Privacy Policy

1. Data controller

The controller of your personal data is the Operator identified above. For any privacy request, use the contact details listed there.

2. What data we collect

• Account data: name, email, phone (optional), password (stored hashed by our identity provider), gender (used for the women-only studio rule and to size the energy targets of your plan), year of birth (optional), your language, and your country, taken from your phone’s region setting rather than from its location.
• Booking and membership data: plans, payment status, bookings, attendance.
• Payment data: payments on the website are processed by Stripe, and purchases in the app by Apple (App Store) or Google (Google Play). We receive the result — the product, its status and dates, and a transaction or purchase identifier — never your full card details.
• Wellness-coach data: your goals, dietary preferences and allergies, health conditions or injuries you tell us about, how you feel from day to day, your food log, body metrics (e.g. height, weight), sleep, steps, workouts, the equipment and places you train with, your chat messages with Wyla and what she remembers about you.
• Data from Apple Health or Health Connect, only if you connect them (section 4).
• Photos and documents you choose to send, the barcode scanner, your location during runs, walks and rides, and — only if you turn it on — the approximate area where you train, for the weather (section 5).
• App data: notification tokens, usage events, error reports and guided-session timelines (section 6).
• What you send us: feedback from the app, refund requests and withdrawal statements, and the contact form and waitlist on the website (name, email, message).
• Technical data: limited local storage needed to keep you signed in; basic logs for security and reliability.

3. Health-related data (special category)

Some wellness-coach data (e.g. allergies, body data, sleep, workouts, food log) is special-category data under GDPR art. 9. We process it on the basis of your explicit consent, given via a separate checkbox at account creation (or, for existing accounts, in the app), recorded with the date and the version of the text you accepted. You can withdraw consent at any time by deleting your account from the app or writing to us — withdrawal does not affect prior processing.

If your account has no consent on record (for example, because it was created before this checkbox existed), the app asks for it at the top of Home. Until you give it, nothing read from Apple Health or Health Connect is kept and Wyla does not answer you, so your health data is not sent to OpenAI; what you enter yourself in the meantime, such as a meal, your weight or a workout, is only stored in your account so that the app can show it to you.

4. Apple Health and Health Connect

Connecting Apple Health (on iPhone) or Health Connect (on Android) is optional, and the app works without it. Wylo keeps nothing read from them unless you have given the health-data consent described in section 3, and the current version of the app reads nothing before you have given it: if you have not, it asks for it when you choose to connect. Once you connect, Wylo reads only the types of data you allow on your phone’s permission screen, and you can withdraw that permission at any time in Health Connect or in your iPhone’s Health settings. From then on nothing new is read; what was already imported stays in your Wylo history until you delete your account or ask us to delete it, and imported workouts and meals can also be deleted one by one in the app. If you allow it, the app also syncs in the background (on Android, about every six hours), and when you first connect it imports your past workouts once, going back up to two years, so your plan starts from your real training history.

What is read is stored with your account on our servers in the EU and used by Wyla to plan and adjust your training and meals — so it is also part of what is sent to OpenAI when she answers you (section 8). Data read from Apple Health or Health Connect is never sold, never used for advertising or marketing, never used for decisions about credit or insurance, and never passed to anyone except the providers in section 8 that process it on our behalf to provide these features. People at Wylo do not read it unless you ask us to (for example, when you report a problem), it is needed for security, or the law requires it. Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

What we read, with your permission, and why — and the one type of data we write:

• Exercise sessions (workouts): the type, start and end time, duration, energy and distance of workouts you recorded in other apps or on a watch, so Wyla’s plan counts them instead of asking you to log them again.
• Heart rate: during each imported workout, and live during a guided run, to show how hard a session was and to set the intensity of the next ones.
• Sleep: how long you slept each night (and any naps), so Wyla can take your recovery into account — for example, by lightening your training after a short night.
• Weight and body fat: to track your progress toward your goal and to size the energy and protein targets of your meal plan.
• Nutrition: for each meal logged in other apps, its energy, protein, carbohydrates and fat, the name of the app that logged it (on Health Connect, the meal’s own name, when that app gave it one) and when it was eaten, so your food log and what is left of your daily targets are complete.
• Steps and active calories burned: daily totals, shown on Home and counted in the energy you burned that day.
• Total calories burned and distance (Health Connect): the energy and distance of each imported workout, for your workout summary and your pace progression.
• Workout routes (Apple Health only): for an outdoor workout, the route is used on your iPhone only to work out the distance covered over time; the GPS coordinates are not sent to us.
• What Wylo writes — nutrition: when you mark a meal as eaten, we write its name, meal type, energy, protein, carbohydrates and fat to Apple Health or Health Connect, so your other health apps see the same food log. Wylo writes no other data.

