Privacy Policy

The short version

Solviro keeps your data in two places: in your browser on the device you are using, and in your account on our database, so that signing in on a new phone brings your training with you.

That means your measurements, training history and food diary do leave your device. They are stored against your account, they are protected so that only you can read them, and you can delete all of it from Account at any time.

Who is responsible

Solviro is run by an individual in Slovakia. For anything to do with your data, email use.solviro@gmail.com — that address is read by a person, not a ticketing system.

Because Solviro is operated from the EU and is available to people in the EU, the GDPR applies to it.

What is stored, and where

All of this is kept in your browser AND in your account on our database, so it survives changing device. It is protected by row-level security, which means the database itself refuses to hand your rows to anybody signed in as somebody else:

• Your profile: name, username, date of birth, age, sex, height, weight, your goal, and a profile picture if you upload one
• Your settings: units, weekly target, rest timer length, notification preference
• Your training: every workout you finish, including each set's weight, reps and duration, plus your plans and the equipment you have
• Your food diary: meals and their timestamps, recipes you save, custom foods, and your calorie and macro targets
• Your credits, tags, name colour and coach accessories

Health data, and why we ask separately

Your height, weight, body measurements, food diary and training history count as health data under Article 9 of the GDPR. That is the most protected category there is, and the law says we cannot rely on you simply accepting our terms — we have to ask for your permission specifically and separately.

That is what the second checkbox on the sign-up screen is. It is not a formality and it is not pre-ticked.

You can withdraw that permission at any time by deleting your data in Account, or by emailing us. Withdrawing it does not undo anything that already happened, but it stops everything from then on.

What leaves your device, and who receives it

Everything in the list above is stored against your account so it can follow you between devices. Beyond that:

• Your email address and password, when you sign in. Held by Supabase, our authentication provider. Your password is hashed by them and is never stored or seen by us in a readable form.
• A barcode, when you scan food. Sent to Open Food Facts to look up the product. No information about you goes with it.
• Ordinary web server records — your IP address and browser type — logged by Vercel, who host the site, as happens on every website you visit.

Companies we rely on

We use a small number of services to make Solviro work. Each one only receives what it needs:

• Vercel — hosts the website, and provides the cookieless visitor counting described under Cookies and storage
• Supabase — hosts the database holding your account and everything listed above, and handles signing you in. Their servers are in the EU.
• Resend — sends your login code to your inbox and, if you have Solviro Max, the reminder email before a charge
• Stripe — only if you buy Solviro Max. Stripe runs the checkout page, takes the payment and is the seller on the receipt (its service is called Managed Payments and shows up as Link). It receives your email address, your payment details and your billing country. We never see or store your card number; we keep only Stripe's reference for your purchase and whether your membership is active.
• Your browser's push service (run by Google, Apple or Mozilla, depending on your browser) — only if you switch on reminders. It carries the notification to your device.
• Open Food Facts — the food database behind barcode scanning
• Discord, Instagram and TikTok — only if you choose to follow those links, at which point their own privacy policies apply, not this one

Why we are allowed to hold it

Under the GDPR we have to name a lawful basis for each thing we do. Ours are simple:

• Your email address — because we need it to provide the account you asked for
• Your health and training data — your explicit consent, given separately at sign-up
• Server logs — our legitimate interest in keeping the site running and secure

How long it is kept

Your account data stays until you delete it. The copy in your browser can also be cleared by the browser itself — Safari in particular removes local storage after around seven days of not using a site — but that no longer loses anything, because signing in restores it from your account.

Your email address is kept while your account exists. Ask us to delete your account and it goes.

There is no backup yet

Deleting your account is permanent and immediate. It removes your login and every row of your data from our database in one step, and there is no backup we can restore it from afterwards. If you only want to clear your training history and keep the account, use "Clear workout history" instead.

You can export your training history to a spreadsheet at any time from the statistics page. If you have been logging for a while, it is worth doing occasionally.

Cloud backup is planned. This section will change when it arrives.

Your rights

The GDPR gives you a set of rights over your data. Most of them you can exercise yourself, right now, without asking us:

• See it — it is all visible in the app, and exportable as a spreadsheet from the statistics page
• Delete it — Account has both 'Clear workout history' and 'Start over from scratch', which erases everything on the device
• Withdraw consent — same thing; deleting your data withdraws the permission you gave
• Correct it — edit your profile in Account at any time
• Complain — email use.solviro@gmail.com first and we will try to sort it, but you have the right to go straight to the Slovak Office for Personal Data Protection instead

Cookies and storage

Solviro sets no cookies at all — not for tracking, not for advertising, not for anything.

The app does store data in your browser, because that is where the app itself lives — without it there would be nothing to show you. Under EU rules that counts as strictly necessary, which is why you are not being nagged by a consent pop-up.

We do use one analytics tool: Vercel Web Analytics, run by the company that hosts the site. It counts page visits so we can see which parts of Solviro people actually use. It was picked specifically because it does not need cookies and does not store anything on your device — visitors are counted using a temporary hash of the web request, which is thrown away after 24 hours. That means you cannot be followed from one day to the next, or from Solviro to any other site, and we only ever see totals rather than individuals.

This is why there is still no cookie banner: with no cookies and nothing stored on your device, EU law does not require us to ask. We are telling you anyway, because you should not have to take our word for what is running on a page.

Children

In Slovakia, people under 16 need a parent's permission before a service like this can process their data. Solviro is not designed for children, and we ask that under-16s only use it with a parent or guardian's involvement.

If you are a parent and you would like your child's data removed, email use.solviro@gmail.com and we will handle it.

Changes

This policy was last updated on 4 October 2026. If we change it in a way that affects what you agreed to, we will say so in the app rather than quietly editing this page.