PRIVACY POLICY FITVYR COACH

FITVYR Coach recognizes your movement through the camera, counts reps and gives you cues on your form. The camera images stay on your phone. This page explains what other data is involved. Last updated: October 29, 2026.

1. Controller

SRO Intelligence Services e.K. (FITVYR brand)
Owner: Joshua Bez
Meraner Str. 34c, 86356 Neusäß, Germany
Email: support@fitvyr.de
Phone: +49 (0) 8208 / 211 911 0

2. Camera, microphone and screen

The camera is only active while you start an exercise. Movement recognition runs entirely on your device – on iOS with Apple Vision, on Android with Google ML Kit. We do not record, store or transmit any images or videos. You can grant or revoke camera access in your phone's settings. The legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).

On Android, Google ML Kit is part of the app. According to Google, ML Kit sends anonymous usage and performance data to Google (such as device type, app version and recognition run time) to improve the library – no camera images and no recognition results.

Voice control (optional): If you use voice control, the app listens through the microphone during a workout for short commands such as “start”, “pause” or the weight you trained with. Speech recognition runs exclusively on your device (Apple speech recognition or Android speech recognition in offline mode). No audio recordings are stored and no audio data is transmitted to us or third parties. Only the result is stored, for example the stated weight in your training history. You can turn off voice control at any time in your profile and revoke microphone access in your device's settings.

Cast to mirror (Android, optional): If you use “Cast to mirror”, the app, after your confirmation in the Android dialog, captures your screen and sends the image directly over your Wi-Fi to the mirror you selected (for example IMBODY). For this, the app searches your Wi-Fi for receiving devices. The image goes neither through our server nor onto the internet, and we store nothing. Everything visible on the screen is transmitted – during training that also includes your camera image and, as long as you are mirroring, the content of other apps. Transmission over Wi-Fi is not encrypted; only the selected mirror receives the image, at a random address. You can stop at any time in the app or in the notification.

3. Data on your device

The app stores your training history (exercise, reps, rating, tempo, range of motion, training weight, cues), your training plan and settings on your device. Body measurements (such as body weight, body fat, circumferences) and progress photos remain exclusively on your device, in the app's storage – not in your media library and never on our server. If you delete the app, this data is gone.

The app schedules reminders for your training days directly on your device. There is no push server for this.

4. Backup and device transfer via our server

If the app is connected to our server, it also stores your training history, plan and settings on our server so that nothing is lost and you can take them with you to a new device. The server runs on Cloudflare; the database is located in the EU.

Without an account, we assign the data to a random installation ID that reveals nothing about you. Optionally, you can create an account: on iOS with “Sign in with Apple”, on Android with “Sign in with Google”. We store only the pseudonymous ID that Apple or Google assigns for FITVYR Coach – no name and no email address.

The legal basis is Art. 6(1)(b) GDPR. Cloudflare, Inc. is our processor; to the extent that data reaches the USA in this process, this is based on the EU-US Data Privacy Framework and the Standard Contractual Clauses of the EU Commission.

Deleting your account and data: In the app under “Profile → Delete account”, you immediately delete your account and all associated data on our server. Without an account, we delete the data of an installation if it has had no connection for 24 months. You can also request deletion by email to support@fitvyr.de.

5. AI summary (only with your consent)

If you agree, an AI writes a short summary after each set. For this, the app sends only key figures to our server: exercise, machine, reps, rating, tempo, range of motion, weight, cues and the results of your last sets of this exercise. From these, our server has the language model Claude by Anthropic PBC (USA) write a text. No images, no name and no account or installation ID are transmitted to Anthropic.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in the app under “Profile”; after that, the app shows a summary that it creates itself on the device. Anthropic processes the data as our processor, according to its own statements does not use it to train its models, and deletes it after 30 days at the latest. The transfer to the USA is based on the Standard Contractual Clauses of the EU Commission.

5a. Nutrition, meal photos, recipes and coach chat

The app stores your nutrition diary (foods, amounts, nutritional values) on your device and – like your training history – on our server in the EU (section 4). If you scan a barcode, the app queries the nutritional values directly from Open Food Facts (Open Food Facts, France); in doing so, Open Food Facts receives the barcode and, for technical reasons, your IP address. The product data is available under the Open Database License.

Meal photos are analyzed by an AI only if you have given separate consent for this. The photo goes in reduced size to our server and from there to Anthropic (Claude), which estimates nutritional values from it. We do not store the photo. For recipe ideas, the app sends your open nutrition goals and details such as “no nuts”; for the coach chat, it sends your questions as well as your goal, machine, plan and most recent sessions as text – no health data. The app stores chat histories only on your device; our server does not store them. The information in section 5 applies to Anthropic; the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw in the app under “Profile”.

5b. Apple Health and Health Connect

If you turn this on, the app records your workouts in Apple Health or Health Connect and reads steps, active energy, resting heart rate, heart rate variability, sleep and body weight – only to show them to you in the app and to suggest your nutritional needs. This data stays on your device: it goes neither to our server nor to an AI and is not used for advertising. The legal basis is your explicit consent (Art. 9(2)(a) GDPR), which you can revoke at any time in your phone's settings.

5c. Family profiles

Up to four people can create their own profiles on one device. Each profile has its own data and its own consents. Anyone who creates a profile for another person confirms that person's agreement – for persons under 16, that of their parents. Apple Health and Health Connect are only available for the first profile (the owner of the device).

5d. Sharing with your gym

If you train at a gym with FITVYR machines, you can share your training sessions (exercises, reps, weight, rating, cues) and your training plan with the gym. To do this, you enter a code from the gym in the app and give your consent (Art. 6(1)(a) GDPR). The gym sees the shared data read-only, under the name you choose. Nutrition, body measurements, photos, health data and chats are not shared. The gym is the controller of the shared data; we process it on the gym's behalf and log each access for twelve months. You can stop sharing in the app at any time – the gym will then immediately no longer see your data.

5e. Reporting a machine issue

If you report an issue with your machine in the app, we transmit your details (machine, serial number, MAC address, order number, type of issue, whether the machine can still be used, description, photos, name, email, phone, country) with your consent to our service partner, who handles the service case (Art. 6(1)(b) and (a) GDPR). The retention periods for service cases and warranty apply.

6. Subscriptions

You take out subscriptions through Apple's App Store or Google Play. Apple or Google process the payment under their own responsibility; their privacy policies apply. We do not receive any payment data – the app only learns whether a subscription is active and which one.

7. Server logs and protection against abuse

When a connection is established, Cloudflare processes technically necessary data such as IP address and time. We do not log any content. To prevent abuse, we count new installations per IP address and hour – only as a checksum and only for that hour – as well as AI summaries per installation and day. The legal basis is Art. 6(1)(f) GDPR (protection of the service).

8. No advertising, no tracking

FITVYR Coach shows no advertising and uses no advertising ID, no cross-app tracking and no analytics tools. We do not sell data or pass it on for advertising.

9. Who may use the app

FITVYR Coach is intended for people aged 16 and over. Younger people may use the app only with their parents' consent.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to withdraw consent at any time with effect for the future. To exercise these rights, write to us at support@fitvyr.de.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

11. Not a medical device

FITVYR Coach gives cues on how to perform exercises. The app does not replace medical or therapeutic advice and is not a medical device. Body measurements and data from Apple Health or Health Connect do not leave your device; the app does not transmit any health data within the meaning of Art. 9 GDPR to us.