Privacy Policy

Controller

The controller within the meaning of Article 4(7) GDPR is the provider named above. Contact: support@roarer.app.

A data protection officer is not required under Article 37 GDPR and has not been appointed.

Data we process

This policy covers roarer.app and the Roarer app.

• Account: email address, hashed password, username, one time sign in codes, and Sign in with Apple or Google if you use them.
• Profile: name, gender, date of birth, height, body weight, avatar, app settings including timezone.
• Workout history and performance: programs, workouts, exercises, sets, repetitions, weights, durations, notes, photos you attach to a session, and session history.
• Body weight and body measurements you enter.
• Apple Health data only once that integration exists and only if you allow access, for example steps, body weight or sleep. It is not available in the current app.
• Consent records: which version of a document or which consent you accepted, and when.
• Notifications: the push token of your device, a device identifier, and your notification settings.
• Shared programs: a public link can show the program name, structure and your username until you revoke it.
• Support: your messages and any attachments.
• On the device: a local copy of recently loaded data and a queue of sets logged without a connection.
• Technical: session records and device data needed to keep you signed in.
• App diagnostics: if you have allowed error reports in the app (you are asked once and can change this in Settings → Sign-in & security), technical crash and performance reports with the error message, stack trace, app and iOS version, device model, performance timings and a random installation identifier. We do not link them to your account and do not deliberately send account details, workout contents or photos; in rare cases an error message may incidentally contain a fragment of the data being processed.
• Website, only if you accept statistics: a random visit identifier, the pages you open, the referring site and campaign parameters in the link (utm_source, utm_medium, utm_campaign and similar), device type, operating system and browser family, language, time spent on a page, scroll depth and clicks on buttons. We do not store your IP address or your full User-Agent in these statistics and do not link them to an account. Standard server logs are kept separately.
• Connector, only if you set it up: the name of the assistant application, the categories you allowed, the version of the consent text, the time of last use, hashed refresh tokens and security records.

Health data

Body weight, body measurements, workout history and performance, session photos, and data from Apple Health if that integration exists can reveal information about your health. They are special categories of personal data under Article 9 GDPR.

We process them only to provide the features you use: storing your entries, showing your history, progress and statistics, and sending the reminders you have switched on. The legal basis is your explicit consent under Article 9(2)(a) GDPR. The app asks for it separately when you create an account and, for existing accounts, before you continue using the app. The training features cannot be provided without this consent.

Health data is never used for advertising or marketing, is not sold, is not used for profiling or automated decisions and is not disclosed to third parties, except to an AI assistant that you yourself connect (see "AI assistant connectors"). Our hosting provider stores it only on our behalf as a processor. Notification texts never contain your weight or measurements.

You can withdraw your consent at any time with effect for the future: delete individual entries in the app, delete your account in the app, or write to support@roarer.app. Withdrawal does not affect the lawfulness of processing before it. After withdrawal the app can no longer store new health data for you.

Apple Health

An integration with Apple Health (HealthKit) is planned and is not part of the current app. Once it is available, Roarer accesses Apple Health only after you grant permission in iOS, separately for each data type. You can change or revoke this permission at any time in the Health settings of iOS.

Data received from Apple Health is used only to provide Roarer's features to you. It is never used for advertising or marketing, including marketing notifications, is not sold, is not disclosed to third parties and is not stored in iCloud. You can delete it in the app or together with your account.

