Privacy Policy

Last Updated: October 2026

01. GDPR Compliance

We take your privacy seriously. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

02. Data Collection

We collect the following information:

  • ·Account Info: Email address and encrypted password.
  • ·Guest Workouts (website only): If you try a workout without an account, we create an anonymous guest account with no name or email, tied only to that browser, and store the workout you log in it the same way as any other workout. Guests get no AI features, so nothing is sent to an AI provider. If you create an account from it, the workout becomes part of that account. Otherwise the guest account and everything in it are permanently deleted 7 days after it was created.
  • ·Workout Data: Exercises, reps, weights, durations, distances, heart-rate figures you enter, and dates.
  • ·Physical Metrics: Weight and muscle ratings (optional).
  • ·Nutrition Data (Pro, optional): The foods and meals you log, their calories and macronutrients, recipes and foods you save, and the target you set up — which uses your sex, birth year, height, weight, activity level and goal.
  • ·Body Measurements (optional): Weight, body fat, tape measurements of each body part, a goal weight and notes you enter, and — for measurements taken by Body Scan — which ones came from the scan. No progress photos are collected.
  • ·Pain & Rehab (optional): The places on the body you mark as painful (a muscle or a joint, and which side), what the pain feels like, and the 0–10 scores you give them, each with its date and — for a score given during a workout — that workout. Used only to show your pain history, mark the exercises that work a painful spot, and, if you use the Sidekick, to help it work around them. Never used for advertising, never shared or sold.
  • ·Connected Health App (optional): If you connect your phone's health platform, Aderap writes each finished workout (with an estimated active-calorie figure) to it, reads only your bodyweight, body fat and the heart rate recorded during your workouts, stores them with your body measurements and workouts, and never uses them for advertising or shares or sells them to anyone.
  • ·Camera: Only if you use Body Scan (Pro) to take your measurements. Permission is requested at the moment you start a scan, never at launch, and every measurement can still be taken by tape if you decline. The scan reads the live camera and measures your outline on your device by geometry — no AI. No picture is ever saved to your device or camera roll, uploaded to Aderap, or sent to any third party; the frames are wiped from memory within seconds, and only the resulting measurements are stored, when you press Save.
  • ·Microphone: Only if you use "Ramble Your Workout" to speak a session instead of typing it. Permission is requested at the moment you tap the microphone, never at launch, and the feature works entirely by typing if you decline. Aderap never receives, uploads, or stores a recording — see section 05.

03. Data Usage

Your data is used exclusively to:

  • ·Maintain your account and sessions.
  • ·Calculate progression and volume statistics.
  • ·Synchronize your data across devices.
  • ·Show one anonymous, aggregate figure in the app: the median strength gain across lifts logged by all Aderap users. It is computed inside our database and only the single percentage leaves it — never any individual's data.

WE NEVER SELL YOUR PERSONAL DATA TO THIRD PARTIES.

04. Data Storage

All data is stored securely using Supabase infrastructure. We utilize industry-standard encryption and security protocols to prevent unauthorized access.

05. AI-Assisted Import, Spoken Sessions, Meals & Coach

Aderap can build a plan or a workout history for you from a photo, PDF, or spreadsheet you upload, and can turn a workout you speak into a session — either one you have just done, or one you are asking it to put together. What happens depends on what you gave it:

