Privacy Policy

This policy applies to the App for iOS and Android and its website at fitness.olaurent.com. Olaurent is responsible for the App and website. For privacy questions, contact email@olaurent.com.

Only what the App needs to work:

• Account: an anonymous device identifier on first launch, and your email address and a salted password hash if you create an account. Your password is never stored in plain text.
• Training data: exercises, logged sets (load, reps, side, grip, notes, timestamps), body weight snapshots, splits, plans and milestones.
• Profile answers: sex, age, height, body weight, experience level and goal — the inputs the level and projection math needs.
• Nutrition: meals and macros you log, and your saved foods.
• Physique scans: the scores and measurements a scan produces. See “Photos and AI” below.
• Purchases: store transaction identifiers, your Stripe customer identifier, and whether your access is active.
• Ad attribution: for installs from Apple ads, the campaign, ad group and keyword identifiers. When you arrive from a Google ad or install from one on Google Play, the Google click identifier (gclid, gbraid or wbraid) and landing page.
• Referrals: your referral code, a one-way device or account identity code used to prevent duplicate and self-referrals, and an anonymous label or masked referred email shown to the referrer after a trial or qualifying purchase.
• Link clicks: when you open a referral or campaign link, we count the click on our own Cloudflare infrastructure — the code, campaign, landing page and browser family. No IP address is stored with it and we never fingerprint your device or browser.
• Usage and crash reports: screens, taps, named events, errors and masked onboarding screen recordings, tied to a random ID and, once you sign in, your account ID — never your email.
• Feedback: messages you send us in the App.
• Imports: text you paste to import workouts or programs.
• Notifications: your push token and the notifications we send.
• Connections: connection names, hashed connection credentials, granted permissions, token expiry, last use, and an audit trail of exercises or plans created through a connected AI service.
• Diagnostics: standard server request logs (IP address, timestamp, path) kept briefly for security and debugging.

We do not collect contacts, precise location, or your activity on other sites. We do not access your device's advertising identifier.

Photos are never stored on our servers. Physique scans, machine identification, meal photos, nutrition labels and program screenshots go directly to Cloudflare Workers AI for one inference call and are discarded when it returns. We keep only the result: scores, machine guesses, macros, or a draft split.

Workers AI also reads text you submit for these features: meal descriptions, workout and program imports, and machine product links. Your onboarding answers, including any body measurements you enter, go to Workers AI to pick your starting plan.

The guided physique scan runs body and face detection entirely on your device, and those detections never leave it. If you keep a copy of a scan photo, it stays in the App's private storage on your device, and deleting the App deletes it.

Voice logging uses your phone's speech recognition — on device where available, otherwise Apple's or Google's speech service. Audio never reaches our servers.

We do not use your data to train AI models.

Body weight, measurements, physique scores, nutrition and training history can reveal health information. We use it only to run the features you use. We never use it for advertising, never share it with ad networks, and never sell it.

• To provide the App: store your sets, compute levels, readiness, records and projections, and sync them across your devices.
• To authenticate you and keep your data attached to the right account.
• To process and validate purchases.
• To measure Apple Ads and Google Ads performance against subscription revenue.
• To attribute referrals, count referral and campaign link clicks, and prevent referral fraud.
• To run AI features: scans, identification, macro estimates and imports.
• To send notifications you allow.
• To understand usage, fix crashes, and keep the service secure.
• To let an AI service you connect read the SET data you authorize and create exercises or plans.

• Contract: running the App, your account, sync and purchases.
• Explicit consent: health and body data you choose to enter or scan. Withdraw it by deleting that data or your account.
• Consent: camera, photos, microphone and notifications, through system permissions, and refund data you choose to share with Apple.
• Legitimate interests: security, fraud prevention, analytics, crash reports, and ad and referral measurement. You can object by email.
• Legal obligation: billing records required for tax and accounting.

Each processor does one job:

• Cloudflare — hosting, database (D1), login email, and Workers AI inference.
• PostHog — usage analytics, crash reports and onboarding screen recordings with text and images masked, through q.olaurent.com, stored in the United States. Includes your onboarding choices and whether you gave a name; never your name, body measurements or anything you type.
• Advenue (Geniuses Only LLC) — iOS install and campaign attribution, app sessions, and verified subscription events. Receives an installation identifier, device/app metadata, Apple attribution signals and signed Apple purchase notifications; never quiz answers, training, photos or body measurements. We do not collect IDFA or request tracking permission.
• Apple, Google and Stripe — payments and subscriptions. We never see full card details.
• Google Ads — receives a Google click identifier with the purchase time, value and currency, to measure ads. Never your email, training, or health data.
• Apple Ads — tells us which campaign led to an install.
• Expo — delivers push notifications (device token and message text) and App updates.
• Open Food Facts and USDA FoodData Central — receive barcodes and food search text from our server, never your identity.
• AI services you connect, such as ChatGPT or Claude — receive the data you authorize, under their own terms and privacy policy.

