Privacy Policy

This Policy explains what personal data Gojan uses (the iOS and Android app, the web app, the trainer portal and the gojan.app site, together the "Service"), what for, who sees it, who we share it with, how long we keep it, and what you can do about it. The controller is Ondaform Labs LLC (30 N Gould St, Ste N, Sheridan, WY 82801, USA). Privacy contact: team@gojan.app.

1. In short

• We do not sell your data, we show no ads, and we do not track you across other companies' apps or sites.
• Apple Health and Health Connect data is read only if you connect it, we never write or change it, and it is never used for advertising.
• So the coach can answer and to build your routines, your messages, your training profile and, if you connected Apple Health or Health Connect, your latest health summary are sent to Anthropic (the AI model provider), only if you turn on «Usar Gojan AI» (Use Gojan AI); your health data goes only if you also turned on «Usar mis datos de salud» (Use my health data). They are two separate, optional permissions, and you can change them at any time. Anthropic does not use them to train its models.
• Your friends see your training activity, and the trainers you link with see your profile, routines, logs and, if you turned on «Usar mis datos de salud» (Use my health data), all your health data (see §7).
• You can delete your account and your data at any time from the app or from gojan.app/en/delete-account.

2. Data we use

• Account: name, email and password (stored encrypted), or what Apple or Google pass us if you sign in with them (name and email; Apple may give a relay email). Your username and your profile photo, if you add one.
• Training profile: goals, number and length of sessions, equipment, preferences, what you find hard about training, your gym, date of birth (to work out your age), gender, starting and target weight, height, injuries and health conditions you declare, and your answers to the physical activity readiness questionnaire (PAR-Q).
• Apple Health (iOS) and Health Connect (Android) data, if you connect them: steps, distance, active calories, heart rate and resting heart rate, sleep (total and by stage), weight, body fat percentage and workouts (type, time and length). See §5.
• Training log: your routines, the sets, weights and reps you log, your sessions, records and streaks, and your gym visits.
• Location (optional): see §6.
• Photos (optional): your profile photo, a session photo, the photos you send in chat to the coach or to your trainer and, if you are a trainer, the photo of your certificate or diploma. We use the camera or your gallery only when you pick a photo, and we compress photos on your phone before uploading them.
• Voice (optional): when you dictate a message, your phone's speech recognition (Apple's or Google's) turns it into text; depending on your device, that recognition may run on Apple's or Google's servers. We never receive or store the audio: only the text you choose to send.
• Messages: your conversations with the AI coach and with your trainers, a summary of older conversations the AI writes for context, the feedback and reports you send us.
• Connections: friends, requests, blocks, linked trainers, and the reactions you give and receive.
• If you are a trainer: your public profile (name, photo, description, specialties, format, gyms and, if you add it, your WhatsApp), your certifications, your students and the payments from your students you record.
• Technical and usage data: user ID, push notification token, Firebase installation ID, device model and operating system, app version, the actions you take in the app (for example opening a screen or finishing a session), error logs and crash reports.
• Legal records: which version of these documents you accepted and when, and what you decided and when about «Usar mis datos de salud» and «Usar Gojan AI».
• Face ID or fingerprint sign-in (optional): handled by your phone; your biometric data never leaves it and never reaches us.

3. What we use it for

• Creating your account and keeping you signed in.
• Building and adjusting your routines and running the AI coach, using your profile, your log and, if connected, your health data.
• Showing your progress, your streaks and your time at the gym.
• The social features: your friends, the feed, copying routines, and your trainers.
• Sending to a human review by a certified trainer the routines of anyone whose readiness questionnaire calls for extra care (see §7).
• Sending you Service notifications and emails (sign-in codes, account notices, reminders you can turn off).
• Handling questions and reports, moderating content, preventing abuse and keeping the Service secure.
• Understanding how the Service is used and fixing bugs. We use usage events and error logs for this, never for advertising.
• Complying with the law.

4. Legal bases

We process your data (a) to provide the Service you asked for when accepting the Terms; (b) with your consent, which you can withdraw at any time, for health data (what you declare and what comes from Apple Health and Health Connect), location, sending data to the AI provider, and notifications; (c) for our legitimate interest in keeping the Service secure and understanding how it is used; and (d) to comply with the law. Health data is sensitive data under Argentina's Law 25.326: we process it only with your express consent and for the purposes in this Policy.

