01. GDPR Compliance
We take your privacy seriously. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
02. Data Collection
We collect the following information:
- ·Account Info: Email address and encrypted password.
- ·Workout Data: Exercises, reps, weights, and dates.
- ·Physical Metrics: Weight and muscle ratings (optional).
03. Data Usage
Your data is used exclusively to:
- ·Maintain your account and sessions.
- ·Calculate progression and volume statistics.
- ·Synchronize your data across devices.
WE NEVER SELL YOUR PERSONAL DATA TO THIRD PARTIES.
04. Data Storage
All data is stored securely using Supabase infrastructure. We utilize industry-standard encryption and security protocols to prevent unauthorized access.
05. AI-Assisted Import
Aderap can build a plan or a workout history for you from a photo, PDF, or spreadsheet you upload. What happens to that file depends on its shape:
- ·A recognized spreadsheet export (a CSV or XLSX file from Strong, Hevy, FitNotes, Jefit, or a similar app) is read entirely by Aderap's own code. It never leaves the app and no third party ever sees it.
- ·Anything else — a photo, a PDF, or a spreadsheet in a shape our code doesn't recognize — is sent to Google's Gemini API for one-time structured extraction: reading the exercises, sets, and reps off the page. Nothing else is done with it, and Aderap does not keep the original file once it has been processed.
- ·Aderap only ever calls Gemini's paid API service. Under Google's terms for paid services, your content is not used to train or improve Google's models. Google retains it for up to 30 days solely to detect and prevent abuse of its API, then deletes it — see Google's Gemini API Additional Terms of Service at ai.google.dev/gemini-api/terms.
- ·The model cannot write to your account. Its only output is a fixed set of fields — exercise name, sets, reps — which you review and must explicitly confirm before anything is saved. A bad photo or a corrupted document can at worst produce a wrong value on the review screen, never an unreviewed change to your data.
06. Your Rights
Under GDPR, you have the following rights:
- ·Right to Access: Request a copy of your stored data.
- ·Right to Rectification: Correct inaccurate data.
- ·Right to Erasure: Delete your account and all associated data via the Settings menu.