5. Camera, photos, documents and location

The app uses your camera, your photos and your location only for things you start yourself:

• Photos you send: a photo of a meal (to estimate what is on the plate), a photo in a chat with Wyla, or photos of a gym (to recognise the equipment). They go to our servers and to OpenAI, which reads them. Meal and chat photos are kept in your history; gym photos are not stored once the equipment has been recognised. We do not use the location a phone can store inside a photo.
• Documents you send in a chat with Wyla: PDF, Word, Excel, CSV and text files, up to 10 pages per message (each photo counts as one page). They go to our servers and to OpenAI, which reads them so that Wyla can answer you: a PDF is sent as it is, while from the other files we extract the text on our servers and send only that text. We keep the document so that Wyla can read it again when you ask about it later — a PDF as the file itself, the other files as the text we extracted — on our servers in the EU; when she reads one again, it goes to OpenAI again in the same way. You can see each one and delete it in the app, under Account › Wyla's memory, and all of them are deleted with your account.
• Barcode scanner: the camera image is read on your phone by Google ML Kit, and only the barcode number is sent to us, to look the product up in Open Food Facts. No image leaves your phone.
• Camera during workouts: the camera form coach is not available in the current version of the app, so the app does not use the camera during a workout. Before we offer it, we will update this policy.
• Location during runs, walks and rides: when you start one in the app, it asks for location permission and uses your phone’s GPS to measure distance and pace, also while the screen is locked (on Android, a notification is shown for as long as tracking runs). The GPS coordinates stay on your phone: only the distance, pace, time and heart rate of the session are uploaded, never the route. Apart from this and the weather (next item), the app does not use your location.
• The weather where you train: only if you turn it on (on Home, “Let Wyla check the weather where you train”), the app reads your phone’s location at low accuracy, rounds it on the phone to an area of about 10 km (one decimal of latitude and longitude) and sends only that area to us. We keep it with your account, refresh it at most every six hours while you use the app, and use it to ask the Norwegian Meteorological Institute (MET Norway) for the forecast of that area — from our servers, with nothing that identifies you — so that Wyla can suggest moving or easing a session for heat, cold, rain or wind, and a guided run’s target paces can ease in the heat. If you turn location off for the app, we delete the stored area the next time you open it; deleting your account deletes it too. The forecast is MET Norway’s, used under the CC BY 4.0 licence.
• Microphone: the app does not record audio. Voice commands during workouts are not available in the current version.

6. Notifications, app usage and error reports

We show no ads, use no advertising or analytics services from other companies, and the app does not use your device’s advertising ID. What the app sends us:

• Notifications: if you allow them, your phone’s notification token is saved with your account so that Wyla’s reminders and messages reach you. They are delivered by Google’s Firebase Cloud Messaging (which uses its own installation identifier) and, on iPhone, by Apple’s push notification service. You can turn them off at any time in your phone’s settings.
• Usage events: we record a few steps ourselves — for example, that the subscription offer was shown, that you started a plan or that a subscription began — and, if you came through one of our campaign links, which campaign it was. We use them only to understand and improve Wylo, and we do not pass them to advertising or analytics companies.
• Error reports: when something fails in the app (for example, a purchase cannot be completed), it sends us an error code, the first line of the technical error and where in our code it happened, the screen, the app version and the platform. We do not add your messages, meals or health values to them. If you delete your account, these reports are kept without any link to you.
• Guided-session timelines: if you have given the health-data consent, the app records what happens during a guided session — the plan's steps (their names) and their timing, pauses, the pace cues, when Wyla spoke and how long each line was, how long the session took and the distance the app measured, and any technical error — so that we can find and fix problems in guided sessions. A timeline contains no heart rate or other data from Apple Health or Health Connect, not what Wyla said to you, no camera images and no location, and it is deleted with your account.
• Workout heart rate: with your health-data consent and access to Apple Health or Health Connect, guided workouts can save available heart-rate readings, session and segment averages and maxima, and a sampled heart-rate trace in your workout record. This applies to indoor workouts as well as outdoor sessions. Wyla can use these records to review your training. A live reading is shown only while recent; a connected watch may not supply live readings. These health readings are separate from diagnostic timelines, are not used for advertising, and are deleted with your account. Phone motion is used on the device to display cadence during guided runs; cadence readings are not uploaded.

