Your training, your data.

This notice covers the Bravilo iPhone app. The website and the early-access list have their own notice: bravilo.app/privacy. Last updated 4 November 2026.

Who we are

Bravilo is a trade name of Usman Tahir, a sole proprietorship registered with the Dutch Chamber of Commerce (KvK 92870775) in Amsterdam, the Netherlands. We decide how your data is used. Questions or requests: privacy@bravilo.app.

What we keep

• Your account: your email address (or the address Sign in with Apple gives us), a sign-in record, when you last used the app and which version you have.
• Your setup and profile: the first name you give, your goal, experience, how long you’ve been away from training, how often and how long you train, the days you prefer, where you train and the equipment you have, the coach voice you pick, your units and your phone’s time zone. Your age, as a birth year, and your height, if you give them.
• Your training: your plan, workouts, sets, weights and reps, notes, how a workout felt, exercises you add or swap and their notes (a seat height, say), other activities you log, workouts you import from Hevy, your messages to the coach, and what the coach remembers about you.
• Health details, only with your yes: areas to keep in mind (for example knee or lower back), what’s sore on a given day, and your weigh-ins.
• Your subscription: which plan you have, your free trial, renewals, cancellations and refunds, as Apple reports them through RevenueCat, and the price you pay in your store’s currency, so a reminder email can name it. Never your card or payment details. After you sign in, the app sends us its App Store receipt until we can tell an App Store download from a TestFlight test copy, which decides who can get a founder’s place. We keep only that answer, not the receipt.
• Feedback you send from Settings, with the app version.
• App use: when the app opens, which screens you see, each setup question shown and answered, when your plan is built, the plan reveal, finishing setup, and later the subscription screen and trial. If something can’t be saved after several tries, the kind of request and the error, never what was in it. Never what you type or a health detail. You can turn this off in Settings → Privacy → Share how I use the app. In Belgium it stays off until you say yes.

We don’t collect your location, contacts, photos or advertising identifiers. You need an email address or Sign in with Apple to have an account; everything else is up to you, and the app works without health details.

Why, and on what basis

• To provide the app you signed up for: your plan, guidance in each workout, your history and the coach. This is needed for our agreement with you (GDPR article 6(1)(b)). Your plan is built by fixed rules from your answers; it has no legal or similar effect on you, and you can change any exercise.
• Your subscription: knowing whether it’s active, emailing you before a trial ends or a renewal is charged, and checking who can get a founder’s place. This is also needed for our agreement with you (article 6(1)(b)).
• Your age is used only to fit the plan to you: some exercises aren’t picked automatically for people 60 or older, and people 65 or older coming back after a few months start more gently. The coach never gets it.
• Health details are a special category of data. We keep and use them only with your explicit consent (article 9(2)(a)), which you give in the app and can withdraw anytime in Settings → Privacy. Turning it off asks first, then deletes the health details we kept: your areas to keep in mind, your weigh-ins, injuries and illnesses Fold remembered, the words that named a pain on your workouts, and the chat messages that named a pain, an injury or an illness, with their words in the coach logs. Your workouts stay. Your other chat messages stay until they expire (90 days, 30 in the coach logs). Withdrawing doesn’t undo what was done before. We keep a record of each yes and no, with its date, for as long as you have an account, to show what you agreed to.
• App-use events and coach logs are kept to find bugs, see where setup loses people and check that the coach’s answers are right. That is our legitimate interest (article 6(1)(f)). You can object at any time with that switch, or by emailing us.
• Technical logs and limits keep the service running and stop misuse, also our legitimate interest.
• Answering Apple’s refund questions happens only with your consent (article 6(1)(a)), described below.
• Answering your privacy requests, and keeping a record of them, is something the law requires of us (article 6(1)(c)).

The AI coach

Fold, the app’s coach, is an AI. When you message it, your message goes to an AI provider together with what it needs to answer well: your plan and next workout, your recent workouts and best sets, your last few messages from the past day, what Fold remembers about you and, with your consent, your body weight and the areas to keep in mind. We don’t give the provider your account name, email, account ID, age or height. Before anything is sent we take out your name as you gave it in setup, and any email address, link or phone number we can spot, from your message and from what Fold remembers and your workout names. Anything else you type goes as you wrote it, so if you mention pain or an injury, that goes too. Leave out details you’d rather keep private. Our own record of what went to the AI keeps the cleaned message, not what you typed; your conversation keeps your own words, so you can read it back. Requests come from our servers, not your phone, so the provider doesn’t see your device or IP address. The coach can only suggest; every change to your plan or workouts goes through the app’s own rules.

Your permission first. Before your first message, the app asks whether it may share your chats with Google and OpenAI: Agree or Not now. Nothing goes to them until you agree. With Not now, only the chat is off; the rest of the app works as before. You can change your answer anytime in Settings → Privacy, and turning it off stops sending at once. We keep when you answered and which version of the words you saw.

Talking to the coach. When you talk instead of type, your phone turns your words into text itself, and the recording never leaves it. Only if your phone can’t do that, a short recording (at most 5 minutes a day) goes through our server to Google to be turned into text. We don’t keep it, and Google keeps it for up to 55 days only to check for misuse, as with messages.

