Privacy policy

Who handles your data

For anything to do with your data — exercising your rights included — write to hello@my-pr.app.

What we process

Only what the app needs to work. We neither buy data from third parties nor build profiles out of what you log.

• Account: email, username, display name and, if you upload one, a profile picture. We never see your password: Amazon Cognito stores it encrypted and it never reaches us.
• Training: plans, sessions, exercises, sets, weights, reps, RPE, rest times, personal records and the notes you write.
• Measurements and health: weight, body measurements, calories and macros, and any progress photos you upload.
• Phone data, if you grant permission: heart rate, distance and active calories from Apple Health or Health Connect, plus the workouts the app writes back to them.
• App usage: which screens you open and what you do, so we know what to fix. It is aggregated and never crossed with your training.
• Device and advertising: advertising identifier, model, operating system, language and approximate country inferred from your IP.
• Support: whatever you write to us and whatever it takes to answer you.

Why we use it, and on what legal basis

Every use has its legal basis. That is not paperwork: it decides what you can do about it — anything based on your consent can be withdrawn whenever you like, and it stops.

• Running the service — account, syncing across devices, working out your progress, backups: performance of the contract.
• Health data from your phone and progress photos: your explicit consent, given permission by permission and withdrawable from your system settings.
• Personalised advertising: your consent, asked for inside the app. Turn it down and you still see ads, just not personalised ones.
• Usage measurement, security and abuse prevention: legitimate interest, with the least data possible and aggregated wherever it can be.
• Meeting legal obligations — tax, retention, responding to authorities: legal obligation.

Health data: what we do and what we never do

Weight, measurements, heart rate and anything coming from Apple Health or Health Connect are a special category of data: the law protects them more, and we keep them apart. They are not used for advertising, not sold, never handed to advertisers or insurers, and they do not leave your account except to whoever you authorise. Apple and Google require exactly this to grant access to those sources, and we comply because it is also the right thing to do.

What you decide

Three things only happen if you switch them on, and any of them can be switched off again.

• Coach: accept one and they see your plans, your sessions and the measurements you share. Revoke access from the app and they stop seeing them.
• Public profile: while it is on, your name, your picture and whatever you post are visible to anyone, outside the app and to search engines too.
• Posts and followers: what you post is seen by whoever follows you, according to your profile settings.

Advertising

The app is free and paid for with advertising, so it is worth knowing exactly how. Ads are served by Google AdMob, which may use your phone advertising identifier. On iOS none of that starts until you answer the system prompt; say no and ads stop being personalised. Some links to supplement shops are affiliate links: if you buy, we earn a commission that costs you nothing extra, and the shop knows you came from us, but we never see what you bought. We never send an advertiser your training or your health data.

Who we share it with

Nobody beyond what it takes to run this, and each one only gets their part.

• Amazon Web Services (Ireland and Paris): hosting, database, files and email delivery. The servers are in the European Union.
• Google AdMob: advertising inside the app.
• Google Analytics: website measurement, and only if you accept cookies. Until then nothing from Google is downloaded.
• Firebase Analytics: usage measurement inside the app — which screens get opened, and little else. It is always on, it relies on legitimate interest, your training and health data never go into it, and you are told about it on the ads and privacy step when you start.
• Awin: affiliate link tracking.
• Apple and Google: app distribution and, where applicable, payments through their stores.
• Authorities and courts: only where the law requires it.

Where it is stored

On AWS servers in the European Union (Paris and Ireland regions). Some advertising and measurement providers are US companies and may process data outside the European Economic Area; those transfers rely on the EU–US Data Privacy Framework or on the European Commission standard contractual clauses.

How long we keep it

Your content stays for as long as you have an account. Delete it and your profile, training, measurements and photos go with it; backups are overwritten within 30 days at most. Kept separately, and only what is strictly needed, is whatever a legal obligation requires — invoicing, for instance — and security logs, for 12 months.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, withdraw any consent you gave, and get a portable copy. Export and delete live inside the app; for anything else write to hello@my-pr.app and we answer within a month at the latest. If you think we got it wrong, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your own country.

Security

Traffic is encrypted, passwords are held by Amazon Cognito, and access to data is limited to what each function needs. No system is infallible: if there is ever a breach that affects you, we tell you and notify the authority within the legal deadline.

Children

The app is not aimed at under-16s and we do not knowingly create accounts for them. If we find one, we delete it. If you are a parent or guardian and believe your child has an account, write to us and we will remove it.

Changes to this policy

If anything meaningful changes we tell you in the app or by email before it takes effect, and the date above always says which version is in force.