Privacy Policy

Effective Date: 26.10.2026 · Last Updated: 26.10.2026

Aveldo is a gym workout and progress tracking app for iPhone. This policy explains what it stores, where that data lives, and who else can see it. The short version: your training is written to your own phone, and you use Aveldo with an account you create by signing in with Apple or Google. Your workouts stay on your phone unless you are an Aveldo member, in which case a copy is kept on our server in the European Union and synced to your other devices. No other user can read your workouts.

What other people can see is a small public profile, and only the people you choose: the name and username you pick, and a few summary numbers about your training, shown to your friends in Aveldo (section 5). Beyond that, a small number of services see something, and this policy says plainly what: our server holds your account and the answers you gave during setup, an analytics service receives a fixed list of anonymous events, and a purchase service handles Aveldo Membership. None of them receives your workouts. If you talk to Aveldo Coach, the beta chat about your own training, your messages and a few figures computed from your log go to our server and from there to Google's AI service to produce the answer, and every chat is kept on our server so we can improve the Coach (section 10).

Contact: legal.aveldo@hotmail.com

1. Who is responsible

Aveldo is developed and published by Christos Alexis Fantino, an individual in Switzerland. For the purposes of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), Christos Alexis Fantino is the data controller for the processing described below.

2. What Aveldo stores on your phone

Everything you enter is written to a local database on your iPhone, and that copy is the one the app works from.

• Workouts and exercisesNames, dates, the exercises inside each workout, and the training day you gave a routine.
• SetsWeight and repetitions for each set, or repetitions alone for a bodyweight exercise, or a duration for a timed one.
• Gym sessionsWhen a workout started and how long it ran, for the gym time figures, and the session currently running.
• Your setup answersWhat you pick when you first open the app: the figure style, how you heard about Aveldo, your weekly goal, whether you train on set days and which, reminder times, weight unit, rest length, rep range, sets per exercise and weight step.
• Muscle recoveryOne value per muscle group, worked out from the sets you logged.
• TrayItems you delete are kept there until you empty it, so a single tap never destroys anything.
• PreferencesUnits, the rest timer's settings, your profile disc's colour, and similar display settings.
• Shared plans you openedA copy of each training plan you opened or sent by link, so it opens again without a download, and the last list of your notifications.

Aveldo never asks for your date of birth, your location, your contacts, your photos, or access to Apple Health.

3. Your account

Aveldo is used with an account. When you sign in with your Apple Account or your Google account, Apple or Google confirm who you are and we receive the result; there is no Aveldo password. An install from before accounts were required already had an anonymous identifier on our server, and signing in makes that same identifier your account, so nothing is duplicated.

What your account holds on our server:

• Your email addressProvided by Apple or Google. With Sign in with Apple you can hide your real address and hand us a relay address instead. Nothing is keyed on the email; a random identifier is what your data is attached to.
• Your name and usernameThe name you type after signing in (or the one your sign-in provider shares, until you change it), and the username you choose. The username is unique and cannot be changed once claimed. Both are part of your public profile, section 5.
• A presence recordWhen you joined, when the app was last opened, the app version, and your device's language and region setting. It tells us how many people use Aveldo and whether an update has reached them.
• Your setup answersThe answers from section 2, stored with your account so we can count how people set up the app and so a second iPhone that signs in starts with your setup instead of the defaults. They contain no workout.

Sign-in tokens are kept in the iOS Keychain on your device. Signing out removes them and leaves the training data on your phone untouched. Signing in with a different account than the one this phone belongs to clears the previous account's local training data first, so two people's logs are never mixed on one device. If Apple tells us you revoked Aveldo's access to your Apple Account, the app signs you out.

4. Cloud backup and sync (Aveldo Membership)

For an Aveldo member, Aveldo keeps a copy of your training log on our server: your workouts, exercises, sets and gym sessions, with their names, dates, weights, repetitions and durations, including items sitting in the Tray. The copy is refreshed shortly after the app opens and when you leave it. When the app opens, it also fetches any workout the copy holds that this phone does not, which is how a second iPhone, or a reinstall, gets your training back. Deleting a workout permanently from the Tray, or using Reset logged data in Settings, removes the same rows from the copy.

The copy is stored in the European Union, it is attached to your account, and no other user can read it. We hold it only so your history can outlive your device; we do not analyse it. Your phone remains the working copy. Without a membership, no workout, set or weight is ever sent. The copy lives as long as your account does: deleting your account removes it along with everything else we hold, section 14.

