Privacy Policy

Who is responsible for your data

The service and personal data operator is Romashka sole proprietorship (IIN 000000000000), 1 Primernaya St, Almaty, Republic of Kazakhstan. For any question about your data, write to support@example.com.

What we keep

• Account: your email address and password. The password is kept by the Supabase Auth sign-in service as a hash; we never see it.
• Profile: name, height, weight unit (kg or lb) and weekly workout goal.
• Body weight: the values you enter, with date and time.
• Workouts and plans: dates, start and finish times, exercises, sets, weights, reps and your notes; custom exercises you add.
• Technical data: when you sign in or the app calls the server, Supabase and Google Cloud record the IP address, time and browser details in service logs.

Body weight and training data relate to your health and fitness. We use them only to show you your history and statistics.

What your browser keeps

Your sign-in token (so you stay signed in), chosen language and interface colour are kept in the browser's local storage. Your chosen language and colour are also kept in two cookies, so that pages open in your language straight away and the site icon matches your colour; they hold nothing else. We use no advertising or analytics cookies and do not track you on other websites.

Why we use data

• to save your workouts and show history, records and statistics;
• to let you sign in, confirm your email and reset your password;
• to protect the service from break-ins and abuse.

We do not sell your data, show ads, or share data for advertising.

Who receives data

Data is processed only by the providers the service cannot run without:

• Supabase — database and sign-in; storage region: eu-west-3, Paris;
• Google Cloud — application servers; region: europe-west9, Paris;
• Resend — email confirmation and password reset messages.

Servers may be located outside Kazakhstan.

How long we keep data

For as long as you have an account. When you delete your account, the data is deleted immediately and disappears from database backups within 7 days. Service logs are kept for up to 30 days.

Your rights

• See your data — everything we keep about your training is visible in the app.
• Correct it — any entry can be edited in the app.
• Delete everything — Me → Settings → Delete account removes your workouts, plans, body weight, profile and the account itself.
• Get a copy or ask a question — write to support@example.com; we reply within 30 days.

Security

Connections use HTTPS. Every data request is checked against your sign-in token, and each user sees only their own records. No storage is perfectly secure, but we fix vulnerabilities we find as quickly as we can.

Age

The service is intended for people aged 16 and over.

Changes

The date of the latest version is shown at the top. We will announce material changes in the app or by email before they take effect.