Privacy Policy

PolFit is a training app that generates personalised workout plans using artificial intelligence. To do that, it needs to know things about your body and your training. This page explains what we collect, why, who we share it with, and how you can delete all of it.

Who is responsible for your data

Antonio José Vera Bravo, data controller.
Contact: info@polfitapp.com

What we collect

Legal basis

• Performance of a contract (Art. 6(1)(b)) to show other users your public profile and the workouts you let them see, which is what Community is, and legitimate interest (Art. 6(1)(f)) to moderate it (photo filter, reports and blocks) and keep it safe. You can hide any workout whenever you like, and switch off visibility for future ones in Settings › Community.
• Performance of a contract (Art. 6(1)(b)) for account data: without it we cannot give you access.
• Explicit consent (Art. 9(2)(a)) for health and fitness data, and for sending it to the artificial intelligence providers that generate your plan.
• Legitimate interest (Art. 6(1)(f)) for technical error-diagnosis data, limited to keeping the service running and secure.
• Legitimate interest (Art. 6(1)(f)) for usage analytics, limited to improving the product and with an opt-out switch available at any time inside the app. Usage data contains no health data: it is navigation and activity milestones, never your profile, your injuries, your weights or your personal records.

Artificial intelligence: what leaves our servers

To generate your plan and analyse your progress, we send your profile and training history to generative artificial intelligence providers acting as data processors on our behalf. This includes your health data. We do not send your name, your email or any account identifier, and from your date of birth we only send your computed age.

We choose providers and API plans whose terms do not contemplate using submitted data to train their models, and we configure our accounts accordingly wherever the provider allows it. Should we find that this no longer holds, or should we switch to a provider or plan without it, we would update this policy and tell you beforehand.

Usage analytics: what we measure and how to turn it off

We use PostHog to understand how the app is used and decide what to improve. The data is processed in the European Union (Frankfurt, Germany) and does not leave the EU.

We measure milestones, not everything you do: the first time you open the app, the steps of the initial questionnaire, whether you complete sign-up, whether a plan is generated, whether you accept it, whether you log a workout — and which number it is — and whether you request a review. These come with the app version, the operating system, the device model and the language. This data is tied to your internal account identifier and to your account email, which PostHog stores as a property of the person so that we can recognise each user in product analytics. We do not send your name.

What we do not do: we do not store your IP address (it is discarded before the data is stored and geolocation is disabled), we do not record your screen or your taps, we do not use advertising identifiers, we do not track you across other apps or websites, and we send no health or training data to analytics: not your weight, not your injuries, not your records, not the contents of your plan.

Community: what other people see about you

Community lets you follow other people and be followed, see their workouts and cheer them on. For that, other people with a PolFit account can see your profile and the workouts you let them see.

What they see

• Your photo (if you set one), your name and your @username.
• Since when you have been on PolFit (month and year you joined).
• Your activity: weekly streak, workouts this month, and totals of workouts and kilos moved. This activity counts all your workouts, including those you do not let others see.
• Who follows you and who you follow: the counts and the lists are public.
• The workouts you let them see, with their name, when you did them, duration, kilos, exercises and sets, and who has cheered them. If you hide a workout, it keeps its cheers in case you show it again.

What they never see

We never show your weight, nor your measurements, your injuries, what your trainer knows about you, your reviews, your plan, your subscription, your goal, or the comments and notes on your workouts.

Who sees your workouts and how to change it

• When you finish each workout, a switch lets you decide whether it is visible (or, if you set your choice in Settings, a line with "Change"). If you turn it off, it is not visible.
• You can change a past workout from its detail in your history, and set your choice for all future ones in Settings › Community (ask me every time, always visible, or never visible).
• You do not exist in Community until you enter and accept its rules. Before that you do not show up in search, cannot be followed and nobody sees your workouts, neither past nor new ones. The first time you enter we tell you and, when you accept, you can hide all your past workouts at once; afterwards you can also hide them one by one from your history.
• If a workout is edited or deleted, what others see is updated or disappears.

Profile photo

The photo is optional. It is stored on Cloudflare, outside our server, and is seen by anyone with a PolFit account; the image is served from a public address that cannot be guessed and that only the app hands out. When you upload it, and before it is stored, it goes through OpenAI's image moderation filter, which receives only the image, with no name or account identifier; if the filter rejects it or does not respond, it is not published. When you change it, the previous one is deleted.

Comments on posts

You can comment on Community posts. We store the comment text, its author, the post it replies to and the date. Before it is published, the text goes through OpenAI's automatic moderation filter, which receives only the text, with no name or account identifier; if the filter rejects it, it is not published; if it does not respond, it is published and reviewed as soon as the filter is available again (and removed if it does not pass). Comments are deleted when you delete your account or the workout they are on.

Blocks and reports

You can block and report other people (their photo, name or @username). We store who reports, whom, the reason, what was reported (the exact photo, the name or the @username), the status and the dates, so we can review it and act. A report is anonymous to the reported person and does not appear on any screen of the app. If you delete your account, your reports stop carrying your identity; if the reported account is deleted, its reports are kept anonymised (without who or which photo: only the kind of thing reported, the reason, the status and the dates) to measure how the feature is used.

Who we share your data with

These are the processors we currently use. We update this list whenever it changes.

We do not sell your data, do not share it with advertisers and do not use it for advertising. Transfers to the United States rely on the European Commission's Standard Contractual Clauses or on the EU-US Data Privacy Framework, depending on the provider.

How long we keep it

We keep your data for as long as you have an account. When you delete it, your profile, plans, sessions and reviews are removed from our database within seconds.

Everything social disappears with it: your profile, your photo (also from the public cache), your posts, your cheers, your follows and your blocks, and other people's counts go down.

How to delete your account

From inside the app: You › Settings (the gear) › Delete account. It is immediate and irreversible: there is no grace period and no way to recover it.

If you cannot access your account, email us at info@polfitapp.com from the address you registered with. More detail on the data deletion page.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by emailing info@polfitapp.com. We respond within one month.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency.

Minimum age

PolFit is intended for people over 16 years old. We do not knowingly collect data from anyone younger. If we find an account belonging to someone under 16, we delete it.

Medical disclaimer

Changes to this policy

If we change this policy materially, we will tell you by email before the change takes effect. The date of the last update appears at the top of this page.