Privacy Policy

01. GDPR Compliance

We take your privacy seriously. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

02. Data Collection

We collect the following information:

• ·Account Info: Email address and encrypted password.
• ·Workout Data: Exercises, reps, weights, durations, distances, heart-rate figures you enter, and dates.
• ·Physical Metrics: Weight and muscle ratings (optional).
• ·Nutrition Data (Pro, optional): The foods and meals you log, their calories and macronutrients, recipes and foods you save, and the target you set up — which uses your sex, birth year, height, weight, activity level and goal.
• ·Body Measurements (optional): Weight, body fat, tape measurements of each body part, a goal weight and notes you enter, and — for measurements taken by Body Scan — which ones came from the scan. No progress photos are collected.
• ·Connected Health App (optional): If you connect your phone's health platform, Aderap writes each finished workout (with an estimated active-calorie figure) to it, reads only your bodyweight, body fat and the heart rate recorded during your workouts, stores them with your body measurements and workouts, and never uses them for advertising or shares or sells them to anyone.
• ·Camera: Only if you use Body Scan (Pro) to take your measurements. Permission is requested at the moment you start a scan, never at launch, and every measurement can still be taken by tape if you decline. The scan reads the live camera and measures your outline on your device by geometry — no AI. No picture is ever saved to your device or camera roll, uploaded to Aderap, or sent to any third party; the frames are wiped from memory within seconds, and only the resulting measurements are stored, when you press Save.
• ·Microphone: Only if you use "Ramble Your Workout" to speak a session instead of typing it. Permission is requested at the moment you tap the microphone, never at launch, and the feature works entirely by typing if you decline. Aderap never receives, uploads, or stores a recording — see section 05.

03. Data Usage

Your data is used exclusively to:

• ·Maintain your account and sessions.
• ·Calculate progression and volume statistics.
• ·Synchronize your data across devices.
• ·Show one anonymous, aggregate figure in the app: the median strength gain across lifts logged by all Aderap users. It is computed inside our database and only the single percentage leaves it — never any individual's data.

WE NEVER SELL YOUR PERSONAL DATA TO THIRD PARTIES.

04. Data Storage

All data is stored securely using Supabase infrastructure. We utilize industry-standard encryption and security protocols to prevent unauthorized access.

05. AI-Assisted Import, Spoken Sessions & Meals

Aderap can build a plan or a workout history for you from a photo, PDF, or spreadsheet you upload, and can turn a workout you speak into a session — either one you have just done, or one you are asking it to put together. What happens depends on what you gave it:

• ·A recognized spreadsheet export (a CSV or XLSX file from Strong, Hevy, FitNotes, Jefit, or a similar app) is read entirely by Aderap's own code. It never leaves the app and no third party ever sees it.
• ·Anything else — a photo, a PDF, or a spreadsheet in a shape our code doesn't recognize — is sent to Google's Gemini API for one-time structured extraction: reading the exercises, sets, and reps off the page. Nothing else is done with it, and Aderap does not keep the original file once it has been processed.
• ·Nothing is sent to Gemini until you have allowed it. The app asks the first time an import or a spoken workout would need it, explains what is sent, and you can decline and keep using the rest of the app. You can withdraw that permission at any time under Profile → Data & Privacy, after which it asks again before the next one.
• ·A spoken workout is turned into text by your phone's own speech recogniser — Apple's on iOS, the system recogniser on Android — under your existing agreement with that platform. Depending on the device and its settings, that recogniser may run entirely on the phone or may send the audio to Apple or Google to transcribe; that is the operating system's decision, not Aderap's. What is certain either way is that the audio never reaches Aderap: we do not receive it, upload it, or store it, and it is never sent to our AI provider.
• ·Only the resulting text transcript goes any further, and only after you have read it. It appears in an editable box you can correct or rewrite before submitting, and it is then sent to Gemini under the same terms as the bullet below.
• ·A spoken session is sent with context about your training, and this is the one place Aderap shares your workout data with its AI provider. Because you can ask for a session rather than report one — “chest and shoulders today” — the model is given what it needs to answer: Aderap's exercise library, any exercises you have created yourself, the exercises and sets from your ten most recent sessions, and the plans you have saved. It is sent as reference material for that one request, it is never sent for a photo, PDF, or spreadsheet import, and it is covered by exactly the same Google terms as everything else below — not used to train Google's models, retained by Google for up to 30 days for abuse detection, then deleted. Your name, email address, and account identifiers are not included.
• ·Macros (Pro) can read a meal from a photo or a description you type, and a nutrition label from a photo. Only that photo or text is sent to Gemini — never your diary, your body measurements or your targets — under the same consent and the same Google terms as below. The photo is not stored by Aderap; you review every food and amount before anything is logged.
• ·Searching for a food or scanning a barcode sends only what you typed or the barcode number to the public food databases Aderap looks it up in (Open Food Facts and the USDA FoodData Central). No name, email address or account identifier is sent with it.
• ·Aderap only ever calls Gemini's paid API service. Under Google's terms for paid services, your content is not used to train or improve Google's models. Google retains it for up to 30 days solely to detect and prevent abuse of its API, then deletes it — see Google's Gemini API Additional Terms of Service at ai.google.dev/gemini-api/terms.
• ·The model cannot write to your account. Its only output is a fixed set of fields — exercise name, sets, reps — which you review and must explicitly confirm before anything is saved. That applies equally to a session it has suggested: exercises it proposes arrive on the same review screen, named and editable, and are only added once you press the button. A bad photo, a corrupted document, or a misheard word can at worst produce a wrong value there, never an unreviewed change to your data.

06. Analytics

The aderap.com website uses Google Analytics (Google Ireland Ltd.) to count visits, only if you accept it in the banner. It records which pages are visited, the browser and device type, and an approximate location; Google does not store IP addresses in Google Analytics 4. The data is kept for 2 months. The Aderap iOS and Android apps never use Google Analytics. You can change your choice here at any time.

Inside the app, once you have accepted this policy, Aderap records how its own screens are used so we can tell which features help and which get in the way: which screens you open and for how long, which buttons and controls you tap (by their on-screen name, such as “Add set”), which controls appeared on screen, taps on things that are not buttons, and app errors. It never records what you type, your weights, notes or any other content. This stays with Aderap — it is stored in our own database, tied to your account, never sent to Google or any other third party, never used for advertising, and deleted automatically after 180 days or immediately when you delete your account. You can switch it off at any time in Manage → Data & Privacy, which also erases what has been recorded so far.

07. Your Rights

Under GDPR, you have the following rights:

• ·Right to Access: Request a copy of your stored data.
• ·Right to Rectification: Correct inaccurate data.
• ·Right to Erasure: Delete your account and all associated data via the Settings menu. This immediately and permanently deletes your workouts, nutrition diary, recipes, foods you saved and body measurements along with the account. If your Pro access ends, your nutrition and body data is kept (not deleted) so it is there if you come back, and you can still delete your account at any time.