5. Apple Health and Health Connect data

• Your consent. The injuries and conditions you declare (a disability included), your readiness questionnaire (PAR-Q) answers, and Apple Health and Health Connect data are health data. We use them only if you turn on «Usar mis datos de salud» (Use my health data), a separate and optional permission we ask for before any health question (if you already had an account, once when you open the app). If you don't turn it on, those questions are skipped and your routine is built without them; without the questionnaire, it doesn't go through a certified trainer's review either (§7). You can change it at any time in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI). Connecting Apple Health or Health Connect is optional.
• Apple Health and Health Connect are read-only. You connect them during onboarding or in Profile. Gojan never writes or changes anything in Apple Health or Health Connect.
• What we read: the types in §2, and only those you authorize. From them we keep one summary per day. Once connected, they are read again when you open the app, at most once an hour.
• What for: personalizing your routines and recovery, showing your progress, and giving the coach context.
• Who it is shared with: only Supabase (where it is stored), Anthropic if you also turned on «Usar Gojan AI» (the latest summary goes with each message to the coach) and the trainers you link with, if you turned on «Usar mis datos de salud» (Use my health data) (see §7). We never use it for advertising or marketing, never sell it or give it to data brokers, and it is never used to decide on credit, insurance or employment. We do not store it in iCloud.
• Team access: a limited number of authorized team members can access it to operate, secure and support the Service, under a duty of confidentiality. Beyond that, we only look at it if you ask us to (for example, to fix a problem), if the law requires it, or aggregated so it does not identify you.
• Health Connect: the use of information received from Health Connect adheres to the Google Play Health permissions policy, including its Limited Use requirements.
• How to stop it: turn off «Usar mis datos de salud» in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI). We stop using it: it doesn't go to the AI, your trainers and the reviewing trainer stop seeing it, and your phone stops syncing Apple Health or Health Connect. It stays stored, unused, until you tap «Borrar mis datos de salud» (Delete my health data) on that same screen, which deletes your injuries and conditions, your PAR-Q answers and what came from Apple Health or Health Connect (the weight you entered by hand stays), or until you delete your account. If you turn it back on, what you didn't delete is used again. You can also remove Gojan's access in the Apple Health or Health Connect settings, which stops new reads.

6. Location

• Your chosen gym: we store the gym you choose (name, address and coordinates).
• Gym visits, with background location (optional): if you turn on visit detection and give Gojan the "always" location permission, your phone watches an area of about 120 meters around your gym, even when the app is closed, and tells us when you arrive and when you leave. We only store the arrival and departure times at your gym; your position never leaves the phone and we keep no history of where you have been. We use it to measure your training time. Turn it off in Profile or by removing the permission in your phone's settings.

7. Who sees your data inside Gojan

• Any user: your name, username, profile photo (the photo is stored at a public address) and the gym you chose, which shows when someone opens your profile. If you are an athlete, we may suggest you as a possible friend to other users, starting with people who share friends with you, go to your gym or train nearby; the suggestion may show your gym and how many days a week you have been training. When they open your profile, they also see which friends you have in common. Anyone with your invite link (gojan.app/i/your-username) sees your name, username and photo even without an account, including in the preview when it's shared in a chat. If you are a trainer, your public profile appears in the catalog for everyone.
• Your friends (once a friend request is accepted, you both see each other's): the sessions you post, with their photo and the gym you chose, your records, your routines (which they can copy), the muscles you trained this week, your streak and your recent activity. If a friend copies one of your routines, the copy is theirs and stays in their account. You can remove or block a friend at any time, and they stop seeing all of this.
• A trainer you send a request to, while it is pending: your goal, days per week, level, gym, your active routine and your recent progress.
• Your linked trainers: your profile, your routines (which they can edit), your sets and sessions, and what you send them in chat, photos included. If you turned on «Usar mis datos de salud» (Use my health data), your trainer sees all your health data: your injuries and conditions, your PAR-Q questionnaire and what you share from Apple Health or Health Connect (for example steps, heart rate, sleep, calories, weight and body fat %). If you turn it off, they stop seeing it; they still see the weight you entered by hand in the app. They can also record in Gojan their fee and whether you paid it (the payment happens outside Gojan). When a trainer uses the AI tools to build or adjust your routine, your profile and routine data go to Anthropic as in §9, only if you have «Usar Gojan AI» on. When you unlink, the trainer loses access.
• A certified reviewing trainer: if your readiness questionnaire answers call for a review, an assigned certified trainer sees your answers, your goals, the injuries and conditions you declared, your weight, height and date of birth, and the routine under review. Every access is logged. If you turn off «Usar mis datos de salud», they stop seeing your answers, injuries and conditions.
• Our team: accesses data only to run the Service, give you support, review reports, fix bugs and comply with the law.
• Blocks and reports: you can block anyone from the ⋯ on their profile, on one of their sessions or on a trainer, and they stop appearing in your Connect; you unblock them from Perfil → Privacidad → Personas bloqueadas (Profile → Privacy → Blocked people). To report a person or content (a profile, a photo, a session, a routine, a message or a coach reply), tap «Reportar» (Report) in the app; if you can't, write to team@gojan.app. Our team sees the reported content, reviews it and may remove it or close the account. We never tell the reported person who reported them.

