Privacy Policy

This policy describes how we process your personal data in the Strato app (iOS) and on the stratofitness.com website. In short, before we get into the detail: your health data is processed and stored on your iPhone, the artificial-intelligence features are optional and require your explicit consent, and the little that does leave your device is listed, one by one, in section A. This website asks you for no data at all unless you write to us from the support form.

A. The Strato app

A.1 No account, no user database

Strato has no accounts. There is no sign-up, no password and no profile on any server of ours. This is not a technical footnote: with no account there is no login that can be leaked, no password that can be reused and no user database that can be stolen. A breach can only expose what exists on a server, and ours hold no data about your body and nothing that identifies you: the only thing on record is that you accepted the Terms, with a random code that does not come from you (A.5).

This has a practical consequence you should know about: since we keep no copy, if you lose your device, erase it or uninstall the app, your local data is lost and we cannot recover it. Use your iPhone backup if you want to keep it.

A.2 Your health data lives on your iPhone

The original Apple Health readings (heart rate, heart rate variability, sleep, activity, weight…) are processed in the device’s memory and are not written to disk: Apple Health remains the source. What is stored, only on your iPhone and in a local database, are the scores already calculated, the averages used to compare them and what you log yourself (sessions, meals, daily notes). None of this syncs with any server or leaves your device. If you delete the app, it is deleted with it.

The app reads from Apple Health with your permission and, if you authorise it, also writes, always at your request and never in the background: the strength and cardio sessions you complete in Strato — the latter with the distance and, if you choose, the route —, the meals you log and the measurements you record yourself (water, weight and waist circumference). Strato can also delete from Apple Health a workout it wrote itself, if you ask it to. Each write is authorised separately in the Apple Health permission, and the read permission can be withdrawn whenever you want from Settings.

A.3 Data that leaves the device when you use the AI (optional)

Strato includes two artificial-intelligence features that, by their nature, need to send information off your iPhone. Both are optional, both must be turned on by you, and neither is used without your prior explicit consent, which you can withdraw whenever you want.

• Coach. The Coach is an artificial-intelligence system, not a person. Before the first use we ask for your express permission. If you give it, we send a text summary of your derived scores (Readiness, Sleep, Effort, Energy and Tension, on a 0–100 scale, with averages and bands for the last few days), the day status you have declared yourself (for example ‘travelling’, ‘sick’ or ‘injured’), the training goal you have declared in your profile and, if you write one, your question. The original Apple Health readings are not sent, nor are measurement timestamps or any identifier of yours.
• Food identification from a photo. If you use it, the photograph you take is sent to estimate the dish and its calories. The estimate is indicative and editable: the final figure is set by you.

When nothing leaves at all. On devices that have Apple Intelligence, and in a language Apple supports, the Coach thinks on your own iPhone and your question never leaves it. Only when that is not possible is the path described below used. The consent we ask for and the information we give you are the same in both cases, because you should not have to know which of the two you got.

If you ask it for a figure, your phone works it out. When the Coach needs a number of yours to answer you — an average, a comparison between two periods — your own device resolves it with the data it already has. That number is shown on the card you see on screen, but it does not travel to the model provider.

How it travels and who sees it. The request passes through a server function of ours hosted on Supabase (eu-west-1 region, Ireland, European Union) that acts as a mere intermediary: it stores nothing — not the text, not the photo, not logs containing your information — and forwards it to Google’s model (Gemini). Google acts as a data processor and the request is processed on its servers, which may be located outside the European Economic Area; that transfer is covered by the European Commission’s standard contractual clauses. We keep neither your questions, nor the answers, nor the photos.

Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), as this is information concerning your health. You can withdraw it at any time from within the app; from that moment on, nothing more is sent. Retention: none. The exchange is one-off and is not stored.

And an honest warning: the Coach can be wrong. It is an aid for interpreting your own numbers, not a healthcare professional, and it never diagnoses.