  • ·A recognized spreadsheet export (a CSV or XLSX file from Strong, Hevy, FitNotes, Jefit, or a similar app) is read entirely by Aderap's own code. It never leaves the app and no third party ever sees it.
  • ·Anything else — a photo, a PDF, or a spreadsheet in a shape our code doesn't recognize — is sent to Google's Gemini API for one-time structured extraction: reading the exercises, sets, and reps off the page. Nothing else is done with it, and Aderap does not keep the original file once it has been processed.
  • ·Nothing is sent to Gemini until you have allowed it. The app asks the first time an import, a spoken workout, a question to the Sidekick or setting up one of your exercises would need it, explains what is sent, and you can decline and keep using the rest of the app. You can switch every AI feature off at any time with the AI Features switch under Manage → Data & Privacy: it applies to every device your account signs into, the AI features disappear from the app, and Aderap's servers refuse to send anything to Gemini for your account until you switch it back on.
  • ·A spoken workout is turned into text by your phone's own speech recogniser — Apple's on iOS, the system recogniser on Android — under your existing agreement with that platform. Depending on the device and its settings, that recogniser may run entirely on the phone or may send the audio to Apple or Google to transcribe; that is the operating system's decision, not Aderap's. What is certain either way is that the audio never reaches Aderap: we do not receive it, upload it, or store it, and it is never sent to our AI provider.
  • ·Only the resulting text transcript goes any further, and only after you have read it. It appears in an editable box you can correct or rewrite before submitting, and it is then sent to Gemini under the same terms as the bullet below.
  • ·A spoken session is sent with context about your training — one of the two places Aderap shares your workout data with its AI provider (the Sidekick, below, is the other). Because you can ask for a session rather than report one — “chest and shoulders today” — the model is given what it needs to answer: Aderap's exercise library, any exercises you have created yourself, the exercises and sets from your ten most recent sessions, and the plans you have saved. It is sent as reference material for that one request, it is never sent for a photo, PDF, or spreadsheet import, and it is covered by exactly the same Google terms as everything else below — not used to train Google's models, retained by Google for up to 30 days for abuse detection, then deleted. Your name, email address, and account identifiers are not included.
  • ·Macros (Pro) can read a meal from a photo or a description you type, and a nutrition label from a photo. Only that photo or text is sent to Gemini — never your diary, your body measurements or your targets — under the same consent and the same Google terms as below. The photo is not stored by Aderap; you review every food and amount before anything is logged.
  • ·The Sidekick (Pro; called the Coach until October 2026) answers questions about your own training. Each question is sent to Gemini together with the conversation so far and a summary built from your own account: your profile answers (age, sex, height, experience and objective), your active goals, the last twelve weeks of training (sessions, sets, weights, and the best lifts by period), your saved workout plans and programs (their names, exercises and planned sets), your recent weigh-ins and tape measurements, the pain spots you have open in Pain & Rehab (place, side, type and recent scores), and the last seven days of your food log with your targets. It is built fresh for each question, on our servers, from your rows only — it never contains anyone else's data, nor your name, email address or account identifiers — and it is covered by the same consent and the same Google terms as below. The Sidekick also receives Aderap's exercise library. It cannot change, add or delete anything in your account by itself: it can suggest an exercise, a food or a recipe as a card with a button, and only your tap on that button adds the exercise to your session or logs the food — using the app's own exercise and food records, never figures written by the model. Aderap does not store the conversation; it stays on your phone and is gone when the app closes or you start a new chat. We keep only a record that a question was asked (time and size, never its words), to apply the daily limit. When the Sidekick offers to set up an exercise you created, each step sends Gemini that exercise's name, equipment and kind with Aderap's exercise library (and, for the muscle step, the library exercises you picked as similar) — none of your sets or other data. What it proposes is shown to you first; it is saved to your account only when you tap SAVE, or MERGE, which moves that exercise's history onto the library exercise.
  • ·Searching for a food or scanning a barcode sends only what you typed or the barcode number to the public food databases Aderap looks it up in (Open Food Facts and the USDA FoodData Central). No name, email address or account identifier is sent with it.
  • ·Aderap only ever calls Gemini's paid API service. Under Google's terms for paid services, your content is not used to train or improve Google's models. Google retains it for up to 30 days solely to detect and prevent abuse of its API, then deletes it — see Google's Gemini API Additional Terms of Service at ai.google.dev/gemini-api/terms.
  • ·The model cannot write to your account. Its only output is a fixed set of fields — exercise name, sets, reps — which you review and must explicitly confirm before anything is saved. That applies equally to a session it has suggested: exercises it proposes arrive on the same review screen, named and editable, and are only added once you press the button. A bad photo, a corrupted document, or a misheard word can at worst produce a wrong value there, never an unreviewed change to your data.

06. Analytics

The aderap.com website uses Google Analytics (Google Ireland Ltd.) to count visits, only if you accept it in the banner. It records which pages are visited, the browser and device type, and an approximate location; Google does not store IP addresses in Google Analytics 4. The data is kept for 2 months. The Aderap iOS and Android apps never use Google Analytics. You can change your choice here at any time.

Inside the app, once you have accepted this policy, Aderap records how its own screens are used so we can tell which features help and which get in the way: which screens you open and for how long, which buttons and controls you tap (by their on-screen name, such as “Add set”), which controls appeared on screen, taps on things that are not buttons, and app errors. It never records what you type, your weights, notes or any other content. This stays with Aderap — it is stored in our own database, tied to your account, never sent to Google or any other third party, never used for advertising, and deleted automatically after 180 days or immediately when you delete your account. You can switch it off at any time in Manage → Data & Privacy, which also erases what has been recorded so far.

07. Your Rights

Under GDPR, you have the following rights:

  • ·Right to Access: Request a copy of your stored data.
  • ·Right to Rectification: Correct inaccurate data.
  • ·Right to Erasure: Delete your account and all associated data via the Settings menu. This immediately and permanently deletes your workouts, nutrition diary, recipes, foods you saved, body measurements and pain records along with the account. If your Pro access ends, your nutrition and body data is kept (not deleted) so it is there if you come back, and you can still delete your account at any time.