Privacy Policy
Your data, plainly accounted for.
This policy explains exactly what the Ignea Gym iOS app collects, why we collect it, where it's stored, who else processes it, and the controls you have — including deleting your account from inside the app.
Effective date: 17 June 2026
Last updated: 17 June 2026
App: Ignea Gym for iOS (bundle ai.ignea.gym)
01Who we are
Ignea Gym is a workout-logging app for iPhone. You choose your program and set your own loads; the app opens each machine to your numbers, logs what you do hands-free, and an AI coach speaks short motivational cues to keep you moving. The app is built and operated by the Ignea team (Qubites). When this policy says "we," "us," or "the app," it means Ignea Gym and the people who run it.
If you have any privacy question, you can always reach a human at [email protected].
02The short version
- We give every install a private account so your workouts can sync and come back on a new phone. This happens automatically on first launch, even before you sign in.
- If you want your data to follow you across devices, you can verify a phone number with a one-time SMS code. That's the only contact detail we ask for, and it's optional.
- Once you have an account, your workout history, profile, injuries, and saved routines are stored in our backend (Supabase) so they survive reinstalls and sync across your devices. If you use the app as a guest, your workouts are saved only on your iPhone and are not uploaded to our backend.
- Voice commands are transcribed entirely on your iPhone. Your microphone audio and its transcript never leave the device and are never stored by us.
- The camera is used only to scan a machine's QR code. Frames are processed live on-device and no images are saved or uploaded.
- We use a few trusted processors to make the app work: Supabase (backend & storage), Anthropic (the AI coach's text), ElevenLabs (turning that text into spoken audio), and Twilio (sending the SMS sign-in code).
- We do not sell your data, we do not show third-party ads, and we do not track you across other companies' apps or websites.
- You can delete your account and all of its data from inside the app at any time: Settings → Delete account.
03What we collect, and why
The table below is the complete inventory. The Cloud tag means it's stored in our backend and tied to your account. On-device means it is processed on your iPhone and is not sent to us. Processor means it is sent to a third-party service to perform a specific task.
| Data | Why we use it | Where it goes |
|---|---|---|
| Phone number (optional) | To verify your account with a one-time SMS code so your data can rehydrate on any device. You can use the app without this. | Cloud Processor |
| Account identifier | A random anonymous ID created on first launch. It's the key every other piece of your data hangs off. It is not your name, email, or phone number. | Cloud |
| Fitness profile | Your goal, experience level, days per week, session length, units (kg/lb), and training mode — used to plan and personalize your program. | Cloud |
| Injury / limitation data (health) | Optional body-area limitations (e.g. "Knee, 70% function") and the timestamp you accepted the fitness-liability notice. Used to suggest lighter starting weights around areas you've flagged (you always set the final load). | Cloud |
| Workout history (health & fitness) | Sessions, strength sets (weights, reps, rest, personal records) and cardio blocks (duration, distance, self-entered heart rate, speed, incline, perceived exertion). Used to log your work and show your progress over time. | Cloud |
| Saved routines | Custom training programs you build or save — names, day/block structure, machines, set/rep schemes, and your free-text notes. | Cloud |
| Coaching "memory" | A derived model (your bests, weekly volume, adherence, trends, and which routine you're on) so you can see your trends and the app can show your past numbers when you return to a machine. | Cloud |
| Microphone audio | Hands-free voice commands during a workout ("start", "break", "finish", weight changes). Transcribed on-device; audio is never stored or uploaded. | On-device |
| Speech transcripts | The text of your voice commands, matched against keywords on-device using Apple's Speech framework. Never stored, never leaves your iPhone. | On-device |
| Camera frames | Scanning a machine's QR code to log or advance your workout. Frames are decoded live on-device; no image is saved or transmitted. | On-device |
| Workout context for AI coaching | Non-identifying details about the current session (machine names, set/rep numbers, a summary, your goal, language) sent to generate the coach's short spoken motivational lines. | Processor |
| Coach text for speech | The coach's line plus a language code, sent to synthesize spoken audio. Falls back to your iPhone's built-in voice when offline. | Processor |
| Language & locale | To localize coaching replies and the interface (currently English / Spanish). | On-device |
| Shared summary cards | If you choose to share a workout card, it's rendered on your device and handed to the iOS share sheet. You pick where it goes; the app itself sends nothing. | On-device |
We don't collect: your name, email address, location, contacts, photos library, advertising identifier, or any cross-app tracking data. We do not read Apple Health / HealthKit — any heart-rate or exertion value in your log is one you entered yourself.