8. Providers we share data with

We share data only with these providers, which process it on our behalf to provide the Service:

• Supabase (database, authentication, files and server functions): stores all account data, on Amazon Web Services servers in São Paulo, Brazil. Privacy policy.
• Anthropic (Claude AI models; a US company): receives what §9 describes. It stores the data in the US and may process it in any of the countries where it runs its infrastructure. Privacy policy.
• Google: Firebase Crashlytics receives crash reports (app state, device model, installation ID); Firebase App Check verifies that requests come from the genuine app; Google Places receives what you type when searching for your gym; YouTube API Services (see §10); and Firebase Cloud Messaging delivers notifications on Android. If you sign in with Google, Google also processes your sign-in. Google Privacy Policy.
• Apple: Sign in with Apple and notifications on iOS. Apple Privacy Policy.
• Expo (USA): delivers push notifications to your phone, with your notification token and the notice text, and app updates. Privacy policy.
• Resend (USA): sends the Service's emails to your address. Privacy policy.
• Vercel (USA): hosts the gojan.app site and the web app. Privacy policy.
• Cloudflare Turnstile: checks that you are not a robot on the web page for deleting your account. Privacy policy.
• Authorities, only when the law requires it.

We share data with no one else, and never with advertisers or data brokers.

9. The AI: Anthropic

• What it is: Gojan's coach runs on Claude, an AI model by Anthropic, a US company. Our servers send it the data; your phone never connects to Anthropic.
• What we send in the coach chat: what you type or dictate (as text, never the audio), the photos you attach, a summary of earlier messages and, with each message: your first name, gender, age, height, starting and target weight, days per week and session length, equipment, preferences, your goals, what you find hard about training, your active routine (days, exercises, sets, reps, weights and notes), the names of your other routines and, if you turned on «Usar mis datos de salud», the injuries and conditions you declared and, if you connected Apple Health or Health Connect, your latest health summary (steps, distance, active calories, average and resting heart rate, sleep, last workout, body fat and latest weight). If you didn't turn it on, the only part of the health summary that goes is the last weight you entered by hand, and the coach knows you chose not to share your health data.
• When building your first routine: your onboarding answers (goal, gender, age, weight, height, when you last trained, days per week, session length, equipment, preferences and, if you turned on «Usar mis datos de salud», injuries) and, if you want, the description and photos of the routine you do today.
• AI tools for trainers: only if the trainer turned on «Usar Gojan AI» and the student didn't turn it off: the trainer's messages and photos, and the student's name, days per week, goals, injuries (if the student shares their health data), equipment and routine. Also the photo of the trainer's certificate, to verify it; if the trainer didn't turn on Gojan AI, a person reviews the certificate.
• What we do not send: your readiness questionnaire answers (our server evaluates them), your logged set history, your email, your location, and your friends' data.
• Your consent: nothing goes to Anthropic unless you turn on «Usar Gojan AI» (Use Gojan AI), a separate and optional permission we ask for when you create your account (if you already had one, once when you open the app); «Ver todo lo que le mandamos» (See everything we send) shows this same list. Turn it off at any time in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI): the coach turns off across the app, our server refuses any AI request with your data, and your history stays stored. If you only disconnect Apple Health or Health Connect, new data stops, but your last synced weight still goes with each message.
• What Anthropic does with the data: it uses it only to generate the answer. It does not use it to train its models and does not sell it. It deletes it from its systems within 30 days, unless it must keep it longer to enforce its usage policy or by law.
• The AI can be wrong. Its answers are general guidance, not medical advice. It makes no automated decisions with legal effects on you: you can always change or ignore what it suggests, and in the cases in §7 a person reviews the routine.
• Reporting an answer: if a coach answer seems wrong or dangerous, press and hold it and tap «Reportar» (Report); if you can't, write to team@gojan.app. We use it to improve the coach's safety rules.