Purposes and legal bases

• Providing the account and the service, Article 6(1)(b) GDPR.
• Health data (body weight, measurements, workout history and performance, session photos, Apple Health data if that integration exists), Article 9(2)(a) GDPR (explicit consent), withdrawable at any time.
• Sign in codes and service email, Article 6(1)(b) GDPR.
• Service notifications and reminders, your permission in the system settings and in the app, Article 6(1)(a) GDPR, withdrawable at any time.
• Marketing messages (news and offers), only with your separate consent, Article 6(1)(a) GDPR, withdrawable at any time.
• Records of your consents, to demonstrate them as required by Article 7(1) GDPR, Article 6(1)(c) GDPR.
• Security and abuse prevention, Article 6(1)(f) GDPR.
• Website usage statistics (our own and Google Analytics), only after your consent, § 25(1) TDDDG and Article 6(1)(a) GDPR, withdrawable at any time.
• App error reports (crash and performance diagnostics), your consent given in the app, Article 6(1)(a) GDPR and § 25(1) TDDDG, withdrawable at any time under Settings → Sign-in & security.
• Support requests, Article 6(1)(b) and 6(1)(f) GDPR.
• The AI assistant connector you set up, Article 6(1)(b) GDPR; sharing the categories you allow with that assistant, Article 6(1)(a) GDPR (your consent when you allow the connection), withdrawable at any time.

Push notifications

Roarer sends push notifications only if you allow them in the system settings. You can turn them off at any time in the app under "Notifications" or in the system settings. Notification texts never contain your weight or measurements.

• Service notifications, for example a reply from support, a workout left open or a required app update, or a hint to set up your training schedule (at most three times, and never after you dismiss it in the app).
• Reminders, for example about a training day or after a long break. We limit how often they are sent.
• Marketing notifications about news and offers, only if you have separately agreed to them. You can withdraw this consent at any time with the "News and offers" switch under "Notifications"; withdrawal does not affect the service.

Data on the device

The app may keep a local copy of data you recently loaded and a short queue of sets you logged without a connection, so training can continue in a gym with poor signal. That copy stays on the device until it is uploaded or you delete the app or the account.

Cookies

Two cookies are strictly necessary for the service you requested and therefore need no consent under § 25(2) TDDDG: one keeps your chosen language, the other records your decision about statistics.

Usage statistics are optional. Only if you accept do we (1) store a random visit identifier in your browser's session storage (it ends with the tab or after 30 minutes of inactivity) and record on our own servers where the visit came from, which pages you view, how long you stay and which buttons you click, and (2) load Google Analytics 4, which sets Google analytics cookies such as _ga and _ga_* and sends usage data to Google. The legal basis is your consent under § 25(1) TDDDG and Article 6(1)(a) GDPR. You can change the decision at any time through the cookie settings link in the footer. We do not use advertising cookies and we do not sell your data.

Recipients

Personal data is not sold and is not shared for advertising. Processors act on our documented instructions under a contract pursuant to Article 28 GDPR: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, for hosting and databases; Google Ireland Limited for sending sign in codes and service messages by email; Apple for the iOS app (App Store, Sign in with Apple, and Apple Push Notification service); Google Ireland Limited for Sign in with Google, if you use it; and Cloudflare, Inc. (United States) as the CDN, TLS and security proxy in front of roarer.app and our API, which technically passes all traffic in transit, including requests containing account and training data, and does not store it beyond caching public pages. Functional Software, Inc. (Sentry, United States, EU data region) provides error monitoring for our servers and for the app: technical error reports with the error message, stack trace, request path (servers only), app and software version, device model and performance timings, without deliberately including passwords, tokens, account details or the content of your workouts. App reports are sent only if you allow them in the app.

If you accept website statistics, Google Ireland Limited processes page-view and interaction data for Google Analytics 4 under our instructions (Article 28 GDPR). Google LLC in the United States may act as a sub-processor; transfers rely on the European Commission's standard contractual clauses. If an Android app is published later, this policy will also name Google Play services before that launch. Health data is not shared with advertisers, data brokers or other third parties; only our hosting provider stores it on our behalf.

Shared programs

If you create a share link, the preview page on roarer.app may show the program name, its structure and your username to anyone who opens the link. That is not a transfer for advertising. Revoke the link in the app when it should no longer be public.