04An account is created automatically
So that your workouts can sync and survive a reinstall, the app creates a private, anonymous account the first time you open it — before any sign-in and even if you only ever use it as a guest. This account is just a random identifier; it does not contain your name, email, or phone number, and it isn't shared with anyone.
Verifying a phone number is optional and is the only step that ties your account to a real-world contact detail. We use that number solely to send your one-time sign-in code and to recognize you when you sign in on another device. Your phone number is stored only in our authentication system (Supabase Auth) — it is never written into your workout or profile records.
05Where your data is stored
Once you have an account, your profile, injuries, workout history, and routines are stored in our backend database hosted by Supabase in the European Union (Ireland, eu-west-1 region). Access is restricted so each account can only read and write its own rows. Guest mode: if you haven't verified a phone number, your account is anonymous and your workouts live only on your iPhone — they aren't uploaded to or synced through our backend until you create an account.
A small amount of state also lives locally on your iPhone — your current workout, your history cache, your saved routines, your preferences, and your secure sign-in token — so the app works smoothly and offline. Voice and camera processing happen entirely on-device and are covered above.
06The processors we rely on
We use a short list of third-party services ("processors") to operate the app. Each receives only what it needs for its specific job, and each is bound by its own privacy and security commitments.
Supabase — backend & storage
Hosts our database and handles authentication (the anonymous account and the optional phone sign-in). Stores your account, profile, injury data, workout history, and routines, and holds your phone number in its authentication records. Region: EU (Ireland).
Anthropic — AI coach text
Generates the coach's short spoken motivational lines and cues. When you train, the app sends a non-identifying workout-context payload (machine names, set/rep numbers, a session summary, your goal, and language) to our server, which calls Anthropic. We don't send your name, phone number, or injury details for this. The request is associated with your account so the coaching can be personalized, but Anthropic does not receive your contact information.
ElevenLabs — text-to-speech
Turns the coach's text line into spoken audio. It receives only the line of text to speak and a language code. If this service is unavailable, your iPhone's built-in voice reads the line instead.
Twilio — SMS delivery
Delivers the one-time sign-in code to your phone, when you choose to verify a phone number. Twilio receives your phone number for the sole purpose of sending that message.
Apple — on your device
The app uses Apple's on-device frameworks for speech transcription, camera/QR decoding, the fallback text-to-speech voice, and the system share sheet. These run on your iPhone; Apple does not receive your workout content from us through them.
We do not sell or rent your personal data, and we do not share it with advertising networks or data brokers.
07How long we keep it
We keep your account data for as long as your account exists, so your history and progress stay available to you. On-device data persists on your iPhone until you delete the app or clear its data.
When you delete your account (see below), we remove your associated records from our backend. Deletion is immediate and permanent; we cannot recover deleted data. Some processors may retain operational logs for a short period under their own retention policies, but your workout content is removed from our systems.
08Deleting your account
You are in control. You can permanently delete your account and its data from inside the app:
Settings → Delete account
This removes your account identifier, your profile, your injury data, your full workout history, your saved routines, your coaching memory, and your verified phone number from our backend. Sign-out alone does not delete your data — it only ends the session on that device. If you ever need help deleting your account, email [email protected] and we'll handle it for you.
09Your rights
Depending on where you live (for example under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, restrict, or delete the personal data we hold about you, and to object to certain processing. The app gives you direct control over most of this — you can view and edit your profile, injuries, and routines, and delete everything via Settings → Delete account.
To exercise any right we don't yet surface in-app, or to ask a question, contact us at [email protected]. We'll respond within a reasonable time. You also have the right to lodge a complaint with your local data-protection authority.
10Children's privacy
Ignea Gym is not directed to children. It is intended for users aged 16 and over, and you should not use it or provide any information if you are under that age. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact [email protected] and we will delete it.
11Security
Data in transit is protected with encryption (HTTPS/TLS). Backend access is scoped so an account can only reach its own data, and your sign-in token is stored in the iPhone's secure storage. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.
12International transfers
Our database is hosted in the European Union. If you use the app from outside the EU, your data will be transferred to and processed in the EU and by the processors listed above, which may operate in other countries (including the United States). Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
13Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Continued use of Ignea Gym after a change means you accept the updated policy.
14Governing law & contact
This policy is governed by the laws of Norway, without prejudice to mandatory consumer- and data-protection rights you have under the laws of your country of residence. Any disputes will be handled in accordance with applicable law.
For any privacy question, request, or complaint, contact us at [email protected].
Ignea Gym · ai.ignea.gym · Operated by the Ignea team (Qubites)
Privacy questions: [email protected] · Effective 17 June 2026