Privacy Policy

Last updated 30 September 2026

This policy explains what data the Stryv mobile app collects, why, and what you can do about it. Stryv is operated by Sandra Baumann, the controller of your personal data. Contact: support@stryv.fit.

Using Stryv without an account

You can use Stryv as a guest. Your workouts, templates and settings then stay on your device and are never sent to us.

What stays on your device

Whether or not you sign in, the app keeps some data on your phone: your app settings (such as theme and workout preferences), a local copy of your workouts and templates so the app works offline, changes waiting to sync, and your sign-in token, which is kept in the device's secure storage. Spoken workout cues are generated by your phone's built-in text-to-speech and are not sent to us. Uninstalling the app removes all of it.

What we collect when you sign in

Account details. When you sign in with Google, we receive your email address, name, profile picture URL and Google account ID. If you sign in with an email address and password, we store the email and a hashed (never readable) password.
Profile. The name, handle, bio, location, profile photo and privacy setting you choose to add.
Training data. Workouts, templates, custom exercises and categories, and app settings, synced so they are backed up and available on your devices.
Body measurements. Weight, body girths and notes you choose to enter. This is health data; it is private to your account and never shown to other users.
Community content. Posts (including any workout you share), photos, comments, likes, follows, follow requests, blocks and reports.
Technical logs. Our hosting providers keep short-lived server logs, including IP addresses and request details, to operate and secure the service.

Photos are only accessed when you pick one to upload. We do not collect your precise location, contacts or advertising identifier, and we do not read data from Apple Health or Google Health Connect.

How we use it, and why we're allowed to

To provide the app: your account, syncing and the community features. Legal basis: performance of our contract with you.
To store body measurements. Legal basis: your explicit consent, which you give by entering them and can withdraw at any time by deleting them.
To keep the community safe and the service secure: reviewing reports, moderation and server logs. Legal basis: our legitimate interests.
To answer your support requests. Legal basis: our legitimate interests.

We do not sell your data, do not show ads, and do not use your data for advertising or to build profiles about you.

Who processes your data

Supabase hosts our database, authentication and file storage, in the European Union (Ireland).
Vercel hosts this website and the exercise library the app loads. It receives IP addresses and requests, but no account data.
Google handles sign-in when you choose it. Google's own privacy policy applies to what you share with Google.

Supabase, Vercel and Google are US companies, so your data may be accessed from outside the EU. These transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Who can see your data

Your profile, posts, comments and likes are visible to other Stryv users. If your account is private, only approved followers see your posts. When you share a workout in a post, its details (title, category, stats, exercises, sets, reps, weights and personal records) are visible along with the post. Everything else, including unshared workouts and body measurements, is visible only to you.

How long we keep it

We keep your data for as long as your account exists, and server logs for a short period. When you delete your account, your data is deleted as described on the account deletion page. If someone saved a workout you posted, they keep their own copy of it, but it no longer shows your name or links to your account.

Your rights

You can access, correct, export or delete your personal data, object to or restrict how we process it, and withdraw consent at any time. Most of this can be done in the app; for anything else, email support@stryv.fit. If you are in the EU or UK, you can also complain to your local data protection authority.

Security

Data is encrypted in transit, access is limited per user by database rules, and sign-in tokens on your device are kept in secure storage.

Children

Stryv is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app.