Privacy Policy

The short version

Solviro keeps your data in two places: in your browser on the device you are using, and in your account on our database, so that signing in on a new phone brings your training with you.

That means your measurements, training history and food diary do leave your device. They are stored against your account, they are protected so that only you can read them, and you can delete all of it from Account at any time.

Who is responsible

Solviro is run by an individual in Slovakia. For anything to do with your data, email use.solviro@gmail.com — that address is read by a person, not a ticketing system.

Because Solviro is operated from the EU and is available to people in the EU, the GDPR applies to it.

What is stored, and where

All of this is kept in your browser AND in your account on our database, so it survives changing device. It is protected by row-level security, which means the database itself refuses to hand your rows to anybody signed in as somebody else:

• Your profile: name, username, date of birth, age, sex, height, weight, your goal, and a profile picture if you upload one
• Your settings: units, weekly target, rest timer length, notification preference
• Your training: every workout you finish, including each set's weight, reps and duration, plus your plans and the equipment you have
• Your food diary: meals and their timestamps, recipes you save, custom foods, and your calorie and macro targets
• Your credits, tags, name colour and coach accessories

Health data, and why we ask separately

Your height, weight, body measurements, food diary and training history count as health data under Article 9 of the GDPR. That is the most protected category there is, and the law says we cannot rely on you simply accepting our terms — we have to ask for your permission specifically and separately.

That is what the second checkbox on the sign-up screen is. It is not a formality and it is not pre-ticked.

You can withdraw that permission at any time by deleting your data in Account, or by emailing us. Withdrawing it does not undo anything that already happened, but it stops everything from then on.

What leaves your device, and who receives it

Everything in the list above is stored against your account so it can follow you between devices. Beyond that:

• Your email address and password, when you sign in. Held by Supabase, our authentication provider. Your password is hashed by them and is never stored or seen by us in a readable form.
• A barcode, when you scan food. Sent to Open Food Facts to look up the product. No information about you goes with it.
• Ordinary web server records — your IP address and browser type — logged by Vercel, who host the site, as happens on every website you visit.

Companies we rely on

We use a small number of services to make Solviro work. Each one only receives what it needs:

• Vercel — hosts the website
• Supabase — hosts the database holding your account and everything listed above, and handles signing you in. Their servers are in the EU.
• Resend — sends your login code to your inbox
• Open Food Facts — the food database behind barcode scanning
• Discord, Instagram and TikTok — only if you choose to follow those links, at which point their own privacy policies apply, not this one

Why we are allowed to hold it

Under the GDPR we have to name a lawful basis for each thing we do. Ours are simple:

• Your email address — because we need it to provide the account you asked for
• Your health and training data — your explicit consent, given separately at sign-up
• Server logs — our legitimate interest in keeping the site running and secure

How long it is kept

Your account data stays until you delete it. The copy in your browser can also be cleared by the browser itself — Safari in particular removes local storage after around seven days of not using a site — but that no longer loses anything, because signing in restores it from your account.

Your email address is kept while your account exists. Ask us to delete your account and it goes.

There is no backup yet

Deleting your account is permanent and immediate. It removes your login and every row of your data from our database in one step, and there is no backup we can restore it from afterwards. If you only want to clear your training history and keep the account, use "Clear workout history" instead.

You can export your training history to a spreadsheet at any time from the statistics page. If you have been logging for a while, it is worth doing occasionally.

Cloud backup is planned. This section will change when it arrives.

Your rights

The GDPR gives you a set of rights over your data. Most of them you can exercise yourself, right now, without asking us:

• See it — it is all visible in the app, and exportable as a spreadsheet from the statistics page
• Delete it — Account has both 'Clear workout history' and 'Start over from scratch', which erases everything on the device
• Withdraw consent — same thing; deleting your data withdraws the permission you gave
• Correct it — edit your profile in Account at any time
• Complain — email use.solviro@gmail.com first and we will try to sort it, but you have the right to go straight to the Slovak Office for Personal Data Protection instead

Cookies and storage

Solviro does not use tracking cookies, advertising pixels, or analytics. We do not know how many people use the app or what they do in it.

The app does store data in your browser, because that is where the app itself lives — without it there would be nothing to show you. Under EU rules that counts as strictly necessary, which is why you are not being nagged by a consent pop-up. If we ever add analytics or ad tracking, you will get a proper choice first.

Children

In Slovakia, people under 16 need a parent's permission before a service like this can process their data. Solviro is not designed for children, and we ask that under-16s only use it with a parent or guardian's involvement.

If you are a parent and you would like your child's data removed, email use.solviro@gmail.com and we will handle it.

Changes

This policy was last updated on 24 August 2026. If we change it in a way that affects what you agreed to, we will say so in the app rather than quietly editing this page.