The short version
- GoStrength has no accounts and no server holding your data. Your profile, health check and workout history are stored only on your phone, in an encrypted database.
- Your health information is never sent to us. It leaves your phone only inside an encrypted backup you turn on. It never goes into crash reports, notifications or Apple Health.
- No ads, no analytics, no tracking. We don’t sell data or share it for marketing.
- A few features use the internet: Premium, optional backup and optional crash reports. Each one is explained below.
Features marked Later update are described now so this policy is complete for the first release. Until they arrive, GoStrength doesn’t do what they describe.
What stays on your phone
Everything you put into GoStrength stays on your phone:
| Data | Examples |
|---|---|
| Profile | An optional first name, age band, experience, goals, equipment, weights and bands, session length, preferred days |
| Health check | Your answers, the outcome, and any cautions it sets, such as joint or bone-health concerns |
| Workouts | Sessions, sets, reps, holds, weights, effort ratings, notes, and any discomfort or fall you report |
| Routines | Your pelvic floor routine log, custom workouts and reminder times |
| Settings | Character appearance, spoken cues, display choices |
The database is encrypted with a key held in your phone’s secure storage (the iOS Keychain or Android Keystore). It is excluded from iCloud and Google device backups, so it can’t leave your phone that way either.
Because this information never reaches us, we don’t collect or hold it, and we can’t see it. The app uses it on your phone only to give you the features you use, and you control it completely.
GoStrength never asks for your sex or gender: the character you follow is a display choice. It doesn’t ask for your email address, phone number, location, contacts or photos, and contains no advertising identifiers.
Your health information
Health check answers, cautions and anything you report about discomfort are health data. Data protection laws in the UK, the EU and many other places treat health data as a special category that needs extra protection, and some US states have laws just for consumer health data. GoStrength protects it like this:
-
The app uses it on your phone only to suggest suitable exercises and show the right cautions. It asks for your explicit consent before the health check, and you can withdraw it at any time by deleting your data in Settings.
-
It is stored only on your phone, encrypted.
-
It is never sent to us or to any company we use.
-
It is never included in crash reports.
-
Reminders use neutral wording, so nobody glancing at your phone can tell what they are for.
-
Only workout type and times go to Apple Health or Health Connect, and only if you turn that on. Your answers never do.
Consumer health data
Some laws, such as Washington’s My Health My Data Act and Nevada’s consumer health data law, ask for a separate notice about health data. Here it is in one place:
| Question | Answer |
|---|---|
| What health data | Health check answers and outcome, cautions, discomfort and fall reports, and your workout and pelvic floor routine history |
| Where it comes from | Only from what you enter in the app |
| Why it’s used | To suggest suitable exercises, show cautions, and track your progress, on your phone |
| Who receives it | Nobody. It is never sent to us or to any company we use. Only if you choose: workout type and times go to Apple Health or Health Connect, and an encrypted backup goes to your own iCloud or Google Drive |
| Is it sold | Never |
| Your rights | See it in the app, delete it in Settings → Delete all data, and withdraw consent the same way. You can also email us, and if we refuse a request you can appeal by replying to our answer |
When data leaves your phone
Premium subscriptions: RevenueCat Later update
You buy Premium through the App Store or Google Play. Apple or Google take the payment, and we never see your card or payment details.
To check whether you have Premium, the app uses RevenueCat, Inc. (USA), which processes this on our behalf. It receives:
- a random app user ID created on your phone, not linked to your name or email;
- the purchase receipt from Apple or Google;
- technical details such as the app version and device platform, and your IP address when the app connects.
It receives no health or workout data. We use this to give you the Premium features you paid for, so where the GDPR applies, the lawful basis is performance of a contract.
Apple Health and Health Connect Later update
If you turn this on (Premium), GoStrength saves each completed workout to Apple Health or Health Connect: the type of workout and when it started and finished. It reads nothing from them. This happens on your phone. Once saved, the record is managed by Apple or Google under their own privacy terms. You can switch it off in the app, or remove GoStrength’s access in your phone’s Health settings.
Encrypted backup: your iCloud or Google Drive Later update
A backup is encrypted on your phone, with a passphrase only you know, before it goes anywhere.
- Manual backup (free): you choose where to save the file.
- Automatic backup (Premium): the file is saved to your own iCloud Drive, or to a hidden app folder in your own Google Drive. On Android you sign in with Google once to allow this. GoStrength can reach only that hidden folder, and it doesn’t keep your Google email or profile.
We never receive a copy. Apple and Google store the file, but they can’t read it. If you lose both your passphrase and your recovery key, nobody can restore the backup, including us.