AI assistant connectors

Roarer offers a connector that lets you give an AI assistant, for example Claude by Anthropic, read-only access to your training data. It is off until you set it up in the assistant yourself. When you connect it, you sign in to your Roarer account on a page at auth.roarer.app and choose which categories to share: workouts, programs, body measurements, statistics and your first name. The assistant can only read; it cannot change or delete anything.

Data in the categories you chose is sent to the assistant when you ask it something that needs it, and is then processed by the assistant's provider under its own terms and privacy policy, which we cannot influence. Apart from the first name you can choose to share, we never send your email address, phone number, surname, photos, avatar, support messages or notification settings through the connector. The consent step shows exactly which categories would be shared and asks you to allow them (consent under Article 6(1)(a) GDPR). If you cancel, nothing is shared.

For the connection we store the assistant application's name and redirect address, the categories you agreed to, the version of the consent text, the time of last use, refresh tokens in hashed form (access tokens last one hour, refresh tokens up to 90 days) and short security records such as sign-ins and token issue or revocation, without the content of your data. You can remove Roarer in the assistant's connector settings at any time, and you can ask us to revoke the connection by writing to support@roarer.app; an access token already issued expires within an hour. When your account is deleted, all connections are removed and the security records are detached from your account.

International transfers

Servers are located in the European Union. Where a processor operates outside the EU or the UK, the transfer is based on the European Commission's standard contractual clauses pursuant to Article 46(2)(c) GDPR. This applies to Cloudflare, Inc. and Google LLC in the United States, which are also covered by the EU-US Data Privacy Framework where certified. Functional Software, Inc. (Sentry) stores error reports in its EU data region, but as a US company it is also subject to these safeguards.

Retention

• Account and training data: while the account exists.
• Health data: while the account exists, or until you delete the entries or withdraw your consent.
• Consent records: while the account exists and afterwards for as long as needed to demonstrate the consent.
• Deleted accounts: access ends immediately. When you delete the account in the app you choose between erasing everything at once and permanently, or closing the account with the option to restore it within 6 months (by signing in again with Apple or Google or by signing up again with the same email). After the 6 months, or immediately if you choose permanent erasure or ask us at support@roarer.app, all personal data is erased; only consent records without personal data and an anonymous technical record remain.
• Sign in codes: valid for 10 minutes; expired codes are deleted within one day.
• Support: while the case is open and for a limited period afterwards.
• Website statistics: individual events are deleted after 180 days, visit records and visit identifiers after 400 days. Aggregated counters without identifiers are kept.
• Server logs: a short period set by the hosting provider.
• Error reports from the app: at most 90 days at the error monitoring provider.
• Statutory retention obligations, in particular under commercial and tax law, remain unaffected.
• Connector connections: until you end them or delete your account. Security records are detached from your account when it is deleted.

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection (Article 21), and you may withdraw consent at any time with effect for the future (Article 7(3) GDPR). Requests: support@roarer.app.

Right to object: where we process data on the basis of legitimate interests (Article 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Article 21 GDPR).

You may lodge a complaint with a supervisory authority (Article 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin. You may also contact the authority where you live.

Our responsibility

We are responsible for processing and protecting your data in accordance with this policy and the GDPR. Roarer is a tool for recording training: it gives no medical advice, does not assess your health and makes no decisions for you. Health data is shown to you as you entered it or as Apple Health provided it.

Decisions about training, load, nutrition and health, and their results, remain yours. The rules for using the service, including liability, are set out in the Terms of Service and the Disclaimer; mandatory statutory liability is unaffected.

Children

Roarer is not intended for children under 16 and accounts are not knowingly created for them.

Security

Passwords are stored as salted hashes. Sessions use rotating tokens with reuse detection. Traffic is encrypted in transit. Access to stored data is limited to the people who operate the service.

Changes

Material changes are published on this page with a new date and, where they affect you directly, notified in the app or by email. If a change concerns something you have consented to, the app asks you to confirm again before you continue.

Contact

support@roarer.app