data is stored on the service's server while you have an account. To get an export of your data or delete your account, write to the email on the Contacts page. After deletion the data is erased, except what the law requires to keep longer (such as payment records). Backups are overwritten on a schedule.

Your rights

You can find out what data about you is stored, correct, export or delete it. Access granted to people and assistants is revoked in the app.

Age

The service is intended for people aged 18 and over.

Changes

We will announce changes to this policy in the app.

Contact

Questions about your data — to the email on the Contacts page.