A.4 Strava (optional)

If you connect your Strava account, and only when you tap to upload a workout, the session name, sport type, start time and duration are sent to Strava. Your heart rate, weight, sleep and scores are never sent. The upload goes directly from your iPhone to Strava, without passing through our servers. The access keys are stored in your iPhone’s Keychain and are deleted when you disconnect. Strato reads nothing from Strava.

A.5 Record that you accepted the Terms

When you first open Strato you accept the Terms of Use, and a record of that is kept on a server of ours on Supabase (eu-west-1 region, Ireland, European Union). It is the only thing that leaves your device without you having to turn it on, and it is four pieces of data and only four: an installation code — a random number generated on your own device, which is not an account, does not derive from any phone identifier and disappears if you uninstall the app —, the version of the Terms you accepted, the moment you did so and the language your app was in, because the Terms are published in three and we need to know which one you read. No data about your body, no score, no health reading, no name or email address.

Legal basis: performance of the contract and our legitimate interest in being able to evidence the agreement for both parties (Art. 6(1)(b) and 6(1)(f) GDPR). The key the app carries can only add rows: it cannot read, modify or delete. The acceptance that counts is the one stored on your device: if the upload fails, the app works exactly the same and never tells you. Retention: for as long as the relationship lasts and the applicable limitation periods. You can look up your installation code in Profile ▸ Privacy and use it to ask us for access or erasure.

A.6 The weather (Apple Weather)

The weather row, the weather screen and the workout you start with Strato need to know, very roughly, where you are. The only thing that leaves is your position rounded to one decimal degree, about 11 km, and it goes to Apple Weather (WeatherKit), the service your iPhone already carries: the request is made by the operating system on Strato’s behalf and no third party is involved. No identifier of ours is sent, nor the installation code, and the name of the place is resolved by your own phone.

This only happens if you have already granted the location permission: it is never requested here and, without it, the weather row does not exist, the screen does not open and no request is made. What is saved with your workout is the temperature and the sky conditions at that moment, never a coordinate or a place name. Legal basis: legitimate interest in providing the feature you opened (Art. 6(1)(f) GDPR). Retention: the reading is remembered in memory for an hour and then forgotten.

A.7 Location in cardio sessions (optional)

If you record a run, a walk or an outdoor bike ride, Strato uses GPS only while the session is running, to measure distance and pace. The coordinates are not stored in the app and never reach any server of ours: if you choose to save the route, it goes to the Apple Health workout, on your device. Legal basis: your consent, which you give by granting the location permission and can withdraw whenever you want from Settings (Art. 6(1)(a) GDPR).

A.8 Exercise videos (Strato Pro)

Exercises that have one can show a short MuscleWiki video, and this is a Strato Pro feature. To check that you are entitled to watch it, the app asks a server of ours on Supabase (eu-west-1 region, Ireland, European Union), which is what holds the MuscleWiki key; the video then plays directly from MuscleWiki to your phone. This only happens when you open an exercise that has a video: if it has none, or if you do not have Pro, nothing is sent. No data about your body travels: no scores, no workouts, no weight, nothing you have logged. The permission to watch it lasts a quarter of an hour and the video is stored neither on your phone nor on our server. Legal basis: performance of the subscription contract (Art. 6(1)(b) GDPR).

A.9 Menstrual cycle and body-scan photos

Menstrual cycle. If you have cycle data in Apple Health and you grant permission, Strato reads it for the Cycle screen. It is special category data (Art. 9 GDPR) and gets the strictest treatment in the whole app: it does not leave the device through any channel the app decides — not to the Coach, not to analytics, not to the widgets, not to the watch, not to any of the outbound paths described above. The only way it can leave is for you to generate the local export of your data and decide to share it. Strato does not calculate or display a fertile window, nor any prediction for contraceptive or conception purposes. Legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you give by granting the permission in Apple Health and can withdraw whenever you want from Settings.

