1. Who we are
Palestrico is a mobile workout-tracking application for iOS and Android. The data controller is Mint Apps, based in Italy. Privacy contact: palestrico.app@gmail.com, or the support page.
This policy covers the Palestrico app and this website. It does not cover the app stores used to download the app, or Buy Me a Coffee and its payment provider, which handle Palestrico Pro membership and payment data under their own policies. The app is offered in Italy at launch and is available in English and Italian.
2. What we collect
We collect only what the app needs to work. Nothing here is bought from a data broker or enriched from other sources.
We do not collect precise location, contacts, calendar, microphone audio or your device's photo library. The camera and photo picker are used only for the shots you take or choose for a progress entry.
3. Why, and on what legal basis
Performance of a contract - creating and securing your account, running your subscription and providing support. Your training data is currently stored on your device rather than our systems.
Explicit consent - body measurements, progress photos and any personalised advertising. You can withdraw consent at any time by deleting the entries, turning the field off, or changing your ad choices in Settings.
Legitimate interests - keeping the app stable and secure, preventing abuse and fraud, and understanding aggregate feature use to decide what to build. We weigh this against your privacy and keep the data minimal and pseudonymous.
Legal obligation - retaining tax and transaction records, and responding to lawful requests.
4. Where your data lives
Palestrico is offline-first. Your phone's local database is the source of truth while you use the app.
On both the free and Pro tiers, training data, measurements and photos currently stay on your device. They are not uploaded, so we cannot read them - and we also cannot recover them. If you lose or reset the phone, that history is gone. The app states this plainly on first run and in your profile.
Cloud sync for workout data is planned for a future Pro update, but it is not currently available. Before launching it, we will update this policy to explain what is uploaded, how it is protected and how long it is kept.
5. Progress photos
Progress photos are the most sensitive thing in the app and are treated accordingly.
They are stored locally on your device and are not uploaded to our servers.
Comparisons and shareable images are composed entirely on your device and handed to the operating system's share sheet. Nothing is uploaded to build them, and you can strip the measurement overlay off anything you export.
No analytics or advertising code is loaded on any screen that displays a progress photo.
They are never used to train models, never reviewed by staff except at your explicit request for support, and are included in both export and deletion.
6. Advertising and consent
Free-tier users see advertising throughout the app, including inside a live workout. Paid users see no advertising at all and the ad code is never initialised for them.
If you are in the EEA, UK or Switzerland, we ask for your consent through a certified consent prompt (IAB TCF v2.2) before any personalised ad request. Declining keeps every feature of the app - you simply see non-personalised ads. You can change the choice at any time from Settings.
We never pass your training data, body measurements, photos or health-related information to an advertising network, and we do not sell or share personal information for cross-context behavioural advertising as those terms are used in US state privacy laws.
7. Analytics and crash reports
We record pseudonymous product events - a session was started, a plan was created, the paywall was seen - to understand which parts of the app work. Event payloads never contain photos, measurements, notes or free-text you typed. Crash reports contain diagnostic stack traces and device information, and are retained for a shorter window than product events.
8. Who we share with
We do not sell personal data. We share it only with a small number of service providers who process it on our instructions, under a data-processing agreement, and only to make the app work. These are the categories of recipient:
We will tell you the current named providers in each category, and the safeguards covering them, if you ask from the support page. We name categories rather than vendors here so this page stays accurate when a provider changes.
We may also disclose data where the law requires it, to protect our rights or someone's safety, or to a successor in a merger or acquisition - in which case we will tell you before your data moves under a different policy.
9. International transfers
Some processors are established outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, on an adequacy decision where one applies, and on supplementary technical measures such as encryption in transit and at rest. You can request a copy of the relevant safeguards from the support page.
10. How long we keep it
Account and profile data - for as long as your account exists.
After deletion - removed from live systems promptly and purged from encrypted backups within 30 days.
Crash diagnostics - 90 days. Analytics events - 24 months. Transaction records - as long as tax law requires, typically 10 years in Italy.
11. Your rights
You can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interests. Where processing rests on consent, you can withdraw it without affecting anything done before.
Two of these you do not need to ask us for: export produces a machine-readable bundle of your data - one CSV per table, one JSON that could rebuild the account, and your photos at original quality - and delete account is reachable in two taps from your profile, or from the account deletion page if you no longer have the app, and destroys your account, training history, measurements and photos. Deleting the account does not cancel your Buy Me a Coffee membership; cancel it separately from your Buy Me a Coffee account.
For anything else, use the support page. We answer within 30 days. If you are unhappy with the outcome you can complain to your national supervisory authority - in Italy, the Garante per la protezione dei dati personali. If you are a California resident, you have equivalent rights of access, deletion, correction and portability, and we do not discriminate against you for using them.
12. Children
Palestrico is not intended for children. You must be at least 16 to create an account, or older where your country sets a higher age for consenting to data processing on your own. Sign-up is blocked below 16 with no exception. We do not knowingly collect data from anyone under that age; if you believe a child has an account, write to us and we will delete it.
13. Security
Account data is encrypted in transit and at rest. Server records are readable only by the account that owns them, enforced by database-level rules rather than by the app. Access to Palestrico Pro is based on membership information supplied by or verified against Buy Me a Coffee, rather than an unverified claim from the device. Workout data, measurements and progress photos currently remain on your device. Access to production systems is limited to the people who need it and is logged. No system is perfect; if a breach affects your data we will notify you and the relevant authority as the law requires.
14. Changes
We will update this page when the app changes, and the effective date above moves with it. If a change materially affects how we use your data we will tell you in the app before it takes effect and, where the law requires, ask for consent again. Previous versions are available on request.
15. Contact
Privacy requests, data requests and anything else: the support page. To close your account without the app, use the account deletion page. Both reach palestrico.app@gmail.com, the single verified address Palestrico sends and receives from until it runs its own domain.