Privacy Policy

The Service collects the following, and no more than this:

• Required: email address (provided through Supabase auth)
• Usage records: workout data, workout stats, streak information
• App usage records (analytics): how far you get in the Service, recorded as analytics events: after sign-in, steps such as signing in, finishing onboarding, starting or logging a workout, starting the live coach, viewing the paywall, starting a trial or subscribing, and, before sign-in, that the app was opened, the welcome screen was shown, and a sign-in attempt was started or failed. Before you sign in, the app also makes a random install identifier on the device; it is not derived from your account information, it survives signing out, and at sign-up or sign-in it is linked to your account so the steps from before the account can be counted with the ones after it. These records carry no personal content, only small identifiers and counts such as an event name, an app version, a platform, a sign-in method, a plan identifier or a minutes count, never an email, a name, or anything you typed. Records made before you sign in are capped at 200 rows per install per day. We use these records only to see where people stop and to fix the Service. They are not used for advertising, are not combined with data from other companies, and are not sold or shared; they are kept in our own database. Records linked to your account are deleted when you delete the account. Records made before sign-in are deleted 12 months after they are made.
• Optional: profile information (nickname, goals)
• Profile photo: stored only if you upload one; served from a public URL and shown to your partner
• AI Coach conversations: what you type to the coach and the training plan at that moment (see Section 6)
• Apple Health: read only if you connect it — workout type, start time, and duration, plus heart rate and active energy measured by Apple Watch (see Section 8)

Collected personal data is used only for the following purposes:

• Member identification and authentication
• Providing and maintaining the Service
• Storing workout records and providing stats
• Streak and progress tracking
• Improving the Service and building new features

Member personal data is kept for as long as you use the Service and destroyed immediately on account closure, except where law requires longer retention, in which case it is kept for the period the law sets.

• Records of contracts or withdrawal of subscription: 5 years
• Records of consumer complaints or dispute handling: 3 years

Information entered by members is destroyed without delay once its purpose is fulfilled. The procedure and method are as follows:

• Procedure: destroyed immediately after account closure
• Method: electronic files are permanently deleted, paper records are shredded

As a rule, the Service does not share member personal data with anyone outside it. The exceptions are:

• The member consented in advance
• A law specifically requires it
• A lawful request from investigative authorities

To run the Service, personal data processing is entrusted as follows:

• Supabase: database hosting and authentication
• Vercel: web application deployment and hosting
• z.ai (operated by JINGSHENG HENGXING TECHNOLOGY PTE. LTD., Singapore): the AI Coach (GLM models), reading photos, and generating workouts. For the coach chat it receives: what you type and the recent conversation; your next two weeks of training and your recently completed workouts, current streak and eight-week training trend; the meals you logged in the last three days (in a linked partnership, your partner's logged meals as well); your current and target body weight; what you asked the coach to remember (for example an injury or a goal); your coaching-style setting; the city and kind of place if you share your location with the coach; and, where a watch measured your last session, a one-line summary of its heart rate. When you scan or attach a photo it receives the photo (a meal, a nutrition label, a photo of you for a form check, or a piece of equipment) and any correction you type. To generate a workout it receives your recent saved workouts (in a linked partnership, the shared ones). Your name, email, member identifier and profile photo are not sent. z.ai states that it does not store the content sent through its API and processes it in Singapore.
• OpenAI (United States): three uses. First, the fallback for everything listed for z.ai above, with the same data, when z.ai does not answer. Second, the live voice coach: while you are in a live coaching session, your voice is sent as audio so the coach can hear and answer you, together with today's session (exercises, sets, weights and your progress through them) and, when you have allowed Apple Health access, your current heart rate and training zone. A one-way scrambled form of your member identifier is sent with each live session so OpenAI can detect abuse; it cannot be turned back into your account. Third, the coach's spoken cues: the text of a cue (an exercise name, a rep count, a weight) is turned into speech. OpenAI states that data sent through its API is not used to train its models, that abuse-monitoring logs are kept for up to 30 days, and that a voice session's state is kept for about an hour.
• Resend: email delivery: mail you send to support@ is received and forwarded through Resend, and service replies are sent through it.
• RevenueCat: processing App Store purchases. It receives only your member identifier — not your name or email.

The AI, voice, and email entrustments above are transfers of personal data overseas. If you do not use the AI Coach, live voice sessions, or contact support, nothing is transferred overseas.

If you upload a profile photo it is stored in a public bucket and served from a public URL, so it can be viewed by anyone who has that URL. It is shown to partners you link with.

If you connect Apple Health, the Service reads the type, start time, and duration of workouts recorded on that date, along with average heart rate, maximum heart rate, and active energy where measured by Apple Watch. The Service does not write anything back to Apple Health.

Only what you choose to log is stored, and it is used solely to record that a workout was completed and how hard it was, so the training plan can be adjusted. Health data is never used for advertising or marketing, never sold, and never data-mined. It leaves the app in two cases only. If you ask the AI Coach about a session your watch measured, a one-line summary of that session's heart rate (its average, its peak, and how long you spent in each zone) is sent with your question to the AI provider behind the coach (z.ai, or OpenAI as the fallback), so the coach can answer about the effort rather than only the exercises. During a live voice coaching session, your current heart rate and zone are sent to OpenAI so the voice coach can pace you. Nothing else from Health is sent, and nothing is sent unless you write to the coach or start a live session.

You may decline the connection, and after connecting you can revoke it at any time in iOS Settings › Health › Data Access & Devices. Records already stored are destroyed when you delete your account.

You may view or correct your personal data at any time, and may stop using the Service or close your account to request that your data be destroyed.

The Service takes the following measures to keep personal data safe:

• Technical: encryption, access control, security software
• Physical: access control and authorized entry
• Administrative: staff training, a designated officer

The Service designates a privacy officer to protect member personal data and handle related complaints.

Contact: support@awod.website

This Privacy Policy may change per applicable law or internal policy; changes are announced within the Service or notified to members.