Privacy Policy

Who we are

Voinic is an independent project run by its developers, not yet by a registered company; when a company takes over running it, it will be named here. For any privacy question or request, contact contact@voinic.fit.

What we store

• Account — email address, display name, avatar, language and unit preferences.
• Training data — programs, logged workouts, sets, weights, personal records.
• Nutrition data — meal plans, food logs and their calorie/macro snapshots.
• Progress data — body weight, measurements, weekly check-ins (sleep, energy, stress, hunger, recovery, notes), and progress photos if you upload them.
• Coaching data — your coach relationship, messages, and coach feedback.
• Engagement data — habits, streaks, badges, and in-app notifications.

Training, nutrition and progress data can reveal information about your health. We store it solely to provide the service to you and your coach — never for advertising, and we do not sell it.

Who can see your data

Your data is visible to you and — only while you have an active coaching relationship — to your coach. Access is enforced in the database itself (row-level security), not just in the app. When a coaching relationship ends, the coach loses access to your new data automatically.

Where it lives

Data is stored with Supabase on AWS in the EU (region eu-west-1, Ireland). When you search foods or scan a barcode, the search term or barcode is sent to Open Food Facts to look up nutrition data; no account information is sent with it.

Pictures are stored with Cloudinary. Progress photos and coaches' qualification documents are stored privately and can only be opened through short-lived signed links the app creates for the people allowed to see them. Profile photos and coach cover images are public, because they are shown on your profile.

The app itself is served by Vercel; the parts that run on its servers run in Vercel's Frankfurt (EU) region. If you sign in with Google, Google tells us the email address, name and picture of your Google account. If you turn on rest-timer notifications, your browser gives us an address at its push service (run by the browser's maker, such as Google, Apple or Mozilla); we keep it to send you the "rest finished" notification, whose content is encrypted for your browser.

Asking an AI for feedback

When you finish a workout you can choose to open an AI assistant (ChatGPT, Claude, Gemini, Grok or Perplexity) with a summary of that workout. Nothing is sent until you tap one. The summary — the workout's name and date, the exercises, sets, weights and effort, your notes on the sets, and your sex and age if you have set them, but never your name, username or email — then goes from your device to that service, in the link it opens or when you paste it, and that service handles it under its own terms. Voinic does not receive the answer. The exact text is shown under "See what gets sent" before you tap.

Cookies

We use strictly-necessary cookies: the session cookies that keep you signed in. Because they are essential, they need no consent.

Only if you choose "Accept analytics" do we also use Google Analytics (Google Ireland Ltd.), which sets the _ga cookies, to count visits to our public pages — the home page, the coach directory and coach pages, sign-in, and these legal pages. It never runs inside your account, so no training, nutrition, body or message data ever reaches it. Advertising features are off. Google may process the data in the United States under the EU–US Data Privacy Framework. Nothing is loaded until you accept, and you can change your choice at any time; withdrawing deletes the _ga cookies from this browser.

Coach directory measurement

On the public coach directory and coach pages we count, without cookies and without storing anything on your device, how often pages are viewed and which buttons (contact, book, save, create an account) are used, and where a visit came from (for example a search engine, Instagram or a utm_ link). A visitor is counted as a code computed from that day's random key, your IP address and browser type; the IP address and browser type are never stored, and the key is deleted the next day, so no visitor can be recognised or followed across days. Raw counts are deleted after 180 days. When you create an account from a coach page, we keep which coach page and source it came from, until your account is deleted or for two years. Coaches see only totals about their own page. Nothing is shared with any third party.

Coach applications and qualification documents

A coach profile appears in the directory only after a Voinic administrator has reviewed it. To show their qualifications, coaches upload certificates, diplomas or licences (and optionally other supporting documents, such as a CV). We do not ask for, accept or keep identity documents, and we do not verify identity. Qualification documents are stored privately: only the coach and Voinic's administrators can open them, they never appear on the public page, and they are not shared with anyone else. A coach can remove a document while their application is not under review; documents an approved profile relies on stay while the profile is live. A document that was not accepted, and the documents of an application that was rejected or withdrawn, are deleted after 12 months. All of them are deleted when the account is deleted. The decisions on an application (what was decided, when, and the note to the coach) are kept as a record while the account exists.

Your rights (GDPR)

• Export — download everything we hold about you, from Settings, at any time.
• Deletion — request account deletion in the app. Your profile is anonymised immediately and all data is permanently purged within 30 days.
• Access, rectification, restriction, objection — contact us at the address above.
• You may lodge a complaint with your local data-protection authority.

Retention

Data is kept while your account exists. After a deletion request, remaining data is purged within 30 days. Messages you sent to a coach remain visible to them (with your name removed) so their side of the conversation stays intact.

Changes

If this policy changes in a way that affects you, we will tell you in the app before the change takes effect.