Crash reports: Sentry Later update
Crash reports are off unless you turn them on. If you do, a report about a crash goes to Functional Software, Inc. (Sentry), stored in its EU data region. A report contains technical details: the error, where it happened in the code, the app version, device model and operating system. Reports never contain health check answers, cautions, workout notes or your name, and we ask Sentry not to store IP addresses.
Where the GDPR applies, the lawful basis is your consent. You can switch reports off at any time in Settings. Reports are deleted automatically within 90 days.
Exporting a file Later update
You can export your workout history as a CSV file and share it where you like, for example with a physiotherapist. The app warns you first: an exported file isn’t encrypted, and anyone you give it to can read it.
Permissions GoStrength asks for
| Permission | Why | When it’s asked |
|---|---|---|
| Notifications | Workout and routine reminders | The first time you set a reminder. Reminders are scheduled on your phone. |
| Apple Health or Health Connect (write only) | Saving completed workouts | Only if you turn it on |
| Internet | The features in the section above | Granted at install on Android; nothing is sent unless a feature above needs it |
Deleting your data
- Everything on your phone: Settings → Delete all data, then type DELETE. This removes the database, its encryption key and scheduled reminders. Uninstalling the app also removes its data.
- Automatic backups: the delete step offers to remove your cloud backups too. You can also delete them from your iCloud or Google Drive settings.
- Apple Health or Health Connect: workouts already saved there stay until you delete them in that app.
- Premium records: RevenueCat keeps an anonymous record of purchases. To have it deleted, email us and we’ll arrange it.
Who GoStrength is for
GoStrength is made for adults aged 40 and over. It isn’t aimed at anyone under 18, and we don’t knowingly collect personal data from children under 13, or the higher age set by law where they live. If you think a child has sent us personal data, email us and we’ll delete it.
International transfers
RevenueCat is based in the USA. Sentry is a US company, but GoStrength’s crash reports are stored in the EU. When personal data moves between countries, we rely on the safeguards the law requires, such as the European Commission’s Standard Contractual Clauses with the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework and its UK Extension where a provider is certified under them.
What we never do
- Sell or rent your data, or share it for advertising.
- Build profiles of you or make automated decisions about you.
- See your health or workout data. The app is built so that we can’t.
Who is responsible for your data
GoStrength is made by Lucky Jeagun, trading as CommonApps. Under data protection laws such as the UK GDPR and the EU GDPR, we are the “controller” of the small amount of personal data described in this policy.
Contact us about privacy at [email protected].
When you email us
If you write to us, we receive your email address and whatever you put in the message, and our email provider stores it for us. We use it only to reply and to fix the problem you tell us about. Where the GDPR applies, the lawful basis is our legitimate interest in supporting the people who use our apps. We keep support emails for up to two years, then delete them. Please don’t send us your budget, health or workout details: we don’t need them to help.
Your rights
Depending on where you live, including the UK, the European Union, California and other US states, Canada, Australia and Brazil, you may have the right to:
- know what personal data we hold about you, and get a copy;
- have it corrected if it’s wrong, or deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time, where we rely on it (for example, crash reports);
- not be treated differently for using any of these rights.
We give these rights to everyone, wherever you live. Most of your data never reaches us, so you can see, export or delete it yourself in the app. For anything we or our providers hold, email [email protected]. Because our apps have no accounts, we may ask for a detail only you would have, such as the date you emailed us, to make sure we’re dealing with the right person. You can also ask someone to make a request for you, if you confirm you’ve authorised them. We’ll reply within one month and won’t charge you.
Notice for US residents
Some US state laws, such as the California Consumer Privacy Act, ask for the following details. In the last 12 months we may have received these categories of personal information:
- Identifiers: your email address if you write to us; a random app ID used for purchases; your IP address when an app connects to a service described above.
- Commercial information: records of Premium purchases, from Apple or Google.
- Technical information: crash reports, only if you switch them on.
They come from you and your device, and are used only for the purposes in this policy. We share them only with the service providers named here, who may use them only to provide their service to us. We do not sell or share personal information for cross-context behavioural advertising, have not done so in the last 12 months, and do not use sensitive personal information to infer anything about you. Because nothing is sold or shared, there is nothing to opt out of; if your browser or device sends a Global Privacy Control signal, we treat it as a request to opt out anyway.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the data protection authority where you live or work. For example:
- UK: the Information Commissioner’s Office, ico.org.uk/make-a-complaint.
- European Union: your national authority, listed by the European Data Protection Board.
- United States: your state attorney general or privacy agency, such as the California Privacy Protection Agency.
Changes to this policy
If we change what GoStrength does with data, we’ll update this page and the date at the top before the change takes effect. If a change affects data already on your phone, the app will tell you before it happens. We will never use data already collected in a materially different way without asking you first.