5. Friends and your public profile

Aveldo lets you add friends and keep each other going. Friendship is mutual: you become friends when one of you opens the other's invite link and adds them, or when one of you sends a request the other accepts. Either of you can remove the other at any time.

Your public profile is what your friends see, and nothing more:

• Who you areYour name, your username, your profile disc's colour, and the month you joined.
• A training summaryYour current weekly streak, how many days you trained this week against your weekly goal, your total number of workouts, the total weight you have lifted, and whether you are an Aveldo member. These figures are worked out on your phone and sent as numbers; no workout, exercise or set is sent with them.

Your invite link carries an eight character code. Whoever opens it sees your name, username, streak and this week's count, on aveldo.app and in the app, and can add you as a friend; anyone you would rather not hear from can be removed afterwards. The link expires after 30 days or 50 uses. When someone sends you a friend request, accepts yours, or sends you a training plan, a notification is stored for you on our server (section 11).

6. Aveldo Membership and purchases

Aveldo is free to use. Aveldo Membership is an optional upgrade offered as a monthly subscription, a yearly subscription, or a one time lifetime purchase. Payment is taken by Apple through the App Store. We never see your payment details.

Aveldo asks one question, whether a valid membership exists for this account, and receives yes or no. That question is answered for us by RevenueCat, which validates the App Store receipt on its servers. RevenueCat knows you by the same identifier as your Aveldo account, so a purchase can follow the account to another device, and it receives the purchase information Apple provides. It does not receive your name, your email address, or any of your training data. See RevenueCat's privacy policy. If a purchase is refunded or a subscription lapses, the member features lock again; your training data is not touched.

7. Analytics

Aveldo uses PostHog, hosted in the European Union, to understand how the app is used. This is a short, fixed list of events, defined in one file in the source and nowhere else. Automatic screen tracking is switched off, and the events ride an anonymous device identifier that is never linked to your account.

The events are: the app was installed and opened, the welcome screen was shown, an account was created or signed in (with Apple or Google, and whether the account is new), the membership screen was shown or closed (how it was closed, the plan selected and how long it was open), a routine was created (how, and whether it was the first), and a purchase was completed (the plan, product, price, currency, and the one setup answer that rides along: where you heard about Aveldo). They tell us where people find Aveldo and where the setup loses them.

What PostHog never receives: your workouts, your exercises, your sets, your weights, your reps, your gym times, your muscle figures, your other setup answers, your name, your username or your email address. There is no advertising identifier, no ad network, and no cross-app or cross-site tracking, so nothing here follows you around the internet and there is no data being sold.

8. Feedback

The Feedback screen sends exactly the message you typed, with the category you picked, to our server, attached to your account identifier so we can reply in context. No device details, screenshots or logs ride along. Anything you send us by email is governed by this policy too.

9. Shared training plans

When you share a routine or a training plan from the Workouts tab, Aveldo stores a copy of it on our server: the plan's name, its routines, their exercises with the number of sets and, only if you switch on Include my weights, the weights on your lines. The copy is attached to your account identifier. Shared by link, it can be read by anyone who has the link, whose eight character code is the only key; sent to friends in the app, it also appears in their notifications with your name. Opening such a link on aveldo.app or in the app asks our server for that copy and counts the open; the website sends nothing else about you and sets no cookie. Shared plans are removed together with your account.

10. Aveldo Coach (beta)

Aveldo Coach is an AI chat about your own training, in beta. During the beta it is free for every account, with a limit on how many messages you can send per day and per week. You open it yourself; nothing is sent until you send a message.

When you send a message, this leaves your phone: the messages of that chat, a small training profile (your goal, experience, typical workout length, rep range, weekly goal, weight unit, the names of your routines, your equipment, your preferred split, and the injuries or exercises you asked the Coach to avoid), and the training figures the Coach's tools compute on your phone from your log for that question: per exercise strength estimates and their trends, set counts per muscle group, how often you train, the exercises and sets of your routines, and matches from the exercise library. Never your name, your email, your username, your friends, or your whole raw log.

It goes to our server (Supabase, in the European Union), which sends it to Google's Gemini API to generate the answer. Google processes it under the Gemini API terms to produce that answer.

We save every chat on our server to improve the Coach: your messages, the Coach's answers, the routine and plan change cards it proposed and what became of them (applied, rejected, the answers you gave to its questions), the tool calls it made and their results, the model used, token counts, timing, and any error. We read these to improve the Coach's answers, its prompts, its limits and its screens, to find and fix mistakes it made, and to help you when you write to us about a chat. They are read by the Aveldo team only, never shown to other users, never sold, and not used for advertising.

