Privacy policy

Who we are

The data controller for the Athlxpro app and for athlxpro.com is:

Athlxpro (CVR 46848942), a personally owned small business registered in Denmark
Houmannsgade 49, 3. sal
8700 Horsens, Denmark
Email: hello@athlxpro.com

This policy covers the Athlxpro app for iPhone and Apple Watch and this website. This website sets no cookies.

In short

• Your account, training, food and body data are stored in your account so they follow you to a new phone. Only you can see them in the app. The providers listed below process them for us, only to run the service.
• Apple Health data is read on your phone. Parts of it reach our servers only as part of your own training log (weight, imported workouts, heart rate in runs), and reach Google Gemini only when you switch Alex on.
• Apple Health data is never used for advertising and never sold. We do not sell any data, we do not show ads, and we do not track you across other apps or websites.
• You can export everything and delete your account from inside the app.

What we collect, and why

Account

When you sign up with email and password, Google or Apple, we store your email address and first name (and your full name if Apple or Google provides it) in Firebase Authentication, with a random user id. Your email is used to sign you in, to reset your password and to answer you when you write to us. Your public profile holds a display name, a nickname, a short bio and an optional avatar picture. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

Profile and plan

Sex, birth date, height, current and target weight, training goal, experience, training days, where you train, focus area, injuries or discomforts, and, if you enter them, the start date and length of your menstrual cycle. These set your program, your nutrition targets and your heart rate zones. They are stored in your private account space, readable only by you. Legal basis: your explicit consent to process health data (Art. 9(2)(a) GDPR), which you give when you enter them and can withdraw by deleting them or your account.

Training, runs, food and body measurements

Workouts with every set, weight and rep, how each exercise felt, records, programs and custom workouts, runs with their route (every GPS point), distance, pace, heart rate and heart rate zones, daily and morning check-ins, breathing sessions, challenges, habits, weight entries, body measurements, water, manual sleep nights, supplements, and the food diary with favorites, meal templates and scanned products. All of it is stored in your private account space so it survives a new phone. Legal basis: the contract with you, and your explicit consent for the health data among it.

Apple Health

With your permission the app reads from Apple Health: steps, active energy, heart rate, resting heart rate, heart rate variability, walking heart rate, exercise minutes, VO2 max, walking, running and cycling distance, workouts and workout routes, sleep, body weight and date of birth. The Apple Watch app reads heart rate, active energy, distance, resting heart rate, steps and date of birth. The app writes to Apple Health: workouts, heart rate, active energy, distance and routes recorded on the watch, and body weight you log on the phone.

Most Health data is used on the device only: the Today screen and the Heart, Sleep and Steps pages. Some of it becomes part of your own training log and is stored in your account like the rest of it: weights read from Health are merged into your weight history; workouts imported from Health (for example a run recorded by another app) are stored in your history with their route and heart rate; and a few awards (good sleep, heart rate weeks) are computed from Health data. Apple Health data is never used for advertising, never used for marketing and never sold. It is sent to Google Gemini only through Alex, and only after you consent (see Alex below). Legal basis: your explicit consent, given in Apple's Health permission screen and withdrawable there at any time.

Heart rate and sleep

Heart rate comes from Apple Health and, during a session, from the Apple Watch. Heart rate recorded during your own runs and sessions (average, highest and time in each zone) is stored with them in your account. Sleep comes from Apple Health, or from nights you enter yourself; nights you enter are stored in your account. Legal basis: your explicit consent.

Photos

• Progress photos and weekly check-ins stay on your phone only. They are never uploaded.
• Post images are uploaded to our file storage and can be seen by other signed-in users (see Community).
• Your avatar is stored as a small picture in your public profile.
• Food photos are sent to Google Gemini to read what is on the plate. They are not stored on our servers.

Legal basis: the contract with you.

Location

Only while you record an outdoor run on the phone or the watch, with "while using" permission, to measure distance, pace and the route. Location updates continue in the background during the run and stop when you end it. Routes are stored with the run in your account and, from the watch, in Apple Health. Maps are drawn with Apple MapKit. A route stored with your heart rate is health data, so the legal basis is your explicit consent (Art. 9(2)(a) GDPR), the same as for heart rate.

Community

If you post, we store the post, its caption, image, likes, comments, who you follow and who follows you, who you block, saved posts, reports you file and notifications about your posts. Your display name, nickname, bio, avatar, follower lists, earned awards (if you show them) and shared workout summaries (if "Share my workouts" is on) can be seen by other signed-in users. Posts are reviewed before they appear: images are checked by Google Cloud Vision SafeSearch and captions and comments against a word list. Comment moderation may use Google's Perspective API, which receives the text of the caption or comment only. Legal basis: the contract with you, and our legitimate interest in keeping the community safe (Art. 6(1)(f) GDPR).

