Privacy policy

Who is responsible

The data controller is Verrion Systems Ltd, a company registered in England and Wales (company number 17265988). Its registered office is 1 Woodburn Drive, Bury St Edmunds, IP32 6FY. Athlif is a product of Verrion Systems Ltd.

The contact email is athlifapp@gmail.com.

Account

You do not need an account. Athlif works fully without one.

The only sign-in is Google, through Supabase Auth. Signing in does not upload your training data by itself. Data is uploaded only if you turn on Cloud Sync.

What stays on your device

If Cloud Sync is off, your Athlif data stays on the device.

Even with Cloud Sync on, these are never uploaded:

• built-in exercises
• progress photos, unless you turn on the separate photo option
• AI API keys
• device-only records

Android cloud backup and device transfer are turned off for Athlif. Android does not copy this app’s data in a cloud backup or a device transfer.

Cloud Sync

Cloud Sync is off until you turn it on. It is hosted on Supabase.

To be confirmed This page does not state which region Supabase uses to host synced data.

Once Cloud Sync is on, it syncs:

• settings and profile: sport, sessions per week, duration, level, units and gender
• custom exercises
• workouts, including heart-rate and calorie samples recorded on Wear OS
• routines
• programmes
• personal records (PRs)
• warm-ups
• stretches
• body measurements: body weight, circumferences and an optional body-fat percentage
• flexibility data

Progress photos have their own opt-in. It is off by default. Photos are uploaded only if you turn that option on.

Before a row is uploaded, the phone encrypts the row contents with AES-GCM. Supabase can still see metadata: your account ID, the table name, the row ID, timestamps, a device ID and deletion markers.

Wear OS

During a workout, the watch collects heart rate. If you grant activity recognition, it also collects total calories. The watch does not collect location. The watch has no internet access. It sends data only through the phone.

The Wear OS app needs the Athlif phone app. The phone and the watch link through Google Play Services Wearable.

Health Connect

Health Connect stays off until you enable it. When you do, Athlif reads steps and heart rate. It reads and writes exercise sessions (strength training), heart rate and active calories. Athlif does not use Google Fit.

Optional AI

AI is optional. You can plan and log training without it.

If you use it, you supply your own API key and choose a provider: Anthropic, OpenAI, Google Gemini, xAI, DeepSeek, Mistral, or a custom OpenAI-compatible endpoint.

Data is sent to that provider only when you:

• generate or refine a plan
• generate a warm-up or a stretch
• test the connection

A plan request includes your training profile, the goal you typed and the exercise catalogue. A warm-up or stretch request sends the exercise name.

The API key is encrypted with the Android Keystore. It stays on the device and is never synced. The provider you choose has its own privacy policy, and that policy applies to what you send them.

Analytics, advertising and payments

The app code this policy describes does not include analytics, crash reporting or advertising SDKs. Athlif has no payments, subscriptions or in-app purchases.

To be confirmed It is not yet confirmed whether the version on Google Play includes an extra Google services configuration file. If it does, the sentence above about analytics may need to change.

Permissions

The phone app can ask for internet, camera and photo access (for progress photos), notifications, a foreground service, and Health Connect.

The watch app can ask for body sensors and heart rate, activity recognition, notifications, vibration, and a foreground service.

Services Athlif uses

Depending on what you turn on, Athlif contacts:

• Supabase, for sync and sign-in
• Google Sign-In
• Google Play Services Wearable, for the phone and watch link
• Health Connect
• Wear Health Services
• the AI provider you pick, only in the cases under Optional AI

Exporting your data

In the app, Settings, then Export All Data, creates a JSON backup. The file includes workouts, records, plans, measurements and photos. API keys are removed from it.

Deleting your account and synced data

Synced data

Settings includes Delete Remote. After you confirm, Athlif immediately deletes your synced data from Supabase. Data stored on the device is kept.

Your Athlif account

There is no way to delete an Athlif account inside the app. If you have signed in, email athlifapp@gmail.com from the Google account address you used to sign in, and ask for your Athlif account to be deleted.

If you have never signed in, there is no Athlif account for you. Your data is on the device.

To be confirmed This page does not state how long Supabase keeps backups or sign-in records after synced data is deleted, or after an account deletion request.

To be confirmed This page does not promise how quickly a deletion email is answered.

To be confirmed Whether an in-app account deletion option will be added is not decided here. Until that exists, the email above is how you request account deletion.

Help with the steps is on the support page.

Contact

Questions about this policy: athlifapp@gmail.com.

Help using the app: Support.