Deleting chats in the app removes them from your phone. The copy on our server stays until you delete your account, and is then deleted with everything else, section 14.

11. Notifications

The workout reminder is created on your device: one a day at the time you chose, on the days you chose, switched on or off under Notifications. To tell you about your friends (a friend request, a request accepted, a plan sent to you), Aveldo also uses Apple's push notification service: when you allow notifications, the app sends our server your device's push token, attached to your account, with the app version, your device's language and whether it is a test or App Store build. The notification itself is stored on our server so it appears behind the bell in the app, and it says who did what, nothing about anyone's training. Signing out removes the push token. The rest timer's countdown in the Dynamic Island and on the Lock Screen is a Live Activity rendered by iOS on your device; nothing is transmitted for it.

12. Third parties

Six, and no others:

• AppleThe App Store, the purchase itself, Sign in with Apple, push notifications, and system features such as Live Activities.
• GoogleSign in with Google, only if you choose it, and the Gemini API, only when you send a message to Aveldo Coach. A sign in tells Google that you signed in to Aveldo and nothing about your training; a Coach message carries the chat and the figures named in section 10, which Google processes to produce the answer.
• SupabaseHosts our database in the European Union: your account, your public profile and friendships, your setup answers, the membership backup, notifications and push tokens, your feedback, the training plans you share, and your Aveldo Coach chats. Sections 3, 4, 5, 8, 9, 10 and 11.
• RevenueCatValidates your purchase so the app knows your membership is active. Section 6.
• PostHogAnonymous product analytics, in the EU. Section 7.

On launch the app also fetches a small configuration record from our server, the latest version number and whether maintenance is on; that request carries no account data. Beyond what this policy describes there is no other service, no ad network, and nobody who buys, rents or receives your training data.

13. Legal basis for processing

The on-device data, your account, your public profile and friendships, the notifications and the membership backup are processed to provide the app's functions at your request, which is the performance of a contract under Article 6(1)(b) GDPR. Purchase verification rests on the same basis. The analytics in section 7 and the setup answers counted in section 3 rest on our legitimate interest in understanding and improving the app under Article 6(1)(f), weighed against the fact that they carry no training data. Answering an Aveldo Coach message, which means sending it to our server and to Google's Gemini API, is the performance of a contract under Article 6(1)(b), since you asked the question. Keeping the chats to improve the Coach (section 10) rests on our legitimate interest under Article 6(1)(f) in making a beta feature work well and safely, weighed against the fact that they are read by the Aveldo team alone and are deleted with your account.

14. Retention and deletion

Your training stays on your device for as long as you keep the app. Deleting a workout, an exercise or a set moves it to the Tray, where it waits until you restore it or delete it permanently, and "Reset logged data" in Settings clears all of it at once; for a member, both also remove the rows from the server copy. Notifications are deleted after 90 days. Aveldo Coach chats and the server's record of each turn (section 10) are kept for as long as your account exists; deleting a chat in the app removes it from your phone only.

"Delete Account" in Settings deletes your account and with it everything we hold: the account and presence record, your name and username, your setup answers, your friendships and invite links, your notifications and push tokens, the backup, the plans you shared, your Aveldo Coach chats and their server records, and your feedback. This happens immediately and cannot be undone. Deleting just the app removes the local database from your phone; a member who signs in again gets their workouts back from the copy.

15. Your rights

Under the GDPR and the nFADP you have rights of access, rectification, erasure, restriction, portability, and objection. Most of them are already in your hands: your training is on your device, where you can read, change or delete all of it, Export Data writes the whole log to a CSV file you keep, your name can be changed under Account, friends can be removed at any time, and Delete Account in Settings erases everything we hold about you without asking us first.

For anything else, write to legal.aveldo@hotmail.com and we will respond. You also have the right to lodge a complaint with a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

16. Children

Aveldo is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.

17. Training disclaimer

Aveldo is not a medical device. Every figure it shows, the trends, the percentages, the recovery and the muscle shading alike, is arithmetic on the sets you typed in, not a measurement of your body. None of it is medical advice.

Aveldo Coach's suggestions are generated by an AI model from those same figures. The Coach is in beta: its answers can be wrong, incomplete or unsuited to you, and they are not medical, physiotherapeutic or nutritional advice. Do not change your training on its word alone. Consult a qualified professional before starting or changing a training programme, and stop if something hurts.

18. Changes

If this policy changes in a way that affects you, the updated version will appear at this address with a new date at the top. Continuing to use Aveldo after a change means you accept the revised policy.