Privacy Policy

This policy describes how we process your personal data in the Strato app (iOS) and on the stratofitness.com website. In short, before we get into the detail: your health data is processed and stored on your iPhone, the two artificial-intelligence features are optional and require your explicit consent, and this website only collects your email address if you join the waiting list.

A. The Strato app

A.1 No account, no user database

Strato has no accounts. There is no sign-up, no password and no profile on any server of ours. This is not a technical footnote: with no account there is no login that can be leaked, no password that can be reused and no user database that can be stolen. A breach can only expose what exists on a server, and our servers do not store your data.

This has a practical consequence you should know about: since we keep no copy, if you lose your device, erase it or uninstall the app, your local data is lost and we cannot recover it. Use your iPhone backup if you want to keep it.

A.2 Your health data lives on your iPhone

The original Apple Health readings (heart rate, heart rate variability, sleep, activity, weight…) are processed in the device’s memory and are not written to disk: Apple Health remains the source. What is stored, only on your iPhone and in a local database, are the scores already calculated, the averages used to compare them and what you log yourself (sessions, meals, daily notes). None of this syncs with any server or leaves your device. If you delete the app, it is deleted with it.

The app reads from Apple Health with your permission and, if you authorise it, also writes two things and two things only, always at your request and never in the background: the strength sessions you complete and the meals you log. Each of these writes can be disabled separately within the app, and the read permission can be withdrawn whenever you want from Settings.

A.3 Data that leaves the device when you use the AI (optional)

Strato includes two artificial-intelligence features that, by their nature, need to send information off your iPhone. Both are optional, both must be turned on by you, and neither is used without your prior explicit consent, which you can withdraw whenever you want.

• Coach. The Coach is an artificial-intelligence system, not a person. Before the first use we ask for your express permission. If you give it, we send a text summary of your derived scores (Readiness, Sleep, Effort, Energy and Tension, on a 0–100 scale, with averages and bands for the last few days), the day status you have declared yourself (for example ‘travelling’, ‘sick’ or ‘injured’) and, if you write one, your question. The original Apple Health readings are not sent, nor are measurement timestamps or any identifier of yours.
• Food identification from a photo. If you use it, the photograph you take is sent to estimate the dish and its calories. The estimate is indicative and editable: the final figure is set by you.

How it travels and who sees it. The request passes through a server function of ours hosted on Supabase (servers in the European Union) that acts as a mere intermediary: it stores nothing — not the text, not the photo, not logs containing your information — and forwards it to Google’s model (Gemini). Google acts as a data processor and the request is processed on its servers, which may be located outside the European Economic Area; that transfer is covered by the European Commission’s standard contractual clauses. We keep neither your questions, nor the answers, nor the photos.

Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), as this is information concerning your health. You can withdraw it at any time from within the app; from that moment on, nothing more is sent. Retention: none. The exchange is one-off and is not stored.

And an honest warning: the Coach can be wrong. It is an aid for interpreting your own numbers, not a healthcare professional, and it never diagnoses.

A.4 Strava (optional)

If you connect your Strava account, and only when you tap to upload a workout, the session name, sport type, start time and duration are sent to Strava. Your heart rate, weight, sleep and scores are never sent. The upload goes directly from your iPhone to Strava, without passing through our servers. The access keys are stored in your iPhone’s Keychain and are deleted when you disconnect. Strato reads nothing from Strava.

A.5 App analytics (PostHog)

The app uses PostHog, with servers in the European Union, to learn which screens are opened and which features are used, and to decide what to improve. Legal basis: consent (Art. 6(1)(a) GDPR). It is off by default: unless you turn it on in Profile ▸ Privacy, PostHog does not even start. It is anonymous — no user identifiers and no session recording — and works with a closed list of events that the app’s own Privacy screen lists by reading them from the code. No number of yours ever travels: not a score, not an average, not a weight. This guarantee is technical, not a promise: a guard in the code systematically rejects numeric values.

A.6 Subscription (RevenueCat and Apple)

• RevenueCat (technical management of the subscription). It receives only an anonymous identifier generated by the tool itself and the status of your purchase. It receives no health data, not even derived data.
• Apple (App Store). Billing, renewal, cancellation and refunds are handled by Apple under its own terms and its own privacy policy; we never see your payment method or your billing details.

A.7 The app uses no cookies

The app has no cookies or any equivalent technology: no advertising tracking, no IDFA, no tracking across apps or websites. Cookies are exclusively a matter of this website (section B and the cookie policy).

B. This website

B.1 What data it processes, why, and on what basis

We do not sell your data, we do not use it for advertising and we do not build profiles. This site has no user accounts and no additional forms. No health data reaches stratofitness.com, our database or the analytics: the only data that leaves your iPhone is that of the optional features described in A.3 and A.4, and it does not pass through this website.

B.2 Website processors and recipients

• Supabase (storage of the waiting-list email addresses and the app’s server functions) — servers in the European Union.
• Netlify (hosting of the website and its server logs).
• Google (Google Analytics 4, only if you accept analytics; and Gemini as the provider of the app’s AI model, only if you turn those features on — section A.3).

When any of these providers processes data outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework, as applicable.

B.3 Retention

We keep your email address until we send you the launch notification and, at most, for 12 months afterwards. You can ask for it to be deleted at any time by writing to hola@somia.digital, and we will remove it without further formality.

C. Common to the app and the website

C.1 Data controller

Joan Cama Ribot, NIF 41531670H, with address at C/ Sant Joan, 16, 17200 Palafrugell (Girona), Spain. Contact for any privacy matter: hola@somia.digital.

This policy complies with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPD-GDD) and Spanish Law 34/2002 (LSSI-CE). We are not required to appoint a data protection officer (Art. 37 GDPR) and have not appointed one: for any privacy matter, write to hola@somia.digital and the controller will answer you directly.

C.2 Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@somia.digital. You can also withdraw your consent at any time without affecting the lawfulness of the processing carried out beforehand. If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

C.3 Minors

This site and the application are not aimed at children under 16. If we detect the email address of a child under that age without the consent of their legal guardians, we will delete it.

C.4 Security

We apply technical and organisational measures appropriate to the risk: encryption in transit (TLS), the principle of least privilege and strict minimisation — the best-protected data is the data that is never collected, which is why Strato’s architecture is designed so that your health data never reaches our servers.

C.5 Strato is not a medical product

Strato is a tool for reading and interpreting your training and recovery metrics. It is not a medical device, it does not diagnose or treat health conditions and it does not replace care from healthcare professionals.

C.6 Changes to this policy

If we make substantial changes to this policy, we will announce them on this site before they take effect. The current version will always be published at stratofitness.com/privacy.