Privacy Policy

This Privacy Policy explains what data the Buff: Gym Planner mobile app ("Buff", "the app") for iOS, watchOS and Android collects, why, how we store and protect it, and how you can delete it.

The data controller is Individual Entrepreneur Vladyslav Nezhevelo (Ukraine), tax ID 3612806252 ("we", "us"). Contact: support@buffgymplanner.com.

By using Buff you agree to this Policy.

Account. You sign in only with Apple or Google. We receive your Apple or Google account identifier, your email address (Apple may give us a private relay address) and your name. We have no access to your emails, contacts, files or any other data in these accounts.

Profile. Your name, an optional profile photo, units, language and time zone. You can also enter your body weight, height, date of birth and sex: Buff uses them to estimate calories, count training volume for bodyweight exercises and show the matching muscle figures. All of these are optional.

Training. Your plans and schedule, workout sessions with exercises, sets, repetitions, weights, durations and rest times, custom exercises with their photos, streaks and achievements ("buffs").

Body measurements and progress photos that you add yourself.

Health data. Only if you allow access to Apple Health or Health Connect, and only the types you allow. Buff reads steps, distance (Android), workouts recorded by other apps and devices, heart rate, active energy and body weight. Buff writes your completed gym workouts (type, duration and calories) back to Apple Health or Health Connect. Buff stores on its server your daily step totals and step goal, workouts from other apps (type, title, source app and device, time, duration, calories) and the heart rate and calories of your Buff sessions, so that your history, planner, streaks and achievements work on every device. Buff does not read health data in the background.

Purchases. If you buy Buff Pro, the payment is processed by Apple or Google. We receive the purchase, its status and dates, never your card details.

Technical data. App version and platform, a push notification token if you allow notifications, and crash and performance reports (device model, OS version, app version, error details and your Buff user ID).

We do not collect your location, phone contacts, advertising identifiers (IDFA, GAID), microphone or camera data. Photos are picked from your library only when you choose them.

• to sign you in and keep your data in sync across your devices and Apple Watch;
• to provide the app: plans, workout logging, history, planner, steps, measurements, streaks and achievements;
• to send the notifications you allow, such as rest timer alerts and new buffs;
• to give you access to Buff Pro after a purchase;
• to find and fix crashes.

We do not use your data for advertising, do not sell it and do not share it with data brokers. Health data from Apple Health and Health Connect is used only to provide the app's features to you. It is never used for advertising, never sold and never shared with third parties except the infrastructure providers listed in section 5.

When you share a workout, Buff creates a link like https://buffgymplanner.com/b/… Anyone with the link can see the workout name, the number of exercises and sets and the muscles worked, without signing in. Your name and photo are not shown. A person who opens the link in Buff can save a copy of the workout to their own account, including your custom exercises and their photos. Copies already saved stay with those people after you delete your account.

When you share a workout card to Instagram Stories or save it to your photos, the image is passed to that app on your device only when you choose to do so.

Buff uses these providers to work. Each receives only what it needs:

• Supabase: server, sign-in, database and file storage for all the data in section 2. https://supabase.com/privacy
• Apple and Google: sign-in, Apple Health and Health Connect, in-app purchases. https://www.apple.com/legal/privacy/, https://policies.google.com/privacy
• RevenueCat: managing Buff Pro purchases (purchase details and your Buff user ID). https://www.revenuecat.com/privacy
• Sentry: crash and performance reports. https://sentry.io/privacy/
• Expo: delivering push notifications and app updates (push token, device details). https://expo.dev/privacy
• Vimeo: streaming exercise technique videos (your IP address and device details, as with any video stream; we ask Vimeo not to track playback). https://vimeo.com/privacy

• all traffic between the app and the server is encrypted with TLS;
• database access rules let only you read and change your own data;
• progress photos are kept in private storage that only you can access;
• sign-in tokens are kept in the secure storage of your device (Keychain on iOS, Keystore on Android).

Our providers may process data outside Ukraine and the European Union, including in the United States, under appropriate safeguards such as Standard Contractual Clauses.

We keep your data for as long as your account exists.

Delete your account in the app: open the Profile tab, tap Settings, then Delete account and confirm with Delete forever. Your account is deleted immediately and cannot be restored.

If you can't use the app, email support@buffgymplanner.com from the address of your Buff account with the subject "Delete my Buff account". We will delete it within 30 days.

Deleted together with the account:

• your profile, profile photo and body details;
• plans, schedule, workout history and sets;
• custom exercises and their photos;
• body measurements and progress photos;
• steps, health data copied to Buff, streaks and achievements;
• your workout links (they stop working).

Not deleted:

• copies of your workouts that other people already saved from your links, with the photos of your custom exercises in them (they are no longer connected to you);
• crash reports, which are removed automatically within 90 days;
• purchase records that Apple, Google and RevenueCat keep as required by law;
• data in Apple Health and Health Connect, which you manage in those apps.

Deleting your account does not cancel a Buff Pro subscription. Cancel it in your App Store or Google Play subscription settings.

You can also delete individual workouts, plans, custom exercises, measurements and photos in the app at any time without deleting your account, and turn off Apple Health or Health Connect access in the system settings.

Depending on where you live (GDPR in the EU, CCPA in California, the Law of Ukraine "On Personal Data Protection"), you have the right to access a copy of your data, correct it, delete it, restrict or object to its processing and receive it in a portable format. We do not sell personal data. To use any of these rights, email support@buffgymplanner.com. We reply within 30 days.

We process your data to provide the app you asked for (performance of a contract), with your consent for health data and notifications, which you can withdraw at any time, and for our legitimate interest in fixing crashes.

Buff is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us data, email support@buffgymplanner.com and we will delete it.

We may update this Policy. We will tell you about significant changes in the app. The date of the latest version is shown at the top of this page.

Individual Entrepreneur Vladyslav Nezhevelo, tax ID 3612806252
Email: support@buffgymplanner.com