Privacy
What we do with your data.
This describes what the application actually does, not what we intend it to do. The numbers on this page are read from the code that enforces them, so it cannot quietly drift out of date.
What we hold
Your intake — goal, experience, training days, injuries, measurements
Every weigh-in, with whether it was typed or read from a scale photo
Daily calories and protein, and whether you marked the day complete
Tape measurements, caliper folds, and derived body-fat figures
Body-scan readings — muscle mass, fat mass, visceral level
Your check-in answers on soreness, pump, workload, sleep, motivation
The calorie and macro targets you were given, and when
Progress photo records — a storage path and a date, never a public link
Your programmes, with the reasoning behind each one
Every set you have logged
Notes your coach has written about your training
That is the complete list — it is generated from the same constant the export and the deletion use, so all three describe the same set. You can download every one of these from your Profile tab.
Your photographs
Location and camera data never leave your phone. The image is re-encoded in your browser before it is uploaded, which discards EXIF including GPS as a side effect of the conversion rather than as a step that can be forgotten.
The store is private. There is no public URL for your photos and no code path in this application that can produce one. When you view them, the app mints a signed link that expires after 300 seconds and is never saved anywhere.
Only you and your assigned coach. Every read resolves your own record first and checks it belongs to you.
Deleted after 24 months automatically, and you can delete any photo, or all of them, at any time from the Body tab. Deletion removes the file from storage, not just the reference to it.
Publishing is a separate permission. Consent to store private check-in photos cannot cover putting one in a before-and-after ribbon. That requires a specific, revocable opt-in per photo, and no photo has it by default.
What we compute, and what we do not
Your expenditure is fitted to your own energy balance over a 28-day window rather than taken from a population formula, and every figure is shown with how much of it came from your data versus the formula.
Estimates are labelled as estimates. A body-fat figure derived from tape or calipers is never presented as a measurement, and the method that produced it is stored alongside it.
Nothing here diagnoses anything. This application reports energy balance and training load. It does not assess disease, and where a number suggests something worth investigating it says to speak to a practitioner.
No advertising, no data brokers, no profiling for sale. There is no mechanism in this application to share your data with a third party for marketing, and none is planned.
Where it lives
Your records are stored in the European Union. Under POPIA section 72 that is a cross-border transfer of special personal information, permitted because the EU’s data-protection regime is recognised as providing adequate protection.
Health information is special personal information under section 26 of POPIA. That raises the standard we are held to rather than lowering it, and it is why photographs are handled the way described above.
Your rights
You can ask what we hold, get a complete copy, and have it deleted. All three are self-serve on the Profile tab — you do not need to ask anyone’s permission or wait for a reply.
Deletion is real deletion, and the app verifies it afterwards by re-reading every category and reporting anything left. If something survives, you are told rather than reassured.
One record of the deletion itself remains — that an account asked to be erased, and when. It contains no health data, and POPIA requires us to be able to demonstrate that a request was actioned.
Odyssey Health, South Africa. If something on this page does not match what you see the app doing, that is a bug and we want to know about it — tell your coach.