Body-scan photos. If you use the body scanner, the photos are processed entirely on your device and stored in a private app folder, excluded from the iCloud backup. They do not go to Apple Health, to your photo library, to any server, or into the PDF report. You can delete them whenever you want, and they are deleted along with the rest of your data. To be clear, because the distinction matters: the only photograph that leaves your iPhone is the food identification one described in A.3, and only if you use that feature.

A.10 App analytics (PostHog)

The app uses PostHog (EU Cloud, Frankfurt, Germany, European Union) to learn which screens are opened and which features are used, and to decide what to improve. Legal basis: consent (Art. 6(1)(a) GDPR). It is off by default: unless you turn it on in Profile ▸ Privacy, PostHog does not even start. It is anonymous — no user identifiers and no session recording — and works with a closed list of events that the app’s own Privacy screen lists by reading them from the code. No number of yours ever travels: not a score, not an average, not a weight. This guarantee is technical, not a promise: a guard in the code systematically rejects numeric values.

A.11 Subscription (RevenueCat and Apple)

• RevenueCat (technical management of the subscription). It receives only an anonymous identifier generated by the tool itself and the status of your purchase. It receives no health data, not even derived data.
• Apple (App Store). Billing, renewal, cancellation and refunds are handled by Apple under its own terms and its own privacy policy; we never see your payment method or your billing details.

A.12 The app uses no cookies

The app has no cookies or any equivalent technology: no advertising tracking, no IDFA, no tracking across apps or websites. Cookies are exclusively a matter of this website (section B and the cookie policy).

B. This website

B.1 What data it processes, why, and on what basis

We do not sell your data, we do not use it for advertising and we do not build profiles. This site has no user accounts and its only form is the support one: if you do not write to us, it asks you for nothing. No health data reaches stratofitness.com, our database or the analytics: what leaves your iPhone is what is listed in section A, and none of it passes through this website.

B.2 Website processors and recipients

• Supabase (record of the acceptance of the Terms and the app’s server functions) — eu-west-1 region, Ireland, European Union.
• Netlify (hosting of the website, its server logs and the receipt of the support-form messages).
• Google (Google Analytics 4, only if you accept analytics; and Gemini as the provider of the app’s AI model, only if you turn those features on — section A.3).

When any of these providers processes data outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework, as applicable.

B.3 Retention

This site keeps nothing of yours on its own: there are no accounts and no email collection for announcements. If you write to us from the support form, we keep your email address and your message for as long as it takes to deal with the enquiry and, after that, for the reasonable period needed to evidence that we dealt with it. Server logs are kept for strictly as long as the security and availability of the service require, and the aggregated analytics for as long as you keep them accepted. For any matter you can write to us at hola@somia.digital.

C. Common to the app and the website

C.1 Data controller

Joan Cama Ribot, NIF 41531670H, with address at C/ Sant Joan, 16, 17200 Palafrugell (Girona), Spain. Contact for any privacy matter: hola@somia.digital.

This policy complies with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPD-GDD) and Spanish Law 34/2002 (LSSI-CE). We are not required to appoint a data protection officer (Art. 37 GDPR) and have not appointed one: for any privacy matter, write to hola@somia.digital and the controller will answer you directly.

C.2 Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@somia.digital. You can also withdraw your consent at any time without affecting the lawfulness of the processing carried out beforehand. If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

C.3 Minors

This site and the application are not aimed at anyone under 17, consistent with the age rating of Strato’s App Store listing. We do not knowingly collect data from people below that age; if we find that a user does not meet the minimum age, we may suspend their access.

C.4 Security

We apply technical and organisational measures appropriate to the risk: encryption in transit (TLS), the principle of least privilege and strict minimisation — the best-protected data is the data that is never collected, which is why Strato’s architecture is designed so that your health data never reaches our servers.

C.5 Strato is not a medical product

Strato is a tool for reading and interpreting your training and recovery metrics. It is not a medical device, it does not diagnose or treat health conditions and it does not replace care from healthcare professionals.

C.6 Changes to this policy

If we make substantial changes to this policy, we will announce them on this site before they take effect. The current version will always be published at stratofitness.com/privacy.