Privacy Policy

• You choose what to log. Zoran stores it so it can track your training and suggest changes.
• Some of what you can log is health-related (pain, injury, sleep, bodyweight). We treat it as sensitive.
• We do not sell your personal data.
• The coach sends your chat messages to an outside AI company so it can reply. See "Who else handles your data".
• You can download all your data and delete your account. Deleted accounts are permanently erased after 30 days.

Only what you give us or what the app records while you use it.

• Account: your name and email address, and how you sign in (email and password, or Google).
• Date of birth: we ask once, only to check you are old enough. We keep the date and the result of the check.
• Training: exercises, sets, reps, weights, RPE, session dates, training blocks, session templates, personal records, meet date, weight class and federation.
• Health and wellbeing (sensitive): pain flags, pain area and severity, injury history, soreness, stress, sleep hours, bodyweight and caffeine, if you enter them.
• What the coach remembers about you: goals, constraints and preferences, saved as short notes you can see and delete in Coach memory.
• Coach chats: the messages you send the coach and its replies, and the suggestions it makes and whether you approved or rejected them.
• Product usage: which screens and features are used (for example that a session was saved), recorded in Zoran's database and by Base44's built-in analytics, so we can fix and improve Zoran. We do not use this for advertising.
• Crash reports: if the app crashes, a report goes to our error-reporting service (see below). It is designed to leave out your name, email, training data and chat text, and to cut personal details out of web addresses.
• Technical information your browser shares with any website, such as browser type and device type.

We use your information to run your account, record and show your training, work out training suggestions, keep Zoran secure, fix bugs, and answer you when you contact us.

Where the law requires a legal basis (for example in the UK and EU): we rely on our contract with you to provide Zoran, on our legitimate interest in keeping it working and secure, and on your explicit consent for health information. [To confirm: Zoran does not yet ask for this consent in the app. A consent step must be built before launch, and a lawyer should confirm the wording and legal basis for each region.]

We share information only with the services that run Zoran for us. Each may process it only to provide their service to us.

• Base44 (Wix.com Ltd) hosts Zoran, stores its database, handles sign-in and sends account emails. Base44 stores data in the United States by default, and uses its own sub-processors for infrastructure.
• The AI company that processes coach chat: [To confirm: name of the company that processes the coach's AI messages, and where. Zoran's coach is configured with a Gemini model, but Base44 lists only other providers as sub-processors. Ask Base44 support.] Your chat messages, and whatever context the coach needs to answer, are sent to it. Please do not put anything in the chat you would not want an outside company to process.
• Sentry receives crash reports so we can fix bugs, and stores them in the European Union (Germany). [To confirm: lawyer to check this wording and Sentry's project settings.]
• Google, if you choose to sign in with Google.
• External AI tools you connect yourself: if you approve an outside AI assistant to access your Zoran data, it can see what you allow. You can stop this any time.
• Payment provider: [To confirm: not applicable until paid plans exist; name the payment provider or merchant of record then.]
• Authorities, if the law requires it.

We do not sell your personal data or share it for advertising.

Zoran's data is stored in the United States by default. If you are in the UK, EU or elsewhere, your information is transferred there. [To confirm: the safeguard for these transfers, for example Base44's data processing agreement and standard contractual clauses. A lawyer should confirm.]

• While your account is open we keep your data so Zoran works.
• If you delete your account, we schedule it for deletion and keep everything unchanged for 30 days so you can change your mind. We email you a link to restore it, and you can also restore it by signing back in.
• After 30 days your account and everything in it is permanently deleted: training logs, plans, chats, coach memory, notes and usage events. We keep only a one-way fingerprint of your email address and the dates, as proof that the deletion happened.
• Copies in backups or logs may last a little longer before they are overwritten. [To confirm: Base44's backup retention period.]
• [To confirm: anything we must keep longer, for example payment records once paid plans exist, and for how long.]

• Download your data: Settings, then "Download JSON export". It covers your training, plan, coach conversations and coach memory. It does not include anonymous product analytics, access-request records or your sign-in record.
• Restore from a download: Settings, then "Restore from an export" brings back your training data.
• Correct or delete individual entries: edit or delete logs, sessions, exercises, blocks, templates and coach memory in the app.
• Delete your account: Settings, then "Delete account". This starts the 30-day process above.
• Depending on where you live (for example the UK, EU, UAE or some US states) you may also have the right to access, correct, delete, restrict or object to our use of your data, to withdraw consent, and to complain to your data protection authority. Contact us at the address above to use any of these.

Pain, injury, sleep and similar entries are health-related. We use them only to record your training, keep suggestions cautious, and show you your own history. The coach is built to hold or reduce load when you report pain, and to tell you to see a professional for anything medical. Zoran is not a medical device and does not diagnose or treat anything.

[To confirm: a lawyer should decide whether a separate consumer-health-data notice is needed, for example for Washington State's My Health My Data Act, and whether Zoran needs a distinct consent for sharing health chat with the AI company.]

You must be at least 13 to use Zoran, and we ask your date of birth when you first sign in. If you are under 16, a parent or guardian must agree before you use it: we ask you to confirm they have. [To confirm: a lawyer should confirm that 13 and 16 are the right ages, and that a ticked confirmation is enough. It is self-declared and cannot be verified.] Zoran does not knowingly collect information from anyone under 13. If you think a child under 13 has an account, contact us and we will delete it.

Zoran is served over HTTPS and runs on Base44's hosted platform. In the app, only your own signed-in account can read your data. A small number of Zoran administrators can access the database for support and maintenance. [To confirm: who has that access and under what rules.] No system is perfectly secure. Use a strong, unique password, and turn on two-factor sign-in if you sign in with Google. If a breach affects you, we will tell you and the authorities as the law requires.

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.