Privacy Policy

Who we are

VPRAVA is a workout tracker for iPhone and Apple Watch, with a web version at app.vprava.me and a coach workspace at coach.vprava.me. The controller of your personal data is Dmytro Dobrosol, the individual developer of VPRAVA.

For any privacy question or request, write to support@vprava.me.

VPRAVA is for people aged 16 and over. We do not knowingly collect data from anyone younger: if you believe someone under 16 has an account, write to support@vprava.me and we will delete it.

What data we collect

• Account: email address, username and what you add to your profile — name, photo, cover image, bio, website. If you sign in with Apple, we receive the email address Apple shares with us (it can be a private relay address).
• Sign-up questions: gender, age range, experience, goal; for athletes, also competition category and upcoming competition.
• Training: programs, workouts, exercises, sets, weights, reps, cardio metrics, notes, and the gyms and machines you use.
• Diary, if you use it: body weight and measurements, water, meals and foods, supplements, and progress photos. Progress photos are visible only to you.
• What you share: posts with photos and videos, captions, comments, reactions, follows, tags of other people, chat messages including photos and voice messages, gym reviews and photos, suggestions for the app, reports, blocks and messages to support.
• Location: your precise location, only when you ask for it — to find gyms near you and to show you on the map of your gyms. We do not keep a history of your location.
• Camera, microphone and photo library: only to take or attach the photos, videos and voice messages you choose to share, and to scan food barcodes.
• Apple Health: only with your permission — see the next section.
• Device and diagnostics: device model, iOS version, screen size, app version, error reports, and the crash and freeze reports that iOS gives the app (Apple MetricKit).
• Usage statistics: which screens and features are used, plus summary numbers such as how many gyms you have saved. They contain none of your content: no exercise or gym names, weights, message text or location.
• Notifications: a push token for your device, so we can deliver notifications.

Apple Health

With your permission, VPRAVA reads from Apple Health:

• heart rate and active energy for the time of a finished workout — saved with that workout;
• steps — shown on the Today screen; steps during a cardio interval are saved with that set, and if you have a coach, daily step totals go into the weekly report you send;
• sleep — only shown on the Today screen, it is not sent to our servers;
• body weight — added to your weight diary.

On Apple Watch, VPRAVA reads your date of birth and resting heart rate to calculate heart rate zones; these stay on the watch. Workouts started on Apple Watch are saved to Apple Health.

Health data is never used for advertising or marketing and is never sold. It is shared only with your coach, as described below, and with the people who see a post — if you publish a workout, its heart rate and calories can appear in the post.

Why we use your data

• To provide the app: keep your training and synchronize it between your devices, run the social features, and connect you with a coach.
• Apple Health, location, camera, microphone and photo library — only with your permission, which you can withdraw at any time in iOS Settings.
• Diagnostics, usage statistics and backups — to keep the app reliable, understand which features are useful, and not lose your data.

We do not sell data, do not show ads, and do not track you across other companies' apps or websites. We do not use third-party analytics services: usage statistics are kept in our own database and used only by us.

Who can see your data

• Profile and posts: anyone can see a public profile and its posts — in the app and as a page on vprava.me. A private profile is visible only to followers you approve (Profile → Menu → Account → Private account).
• Comments, reactions and tags are visible to those who can see the post.
• Messages are visible only to the people in the conversation.
• Gym reviews, gym photos and suggestions are visible to other users of the app. Machines you use at a gym are added to that gym's shared list of equipment, which other people see.
• Training at a gym right now: only people who are training at the same gym at that moment, and your coach, can see that you are training there. You can turn this off: Profile → Menu → Account → Show when training.
• Your coach — see the next section.
• The VPRAVA team can access account data when handling support requests, reports or technical problems.

Coach

If you accept a coach's invitation, while you work together your coach sees:

• your workout history;
• the weekly reports you send — weight, workouts and cardio, step totals from Apple Health, water, diary answers, and the photos you attach for the coach;
• the measurements you log for the coach — weight (including weight imported from Apple Health), blood glucose, blood pressure, sleep;
• that you are training at a gym right now.

You can leave your coach at any time: Profile → Menu → Account → My coach → Leave coach. Blocking the coach also ends the link. After that your coach receives nothing new; reports and measurements from the time you worked together stay in the coach's history.

Services that process data for us

• Supabase — database, sign-in and file storage. Servers in the EU (Ireland).
• Backup server in New York, USA — a daily copy of the database and files, so that data can be restored after a failure.
• Apple — Sign in with Apple; push notifications (the notification text, such as a message preview, passes through Apple's service); Apple Health on your device; maps (Apple MapKit receives the map area being shown); crash reports (MetricKit).
• Google — gym search: your coordinates and search radius are sent to Google Places to find gyms near you.
• Capgo — delivers app updates; receives a random device identifier created by the app, the app and iOS versions, and your IP address.
• Cloudflare — hosts vprava.me, app.vprava.me and coach.vprava.me and processes requests to them, including your IP address.
• Resend — sends emails such as password reset codes; receives your email address.
• Discord — the developer receives technical alerts there; an error alert may include your username and a description of the error.
• Open Food Facts — when you scan a food barcode, only the barcode number is sent to look up the product.
• If you choose to open directions to a gym in Apple Maps, Google Maps or Waze, that app receives the gym's address.

The backup server is in the USA, outside the EU, and some of the services above may also process data outside the EU. Data is sent there only for the purposes described in this policy.

How long we keep data

• Account data — while you have an account. After you delete your account, it is erased 30 days later (see below).
• Error reports — 90 days. Usage events — 12 months.
• Backups: database backups are rotated, and the oldest is kept for up to about 6 months — data you deleted can remain in them until then. Files you delete (photos, videos, voice messages) are kept in the backup for 30 days, then erased.

Deleting your account

Profile → Menu → Account → Delete account. Your profile and content are hidden from others immediately. For 30 days you can sign in and cancel the deletion; after that the account and its data are erased permanently. Chats with you are deleted for both sides; gyms you added to the shared catalog stay in it without your name.

You can also ask for deletion by writing to support@vprava.me.

Your rights

You can ask to access, correct or delete your data, to receive a copy of it, to restrict or object to its use, and you can withdraw a permission at any time. A copy of your training data is available in the app: Profile → Menu → General → Export data. For everything else, write to support@vprava.me. You also have the right to complain to a data protection authority.

Security

All data travels over an encrypted connection (HTTPS), and access rules let each person reach only their own private data. Chat media, progress photos and photos for your coach are stored privately and opened through temporary links. Messages are not end-to-end encrypted.

Changes

When this policy changes, we update it here and change the date below.

Last updated: 4 October 2026