10. YouTube videos

The videos showing how to do each exercise are found with YouTube API Services and play in the YouTube player. Our servers search for each video by the exercise name, with none of your data. When you watch a video, YouTube and Google may receive data from your device under their own rules. By watching them you agree to the YouTube Terms of Service, and Google processes that data under its Privacy Policy.

11. International transfers

Your data is stored in Brazil (Supabase). Anthropic stores it in the US and may process it in any of the countries where it operates; the other providers process it mainly in the US (Resend, Expo, Vercel, Google). Those countries may not have a data protection law equivalent to your country's. Each provider commits by contract to protecting the data (their data processing agreements), and we transfer to them only what they need to provide their service. By accepting this Policy you expressly consent to those transfers.

12. How long we keep data

• Your account, profile, routines, logs, health data, messages and photos: while you have the account (your health data, until you tap «Borrar mis datos de salud», see §5). What you delete earlier (a photo, a routine) is deleted right away.
• App error logs: 90 days.
• Our server logs: up to 12 months.
• Crashlytics crash reports: up to 90 days.
• Usage events: while you have the account. When you delete it, they are unlinked from you and remain only as statistics.
• Reports you send us: up to 12 months after review, or until you delete your account.
• Data at Anthropic: up to 30 days (see §9).

13. How to delete your account

• In the app: Profile → "Eliminar cuenta".
• On the web, without installing the app: at gojan.app/en/delete-account, with a code we email you.
• By email: write to team@gojan.app from your account's address.

Deletion is immediate and final in our database: your account, profile, routines, training log, health data, gym visits, conversations, photos and connections. We email you a confirmation. A copy of what you deleted can remain for up to 8 days in our provider's encrypted backups, until they are overwritten. We keep only what §12 leaves without identifying you, and what the law requires us to keep. If you signed in with Apple, you can also remove Gojan in your Apple ID settings (Sign in with Apple).

14. Your rights

You can access your data, correct it, ask for it to be deleted, object to processing, ask us to restrict it, ask for a portable copy, and withdraw your consent at any time, without affecting what was done before. You can change or delete many things yourself in the app; for the rest, write to team@gojan.app. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days, as Argentina's Law 25.326 requires.

Under Law 25.326, you may exercise your right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown (article 14, paragraph 3). Argentina's AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, as the supervisory authority under Law 25.326, handles complaints from anyone whose rights are affected by a breach of the data protection rules.

If you live in another country, you may also complain to its data protection authority. If you live in California or another U.S. state with a privacy law, you have the right to know what data we hold, and to access, correct and delete it; we do not sell or "share" your information for advertising, and we will not discriminate against you for exercising these rights.

15. Phone permissions

Each permission is asked for only when you use the feature, and you can remove it in your phone's settings: camera and photos (to pick a photo), microphone and speech recognition (to dictate), location, including in the background (only for gym visits), Apple Health or Health Connect (reading the data in §5), notifications and Face ID (to sign in). If you do not grant a permission, the rest of the Service keeps working.

16. The website and cookies

The gojan.app site counts visits with Umami, an analytics tool we host ourselves that uses no cookies and does not follow you across sites. The web app keeps your session in your browser's storage so you do not have to sign in again. We use no advertising cookies.

17. Security

We use encrypted connections, encrypted password storage, database access rules so each person sees only what is theirs, private files with links that expire (the profile photo is the exception, see §7), and logging of access to health data in reviews. No system is fully secure: if a breach affects you, we will notify you and the authorities as the law requires.

18. Minors

The Service is only for people 18 and over. We do not knowingly collect data from anyone under 18; if we find an account belonging to a minor, we close it and delete its data.

19. Changes

If we change this Policy, we publish the new version with its date. If the change is significant, we tell you by email or in the app before it takes effect, and if it needs your consent (for example, for a new use of your data), we will ask you for it.

20. Contact

Ondaform Labs LLC — 30 N Gould St, Ste N, Sheridan, WY 82801, USA — team@gojan.app · gojan.app