Legal
Privacy policy
On this page
Who is responsible
The controller of your data is Óli Birgir Birgisson, Akureyri, Iceland. Contact: hello@vireta.is.
The short version
- Your account and training data are stored on our server, so they follow you to a new phone.
- Your progress photos stay on your phone. They are never uploaded.
- Your health answers go to our server only if you agree. If you do not, they stay on your phone.
- Apple Health and Health Connect data is never used for analytics or ads.
- Usage counts are anonymous and you can switch them off.
- You can export your data and delete your account in the app.
What we store and why
| Data | Where | Why |
|---|---|---|
| Email address and password (sign-in) | Our server (Supabase Auth) | To give you an account and let you sign in. |
| Profile and setup answers: goals, experience, time per workout, equipment, units, safety preferences | Our server | To build and adjust your plan. |
| Plans, workouts, sets, points, and weigh-ins you log | Our server. A workout in progress or not yet synced is also kept on your phone. | To run the app and show your progress. |
| Health answers (the screening questions in the plan builder) | Our server, in a separate table, only if you tick the consent box. Otherwise on your phone only. | To keep your plan safe for you. Only you can see them. |
| Progress photos | Your phone only | For you to compare over time. |
| Weight, height and workouts via Apple Health or Health Connect (optional) | Read from and written to your phone's health store. Weight you let us read appears in your weigh-ins and is saved with them. | To fill your weight log and save your finished workouts there. |
| Feedback you send in the app | Our server, linked to your account | To improve the app. |
| Subscription status | Our server and RevenueCat | To unlock the app when you have a trial or a subscription. |
| Anonymous usage counts | Our server | To see which features are used. |
Each account's rows can only be read by that account. The database enforces this with row-level security.
Legal bases (GDPR): the contract with you for your account, plan, workouts and subscription (Art. 6(1)(b)); your explicit consent for health answers (Art. 9(2)(a)), which you can withdraw by deleting them; your consent for optional Apple Health and Health Connect access.
Photos
Progress photos are taken and kept on your phone. The app does not upload them and does not send them to any server. If you delete the account or the app, they are removed from the phone with the app's data.
Health data
Health answers. The plan builder asks a few safety questions (for example about pain, pregnancy, age band and falls). We store the answers as simple choices, not typed text. If you agree, they are saved to your account so they follow you across devices. If you do not agree, they stay on your phone and your plan is built more cautiously. You can change or delete them in the app.
Apple Health and Health Connect. This is optional. If you connect, Vireta reads your body weight, and your height only when you tap to ask for it. Vireta writes your finished workouts to it as strength training, without calories. Vireta reads nothing else. You can stop at any time and remove access in your phone's settings.
Health data is never used for advertising, never sold and never sent to analytics.
Usage counts (analytics)
The app sends anonymous event counts: app opened, signed up, onboarding completed, workout started, completed or discarded, plan saved, reminders changed, workout shared, data exported, account deleted. Each event has only its name, a few small values, your platform (iOS, Android or web) and the app version. It has no user id, device id, email, body data or photos. The app blocks health values from these events.
You can turn this off in Profile › Your data and privacy. This website uses no cookies and no analytics.
What stays on your phone
Workout reminders are local notifications scheduled on your phone. Voice cues use your phone's own speech feature. Reminder times, workout settings and a workout in progress are kept on the phone.
Subscriptions
You pay through the App Store or Google Play. They handle your payment details, and we never see your card number. We use RevenueCat to check purchases. RevenueCat identifies you by your Vireta account id and receives your purchase information from the store. When a purchase changes, RevenueCat tells our server, which saves whether your access is active and until when.
Who receives data
- Supabase, our database and sign-in provider. Region: Ireland.
- RevenueCat, for subscriptions. It stores data in the United States; transfers outside the EEA are covered by the EU Standard Contractual Clauses.
- Apple and Google, for the store and for Apple Health or Health Connect on your phone.
- Cloudflare, which hosts this website and may log requests, such as IP address, to deliver pages.
We do not sell your data and do not use it for advertising.
How long we keep it
Account data is kept until you delete your account. Anonymous usage counts are not tied to you.
Delete your account
Go to Profile › Account › Delete account, and type DELETE to confirm. This deletes your account and everything stored with it on the server: your profile, goals, equipment, weigh-ins, workouts, sets, plans, points, health answers and feedback. The app then clears what is only on your phone: photos, a workout in progress, the health connection, drafts, settings, reminders and cached data. Anonymous usage counts have no link to you and stay. Deleting your account does not cancel a subscription. Cancel it in the App Store or Google Play (see support).
Your rights
Iceland is in the EEA, so the GDPR applies, with the Icelandic Act No. 90/2018. You have the right to access your data, correct it, delete it, restrict or object to its use, and receive a copy in a portable form. You can export workouts and weigh-ins in the app (Profile › Your data and privacy). For anything else, write to hello@vireta.is.
You can complain to the Icelandic Data Protection Authority, Persónuvernd: www.personuvernd.is.
Age
Vireta is for people aged 18 and over. You confirm this when you sign up.
Changes
If this policy changes in a way that matters, we will tell you in the app or by email before it applies.