Who sees it

Bravilo’s founder can see your account, profile, workouts, weigh-ins, feedback and coach messages in Bravilo’s admin pages, to help when something goes wrong and to check the coach’s answers. No one else at Bravilo can. We never sell your data or share it with advertisers.

Who helps us

These companies process data for us, under data-processing agreements. Each is bound by contract to protect your data at least as well as this notice promises.

• Supabase stores your account details, workouts, chats and health details in a database in Ireland (EU), so the app can show them, and handles sign-in.
• Vercel runs the app’s server in Dublin (EU).
• Google (Gemini) answers coach messages and, rarely, turns a short voice recording into text, as described above. Google processes them outside the EU, on the terms of its paid service: it keeps them and its replies for up to 55 days only to check for misuse, and doesn’t use them to train its models.
• OpenAI answers a coach message when Gemini is unavailable, or slow: if Gemini hasn’t answered within 3 seconds, the message also goes to OpenAI and the first answer is used. OpenAI may process it outside the EU and keeps it for up to 30 days to check for misuse; it doesn’t use it to train its models.
• Resend sends our emails from servers in Ireland: sign-in codes, the copy of your data you ask for, and the subscription reminders (two days before a free trial ends, a week before a subscription you turned off ends, 30 and 7 days before a yearly renewal, two weeks before a founder’s six months end), which carry your name, plan, price and dates, and a founder’s number. It keeps sending records in the United States.
• Sentry receives error and crash reports from the app’s server and the app: what went wrong and where, never your IP address, email, typed words or account details. It keeps them for 30 days.
• Better Stack checks every few minutes that our server answers. It sees no personal data.
• Expo delivers app updates; its servers see your phone’s IP address when the app checks for one.
• Apple delivers the app, runs Sign in with Apple if you use it, and handles subscription payments under its own privacy policy. We see your subscription’s plan and history, never your card.
• RevenueCat keeps track of your subscription for us: it receives Apple’s records of your plan, trial, renewals, refunds and price, and any free months we gave you, linked to your account’s ID, and tells the app whether your subscription is active. It never sees your card. RevenueCat is in the United States.

Vercel and Supabase keep short technical logs, including IP addresses, to run the service and stop misuse. Some of these companies are in the US, or have US staff who help run their service. When your data leaves the EU, we rely on the EU’s standard contract clauses or, where the company is certified, the EU–US Data Privacy Framework. For people in the UK, the UK versions of these apply. Email us for a copy.

Refund requests to Apple

If you turn on “Answer Apple’s refund questions” in Settings → Privacy, and later ask Apple to refund a Bravilo year that renewed by itself, Apple may ask us about it. We then tell Apple three things: that the subscription worked, that a free trial was offered before the first charge, and that we prefer Apple to refund the part of the year you haven’t used. We send nothing else: not your workouts, your messages or your health details. We don’t answer for a first year or a monthly subscription. Apple decides the refund.

The legal basis is your consent (GDPR article 6(1)(a)). The switch is off until you turn it on, and you can turn it off at any time; we then stop answering. We keep a record of each yes and no, with its date, for as long as you have an account. Apple keeps what we send under its own privacy policy; to ask Apple for its copy, or to have it deleted, go to privacy.apple.com.

How long we keep it

• Your account, profile and training: until you delete them or your account.
• Feedback you send: 2 years, or until you delete your account.
• A Hevy import you don’t finish: deleted 7 days after its preview expires.
• Your chat with Fold (what you send and its replies): 90 days, then deleted.
• What Fold remembers about you (shown in Settings → Coaching → What Fold remembers): until you delete it, or your account. Trips, events and illnesses end on their own and are deleted 30 days after they end.
• Coach logs (kept so we can check the coach answers well): 30 days, then only daily counts remain.
• App-use events: 90 days, then only daily counts remain.
• How many seconds of voice you used: 30 days, for the daily limit.
• Your yes or no to keeping health details: for as long as you have an account.
• Your subscription’s record, its price and whether you joined from the App Store or a test copy: for as long as you have an account.

Your rights

You can see, correct or delete your data, ask us to limit how we use it, get a copy of it, and withdraw your consent. Settings → Account → Delete account removes your account and your data at once, deletes your record at RevenueCat, and disconnects Sign in with Apple if you used it; copies the AI providers keep for misuse checks expire on their own, as above. For a copy of your data, tap Export my data under Settings → Your data: a zip of your workouts, weigh-ins, activities, plan and answers goes to your email within minutes. For anything else, email privacy@bravilo.app. We answer within a month, or up to three months for a complex request, and we’ll tell you if it will take longer.

Your right to object. You can object at any time to the uses based on our legitimate interest: app-use events, coach logs and technical logs. Email us and we’ll stop, unless we have a strong reason that outweighs yours, such as stopping misuse.

If you’re unhappy with how we handle your data, tell us first and we’ll answer within 30 days. You can also complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens, in Belgium the Gegevensbeschermingsautoriteit, in the UK the ICO, or the authority where you live.

Age

Bravilo is for people 18 and over. If we learn that someone under 18 has an account, we delete it.

Changes

If we change this notice in a way that matters, we’ll tell you in the app first. The date at the top shows the last change.