Alex, the AI coach

Alex answers through our Cloud Function, which calls Google's Gemini API (models gemini-2.5-flash and gemini-2.0-flash). Nothing personal is sent until you turn Alex on in the app, where the consent sheet lists exactly what will be shared. With your consent each message carries, besides the message itself and the last 20 turns of the conversation: your first name, goal, training days, experience, where you train, focus area, weight, target weight, height, units, injuries or discomforts, nutrition targets and today's food log, water, steps, heart rate (latest, resting, lowest and highest), sleep, challenges, weight trend, habits, your workouts and lifts with weights, records, program and supplements. Not sent: cycle data, date of birth, sex and email.

What stays on your iPhone: the chat history itself. We do not store your messages or Alex's replies on our servers. We log only the technical status of failed requests, never the message. Usage counters (12 messages an hour, 40 a day; 10 photos an hour, 30 a day) are kept under your user id and deleted with your account. The function that talks to Gemini runs in Google's us-central1 region in the United States (see transfers). We use Google's paid Gemini API tier, so prompts sent to Google's Gemini API are not used to improve Google's products. You can withdraw consent at any time in Settings; from then on Alex receives nothing but your messages and the conversation. Legal basis: your explicit consent.

Subscription

You buy and manage the subscription through Apple. Apple handles your payment details; we never see your card or billing address. When you subscribe, restore a purchase or Apple tells us about a change (a renewal, a cancellation, a refund), our server checks Apple's signed record and stores in your account: the plan (monthly or yearly), the status (for example trial, active, expired or refunded), when access ends, whether it renews automatically, Apple's transaction IDs for the purchase, whether it was a test or a real purchase, and the type of Apple's last notice. This links the purchase to your account so the app can unlock, and so that Alex and food photo reading are only used by subscribers. Your iPhone also sets an anonymous account token on the purchase, derived from your user id, so a purchase cannot be moved to someone else's account. Legal basis: the contract with you.

Newsletter and launch note

If you turn on the newsletter in onboarding or Settings, your email address is sent to MailerLite, which sends you a confirmation email first (double opt-in). We record when and where you consented and the exact text you saw. Only your email goes to MailerLite, no name and no training data. Unsubscribe with the switch in the app or the link in any email. Legal basis: consent.

If you leave your email on athlxpro.com to get a note on launch day, it goes to MailerLite, which sends you a confirmation email first (double opt-in). You are only added after you confirm. MailerLite records the time and IP address of the sign-up and of the confirmation, as proof of your consent. We use the address for the email that says the app is live. Unsubscribe with the link in any email, or write to hello@athlxpro.com. Legal basis: consent.

Push notifications

If you allow notifications, a device token from Apple and Firebase Cloud Messaging is stored under your account and removed when you sign out. We send pushes for mentions, comments, likes, new followers and moderation decisions; each type can be switched off in Settings. Reminders (weigh-in, water, meals, recovery week, training) are scheduled on your phone and never leave it. Legal basis: the contract with you, and your permission in iOS.

Barcodes and food search

Scanning a barcode or searching Open Food Facts sends the barcode or search text from your phone directly to Open Food Facts (world.openfoodfacts.org), which sees your IP address. Text searches in the wider food database go from our server to Spoonacular; only the search text is sent, never your identity. Legal basis: the contract with you.

Spotify and Apple Music

If you connect Spotify, the app uses Spotify's SDK to show what is playing and to play or skip. The token stays in the SDK on your phone. Apple Music now playing is read on the device.

Sharing to Instagram

A share card is rendered on your phone and handed to Instagram only when you tap Share to Instagram Stories. If the card includes a run, it may show the route.

This website

athlxpro.com is served by Firebase Hosting and sets no cookies. Firebase Hosting delivers the pages. We have not switched on request logging for the website, so we keep no log of your visits; Google processes your IP address only to deliver the page and protect the service.

Website analytics

We use Cloudflare Web Analytics to count visits to athlxpro.com. It sets no cookies and does not track visitors across sites. It measures page views, the referring site, the country, the browser and device type, and how fast pages load. When a page loads, your browser sends a small request to Cloudflare; it includes your IP address, which Cloudflare uses only to work out the country and does not store for analytics. Cloudflare, Inc. processes this data for us, under the EU-US Data Privacy Framework or standard contractual clauses. The statistics run only on athlxpro.com. The app itself still contains no analytics SDK. Legal basis: our legitimate interest in knowing which pages are read.

