Privacy Policy

LJJKS ApS (brand: TotaCoach), CVR DK46005287, Myrehøjvej 9, Denmark, is the data controller for personal data processed through the Service.

Depending on how you use the app, we may handle account and identity data, onboarding and profile data, fitness and nutrition data, health-sync data, photos you choose to upload, notification tokens, subscription and purchase status, support communications, and technical diagnostics.

We collect account and profile data such as your email address, user ID, first name, last name, password credentials handled by our authentication provider, avatar image, authentication method, and account metadata. If you sign in with Apple or Google, we may also receive basic profile information that those providers share with us, such as your name and email address.

We collect the fitness, nutrition, and wellness data you enter or generate in the app, including goals, age or date of birth, gender, height, weight, activity level, sleep target, daily step range, training preferences, workout plans, workout logs, nutrition targets, meal logs, meal preferences, coaching history, and progress data. If you connect Apple Health or Health Connect, we currently read steps and sleep data and store synced daily metrics and connection status.

If you choose to do so, we collect profile photos from your photo library and meal photos from your camera or photo library. Meal photos may be uploaded to our cloud storage, analyzed to identify food items, linked to your account, and saved with meal-analysis or meal-log records.

We collect the country and time zone you choose during onboarding or settings to personalize plans and scheduling. In the current app build, we do not request precise GPS location permissions. If you enable notifications, we may collect your push token and notification-related records. If you contact support or submit a bug report, we may collect your message, email address, name, app version, platform version, and associated diagnostic context.

We collect technical and usage data such as app version, device or platform details, crash logs, performance data, notification events, and product-interaction signals needed to operate, secure, debug, and improve the Service. If diagnostics are enabled for your build, this may also include Sentry error, performance, feedback, and limited session-replay telemetry associated with your account or device session.

We use personal data to create and maintain your account, authenticate you, provide coaching features, personalize workouts and nutrition output, sync health data, analyze meal photos, deliver notifications, process subscriptions, restore purchases, answer support requests, detect abuse, protect security, troubleshoot issues, improve the Service, and comply with legal obligations.

We use AI and automated systems to generate coach responses, analyze meal photos, generate meal or workout plans, and support certain schedule or exercise changes. To provide these features, we may send relevant content and context to our AI providers, including chat messages, meal-photo content, food labels, goals, training preferences, schedule context, and other data reasonably required to produce the requested result.

We do not sell personal data. We may share personal data with service providers and platform partners that help us operate the Service, including Supabase for authentication, database, storage, and serverless infrastructure; OpenAI for AI features; RevenueCat and Apple or Google for subscriptions and purchase status; Sentry for diagnostics and support feedback; Apple Health and Health Connect when you choose to connect them; Apple, Google, and Supabase for sign-in flows; Expo services for push-notification delivery; and nutrition or recipe data providers used to power food search and meal-planning features. We may also disclose data when required by law or when reasonably necessary to protect rights, safety, security, or platform integrity.

We do not sell personal data and we do not use your data for third-party targeted advertising or cross-app tracking as part of the current app experience. If that changes, we will update this Privacy Policy and any required platform disclosures or permissions.

Depending on your location, we rely on one or more legal bases for processing: performance of a contract, legitimate interests such as product improvement, security, fraud prevention, and support, consent where required, and compliance with legal obligations.

We retain personal data for as long as needed to provide the Service and meet legal, accounting, security, and operational requirements. You can request deletion in-app. Our current account-deletion flow removes your profile, workout data, nutrition data, chat history, health-sync data, notifications, and avatar files, subject to limited retention where required by law or reasonably necessary for fraud prevention and security. Encrypted backups may be purged on a delayed schedule of up to 35 days.

Your data may be processed in countries other than where you live because our service providers and infrastructure operate internationally. Where required by law, we use appropriate safeguards for international transfers.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent where processing is based on consent, and receive a portable copy of your personal data. You can also manage some permissions, such as health access, photos, camera, and notifications, through your device settings and in-app controls.

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

We use reasonable technical and organizational measures to protect personal data. No method of transmission, cloud storage, mobile device, or electronic storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will publish updates in-app and update the "Last updated" date. For privacy questions, rights requests, or complaints, contact LJJKS ApS (TotaCoach) at support@totacoach.com or by post at Myrehøjvej 9, Denmark. If you are in the EEA, you may also lodge a complaint with your local supervisory authority.