7. Why we use your data and legal bases

• To provide the studio, café, bookings and account — performance of a contract (Art. 6(1)(b)).
• To process payments and meet accounting and tax duties — legal obligation (Art. 6(1)(c)).
• To provide the wellness coach and store your preferences and health inputs — your consent (Art. 6(1)(a) and Art. 9(2)(a)).
• To keep our services secure and improve them — our legitimate interests (Art. 6(1)(f)).
• To send service or, with consent, marketing messages — contract or consent.

8. Who processes data for us (processors)

The providers below process data on our behalf: they act on our instructions and only as needed to provide their service. We do not sell personal data and do not share it with advertisers.

Not on this list, because they are not our processors: Apple (App Store) and Google (Google Play), through which purchases in the apps are made and which process them as independent controllers under their own terms and privacy policies, sending us only the result (section 2); and the public food databases (Open Food Facts and USDA FoodData Central) that our servers query for nutrition values, sending them only a barcode number or the name of a food — nothing that identifies you; and the Norwegian Meteorological Institute (MET Norway), which our servers ask for the weather forecast of an area of about 10 km — the area only, nothing that identifies you.

• Amazon Web Services (AWS), in the EU: hosting, the database, storage of your photos, sign-in (Amazon Cognito) and our emails.
• OpenAI: generates Wyla’s replies and plans and reads the photos and documents you send. For this it receives your messages, photos and documents and the profile, health and training data Wyla needs to answer you. We ask it not to store them for later viewing; under its terms for API customers it keeps them only for a limited period, to detect abuse, and does not use them to train its models.
• Stripe: payments on the website.
• Google: Firebase Cloud Messaging (delivering notifications), Cloud Text-to-Speech (turning the text of what Wyla says in guided sessions into audio) and ML Kit, which reads barcodes on your phone and sends Google only technical information about its use and performance, never images.
• Apple: delivering notifications on iPhone (Apple Push Notification service).

9. International transfers

Most processing takes place in the EU. Where a provider (e.g. OpenAI, Google, Apple or Stripe) processes data outside the EEA, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or, for providers certified under it, the EU–US Data Privacy Framework.

10. How long we keep data

We keep account, booking and wellness-coach data for as long as your account is active and as needed afterwards to meet legal obligations (e.g. accounting records, generally for the periods required by law). You can ask us to delete data sooner where no legal duty requires us to keep it.

Fiscal records of payments (invoices, transactions) are retained by our payment processor, Stripe, for the legally required period; when you delete your account, the in-app payment history is deleted along with the rest of your data.

After account deletion we may retain fully anonymous aggregate statistics (e.g. account lifetime in months, workout counts, churn month) — no name, email, identifiers or conversation content, so they cannot be linked to any person.

11. Your rights

• Access, rectification and erasure — the account can be permanently deleted directly from the app (Account → Privacy & data).
• Data portability — a full JSON export, straight from your account.
• Control over the assistant’s memory: in “Wyla’s memory” you can see everything she has remembered and delete any individual item.
• Restriction of or objection to processing; proactive messages and the automatic weekly plan can be turned off in settings.
• Withdrawing consent at any time, without affecting prior processing.
• Lodging a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro).

12. Automated processing

The wellness coach generates suggestions automatically from the inputs you give it. These are non-binding suggestions and do not produce legal or similarly significant effects; you decide whether to act on them.

13. Cookies and local storage

We use only the storage strictly necessary to operate the site and keep you signed in. We do not use third-party advertising cookies.

14. Security

We use technical and organisational measures to protect your data, including encryption in transit, hashed credentials, access controls, and automatic redaction of sensitive identifiers (e.g. card-like numbers) before they reach the AI or storage.

15. Children

Our services are intended for adults (18+). We do not knowingly collect data from children.

16. Changes and contact

We may update this Policy; the current version is published here. For any question or to exercise your rights, contact us using the details above.