App integrity

Firebase App Check (Apple App Attest or DeviceCheck) confirms that requests come from a genuine copy of the app. It sends Apple's attestation, not personal data. Legal basis: our legitimate interest in protecting the service.

What we do not do

• No advertising, no ad identifiers, no tracking across apps or sites. The app contains no analytics or crash-reporting SDK.
• No selling or renting of your data, ever. Apple Health data is never used for advertising.
• No cookies on this website, and nothing that tracks you across sites. The only script from outside is Cloudflare's cookieless visit counter, described above.

Who processes the data for us

Some processors handle data outside the EU: Google Gemini API and the Alex, food photo, food search and subscription functions (United States), Google Cloud Vision, Google Perspective API, Google Sign-In, Spoonacular (United States), Cloudflare and Apple. For each of these transfers the safeguard is standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

• Account and training data: until you delete your account.
• Posts, comments and likes: until you delete them or your account.
• Push tokens: until you sign out or delete your account.
• Alex usage counters: until you delete your account.
• Subscription status and Apple's transaction IDs: until you delete your account. If Apple sends us a notice about a purchase that is not linked to any account (for example after you deleted yours), we keep it with the status and transaction IDs but no link to a person, so the purchase can be restored if an account verifies it again. An App Store notice that is not linked to any account is deleted 30 days after Apple's last notice about that purchase.
• Newsletter: until you unsubscribe or delete your account; deletion also tells MailerLite to forget you.
• Backups are kept for up to 30 days, then deleted.
• Server logs: deleted automatically by Google Cloud Logging after 30 days. Some entries contain your user id or a post id, never your messages, posts or health values.
• Reports about you filed by other users: kept for moderation, with user ids only.

When you delete your account

Deleting your account removes your sign-in, everything in your account space, your posts with their images, your comments and likes, your follows in both directions, notifications you caused, reports you filed, your Alex usage counters, your subscription record and its link to your account, and your newsletter subscription. Deleting your account does not cancel the subscription with Apple; cancel it in Settings, Apple Account, Subscriptions. Sign in with Apple access is revoked. The app then erases its copy of your data on that iPhone, including the Alex chat history. What stays: reports about you (ids only), server logs until they expire, and anything Athlxpro wrote to Apple Health, which you can delete in the Health app. Backups are kept for up to 30 days, then deleted. See Delete your account.

Your rights

Under the GDPR you have the right to access your data, to have it corrected, to have it deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. You can withdraw consent at any time without affecting what was done before. Most of this you can do yourself:

• Access and portability: Me, Settings, Export data gives you a PDF, CSV files or Everything (JSON), which includes the data in your account.
• Correction: change your profile, plan and logs in the app.
• Deletion: Me, Settings, Legal & Support, Delete account removes everything in your account from our servers and this phone; backups follow within 30 days. See Delete your account.
• Withdraw a consent without deleting your account:
  • Alex: Me, Settings, Alex, turn off "Share my data with Alex". From your next message Alex receives only your messages and the conversation. What was already sent is not recalled. "Clear conversation" deletes the chat on your iPhone.
  • Apple Health: in the iPhone's Settings, Health, Data Access & Devices, Athlxpro, turn off the types you no longer want to share. When you add a weight you can also turn off "Save to Apple Health".
  • Location for runs: in the iPhone's Settings, Athlxpro, Location.
  • Cycle data: Profile, Cycle syncing, turn off "Use cycle syncing" and save. This clears the stored cycle dates.
  • Injuries and discomforts: edit them, or choose "No discomforts", in your training plan setup.
  • Newsletter: Me, Settings, Email, turn off "Get training tips by email".
  • Notifications: Me, Settings, Notifications, per type, or in the iPhone's settings.
  • Community: Account Privacy lets you limit post visibility to followers, stop showing awards, and turn off "Share my workouts", which also removes the workout summaries already shared.
  • Single entries: delete a workout, a run you recorded, a food entry or a weight entry where it is listed. Body measurements cannot be deleted one by one yet; they are deleted with your account.

For anything else, including objection, write to hello@athlxpro.com. We answer within two working days and complete requests within 30 days.

You can complain to the Danish Data Protection Agency, Datatilsynet, at www.datatilsynet.dk, or to the authority where you live.

Children

Athlxpro is for people aged 16 and over. If you believe a child under 16 has an account, write to us and we will delete it.

Security

Data travels encrypted (TLS) and is stored encrypted at rest by Google. Access rules on our database make your private data readable only by your signed-in account. Our server functions for Alex and food search accept requests only from genuine copies of the app. Deleting your account requires a fresh sign-in.

Changes

When this policy changes we update the date at the top. Changes that matter are changes to what we collect, why we collect it, or who we share it with. We tell you about those in the app or by email before they apply.