Privacy Policy

Last updated: 4 Eylül 2026

This policy explains what data the Tunatrophy mobile app processes and why. Questions: info@tunatrophy.com.

Who processes it

The data controller is Tunatrophy. Contact: info@tunatrophy.com.

What we collect

• Account: email address, display name and which sign-in method you use (email/password or Sign in with Apple). We never hold your password; authentication is handled by Google Firebase Authentication.
• Setup and profile: birth year, height, weight, goal, experience level, how many days and minutes a week you can train, where you train, available equipment, the lifts you report, areas where you report pain, reminder times, unit and tone preference.
• Training log: sessions, exercises, weight, reps and difficulty (RPE) per set, completion times.
• Measurements and progress: your bodyweight entries, estimated and tested strength values, and the decisions behind plan changes.
• Nutrition log: meals you enter, calories and macros, your daily adherence mark and the targets you set yourself.
• Coach conversations: what you write to the AI coach, its replies and the lasting notes kept with your approval.
• Security log: when actions such as sign-in, sign-out, account deletion and plan setup happened, together with the IP address and the browser/device user agent. It holds no measurement values or training data — only the name of the action and its time.

We do not process location data and we use no third-party analytics SDK.

Camera, photos and documents

Camera and photo access is used for two separate jobs, and the two work differently.

Barcode scanning — the image never leaves your device. When you scan a barcode on a food package the code is decoded on your phone. No photo is taken, stored or transmitted; the only thing sent to our server is the barcode number.

Meal photos and files you send the coach — these do come to us. When you photograph a plate to have its calories worked out, or send the coach a photo or a PDF, the file is uploaded to our server, stored against your account, and passed to our AI provider (OpenAI) within a single request to produce the answer. It is not retained by the provider.

• Your files belong to your account; no other user can reach them and the address cannot be guessed.
• An upload you never attach to a message is deleted automatically within 24 hours.
• For files older than 30 days the full-size copy is deleted; only a small preview remains so you can still see what you sent in the conversation.
• Deleting your account deletes every photo and document you sent.

You can grant camera and photo library permission whenever you like and withdraw it at any time; if you do not grant it you can still search foods by name or enter them manually.

When you send a health document: the coach does not — and must not — interpret blood tests, X-rays or doctors' reports. Show those to your doctor.

Food database

Nutrition values come from two open sources: USDA FoodData Central for generic foods (public domain, laboratory measurements) and Open Food Facts for branded packaged products (ODbL licensed, contributed by volunteers). The app marks which entries are measurements and which are label claims.

The search runs through our server. Your device never connects to Open Food Facts directly; the word you type or the barcode you scan is queried from our server. Open Food Facts does not see your IP address, your identity or your account. Products we find are stored on our server so that a second search does not need to go out again.

Exercise illustrations come from wger (CC-BY-SA); the author and licence are shown next to each exercise in the app. The full list of sources is in the app under Profile → Data sources.

Advertising

In free use the app shows ads through Google AdMob. The ad slot sits at the end of the Today and Training screens; there are no ads in the active workout screen or in the coach chat.

What we never send to the ad network: your name, email, weight, workout logs, nutrition diary, reported pain and anything you say to the coach. That data is used only to build your programme.

What AdMob collects itself: technical information such as device and advertising identifiers, in order to serve ads. On iOS this requires a separate permission prompt. If you allow it, ads are personalised to your interests. If you decline, ads still appear but are not personalised and your advertising identifier is not used for tracking. You can change your choice under Settings → Privacy & Security → Tracking. AdMob's own data practices are covered by Google's policy.

Removing ads: a Pro subscription turns ads off completely. No ad request is made for a Pro user.

Why we process it

• To build your training program and calculate loads.
• To show your progress and keep your history.
• So the AI coach can answer using your own data.
• To send reminders, if you chose them.
• To keep your account safe and limit abuse.

Who we share it with

We do not sell data. Only the providers needed to run the service are used:

• Google Firebase Authentication — authentication. Your email address and sign-in details are processed there.
• OpenAI — the AI coach. The messages you write and the profile/plan summary needed to answer them are sent to OpenAI. This data is not used to train their models and coach conversations are sent so that they are not retained by the provider.
• Server hosting — the app's API and database run on a server we rent.
• Expo (EAS Update) — delivery of app updates. When the device checks for an update it sends version and platform information; no account or health data is sent.
• Open Food Facts — nutrition values for branded food products. The query goes out from our server; nothing beyond the word you searched or the barcode number is shared. Your identity, account and device details are not sent.

If we are legally required to (for example by a court order) we may have to share the minimum data necessary.

How long we keep it

We keep your data while your account exists; comparing your history is the product's whole job. When you delete your account, your training, nutrition, measurement and coach data, along with your identity record, are deleted. The security log (which account, which action, when — including the IP) is retained.

Your rights

• Deletion: in the app, Profile → Delete account. This cannot be undone.
• Access and a copy: you can see your records inside the app. If you want a copy of everything, write to info@tunatrophy.com and we will send it once we have verified your identity. In-app export does not exist yet.
• Correction: you can edit your profile and entries in the app.
• Coach memory: the notes the coach keeps about you are listed under Coach → Memory and can be deleted one by one.

Health data

Data such as the weight, sleep and pain you enter is health data and is used only to produce training and nutrition suggestions for you. It is not used for ad targeting, not turned into a marketing profile and not sold to third parties.

Children

Tunatrophy is for people aged 18 and over only. Setup asks you to confirm your age and rejects a birth year under 18.

Security

Connections are encrypted with TLS, authentication goes through Firebase, and only the application's own narrowly-scoped database user can reach the database. No system is perfect; if you notice a problem, write to info@tunatrophy.com.

Changes

If this policy changes, the date on this page is updated; for an important change we will also tell you inside the app.