Privacy
Privacy Policy
Short and without legal jargon: what we store, why, and how to delete it.
In short
- Without an account, your data stays on your phone only.
- No ads. We do not sell your data or use it for profiling.
- AI receives your data only when you use it yourself.
- You can delete your account and all cloud data with one button in the app.
Contents
1Who is responsible for your data
The data controller is Sebastian Nowacki, ul. Lipnowska 26, 87-617 Bobrowniki, Poland.
Privacy contact: support@getares.app or in the app: Profile and settings › Report a problem or idea.
2Using the app without an account
Without an account, plans, workouts, measurements and settings are stored only on your phone or in your browser. We do not send them anywhere.
Set videos always stay on your phone, even with an account.
3What data we collect and why
Account
Email, password (stored as a hash), username, profile photo. With Google sign-in: email and Google account ID. Used for signing in.
Contract · Art. 6(1)(b) GDPRWorkouts and plans
Plans, workouts, sets, notes, body measurements and settings. Used for cloud backup and sync between devices.
ContractHealth (Health Connect, Apple Health)
Reading body weight and heart rate, writing finished workouts. Only with your permission in the system, only to show this data with your workouts and save workouts to your health app.
Explicit consent · Art. 9(2)(a) GDPRAI features
The contents of your question and selected training data shared on request. Workout reviews and follow-up blocks use recorded results. In AI Coach you can share your plan and recent workouts. Ares Prime also lets you share a summary of your history, records and measurements. Your “Coach notes about you” (up to 500 characters, in your profile) are sent to AI Coach together with that data; the coach may suggest adding a sentence, but it is saved only after you tap “Save”, and you can edit or delete the note at any time. We don't store the contents of AI questions and answers, only technical data (feature, model, token count, cost, response time). When you tap “Show a coach” in a conversation, Ares coaches see that question and answer, without shared data and without knowing who asked. They may send you a correction, and corrected answers teach AI Coach.
ContractCommunity and coach
Plans you share publicly, conversations and reports with your coach.
ContractAres Prime
Ares Prime end date, its source (trial, purchase, grant) and whether the trial was used. Used to turn on Ares Prime extras. The Ares Prime badge appears next to public plans.
ContractBug reports
Report content, app version, phone model. Used to fix bugs.
Legitimate interest · Art. 6(1)(f) GDPRAnonymous statistics
Which screens are opened and a random install ID. No account, no content. Turn them off in Profile and settings › Anonymous statistics.
Legitimate interestTo prevent people from bypassing AI limits, we may store daily hashes of the network address and account identifier when new accounts use AI. The counter removes previous hashes on the first AI request of a new day.
We do not share Health Connect or Apple Health data with third parties and do not use it for advertising. We store it only in your account (section 4).
4Who processes data on our behalf
- Supabase: database, sign-in and files. Stores account data and the cloud backup.
- proxycheck.io receives the IP address to check for VPN, proxy or Tor connections when you use AI or send a question to a coach. The result may be used for up to 30 minutes and is stored with a hash of the IP address.
- Brevo: sends emails with sign-in codes. Receives only your email address.
- RevenueCat, Google Play and the App Store handle subscriptions. RevenueCat receives your Ares account identifier and purchase information needed to enable Ares Prime.
- Anthropic, OpenAI, OpenRouter: AI providers. They receive the content of your request when you use AI, without your email or name. Under their terms, API data is not used to train models.
- Expo: delivers app updates. Receives technical device data, no workout data.
- Google: only if you sign in with Google.
Some of these companies operate outside the European Economic Area. Transfers are based on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
5How long we keep data
- Account data and workouts: until you delete your account.
- AI requests: technical data at most 90 days, content shown to a coach at most 30 days, and immediately when you delete your account. Coach corrections: until you delete your account.
- Bug reports: until resolved.
- Anonymous statistics: at most 365 days.
- Database backups: removed no later than 30 days after account deletion.
6Deleting your account and data
In the app: Profile and settings › Account and cloud › Delete account. Your account and all cloud data are deleted immediately and permanently.
Delete data on your phone in Profile and settings › Delete all data or by uninstalling the app.
No access to the app? Email support@getares.app from your account's email address.
7Your rights
You have the right to access, correct, delete, restrict and port your data (export: Profile and settings › Export). You can object and withdraw consent at any time. Health permissions can be turned off in your phone's settings.
You can also lodge a complaint with the Polish data protection authority, UODO (uodo.gov.pl), or the authority in your country.
8Security
Connections are encrypted (HTTPS). Each account can see only its own data, enforced by database access rules. Passwords are stored only as a hash, never in plain text.
9Age
You must be at least 16 years old to create an account.
10Changes
We will announce important changes in the app, under What's new. The current version is always on this page.