• Remote connection (MCP): an AI app connects through OAuth or a connection code you create. You approve its access: read training, read body data, and create exercises and plans.
• Access tokens last one hour and renew for up to 90 days; connection codes last until revoked. We store only hashes of codes and tokens.
• Revoke any connection in Settings → Account → Connections, or under Connections on the web dashboard. Deleting your account revokes them all.
• Browser access (WebMCP): on the web dashboard, a compatible browser AI agent can read your SET data. Every save opens a review in SET and happens only after you confirm. Turn it off under Connections → Browser access.

• Website: a session cookie keeps you signed in. PostHog keeps a random ID in a first-party cookie and local storage. Local storage holds referral, campaign and Google ad click codes for up to 60 days, plus your unit preference. No third-party ad cookies.
• App: settings, your live workout and unsaved sessions are stored on your device. Your login session is kept in the system keychain.

• Rest and training reminders are scheduled on your device.
• Remote notifications go through Expo to Apple or Google. Turn them off in system settings.
• On iOS, the App shares workout state, stickers and invite codes with its Apple Watch app, widgets, Live Activities, iMessage stickers and App Clip through a private App Group on your devices.

Data travels over TLS, and Cloudflare encrypts stored data at rest. Passwords are salted and hashed; connection codes and tokens are stored only as hashes. No system is perfectly secure. Report vulnerabilities to email@olaurent.com.

Your data is stored on Cloudflare's global network and may be processed in the United States and other countries where our processors operate.

• Training, profile, nutrition, scans and splits: until you delete them or your account.
• Feedback messages: until you delete your account.
• Import text and drafts: purged after 6 hours when you start another import, and with your account.
• Push tokens and notification records: until the token stops working or you delete your account.
• Google ad click identifiers and pending conversion uploads: until you delete your account.
• Advenue identifiable install and event data: until erased with your account. Apple-signed anonymous attribution reports and erasure audit receipts may remain.
• Link clicks: kept as anonymous counts; the link to your account is removed on deletion.
• Billing audit logs (store notifications and subscription transfer records): up to 7 years, for tax, accounting and fraud checks.
• Server request logs: under 30 days.

• Export: Settings → Access & data → Download data (“Data” when signed out). We approve requests manually, then you save a JSON file of your data, without credentials or billing records. You can also email us.
• Deletion: Settings → Access & data → Delete account, or email us. Deletion cannot be undone. Account deletion queues Advenue erasure for automatic retry until confirmed. It removes your account, training, splits, nutrition, scans, purchase records, connections, push devices, and your PostHog profile and events, requests erasure of associated Advenue installation data, and cancels any web subscription. Apple, Google and Stripe keep their own payment records. Details at /delete-account.
• Correction: edit or delete any set, meal or scan in the App.
• Refund data (iOS): off by default. With Settings → Account → Share refund data on, when you ask Apple for a refund we tell Apple your subscription was delivered and previewed before purchase.
• Permissions: camera, photos, microphone and notifications are optional and revocable in system settings.

Depending on where you live, you may also have rights to access, port, restrict or object to processing, to withdraw consent, and to complain to your data protection authority. Email email@olaurent.com; we answer within 30 days.

Residents of California and other US states can ask to know, access, correct, delete or port their data, and opt out of sale, sharing or targeted advertising. We do not sell personal information. Sending Google an ad click identifier and purchase value may count as sharing or targeted advertising under some state laws; email us to opt out. We will not treat you differently for using these rights, and you can appeal a denied request by replying to our answer.

Global Privacy Control: we do not yet read GPC signals automatically. Email us from your account address and we will apply the opt-out.

You must be 16 or older to use the App (13 or older in the United States). We do not knowingly collect data from younger children. If you believe one has used the App, contact us and we will delete the account.

We will update the date at the top of this page when this policy changes, and tell you in the App or by email before a material change takes effect.