Privacy Policy

Last updated: 17.07.2026

Türkçe sürüm

This Privacy Policy explains how personal data is collected, used, stored, and protected for people who use the Myofera mobile application ("the App"). By using the App, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller for this App is:

Nedim Kahraman
Email: btnedim.kahraman@gmail.com

You can reach the email address above with any questions, requests, or complaints regarding your personal data.

2. Data We Collect

The App only collects data that is strictly necessary to provide the service. No data is collected for advertising, profiling, or sale to third parties.

2.1 Account Data (at registration)

DataRequired?Purpose
Email addressYesAuthentication
PasswordYesNever stored in plain text; hashed with the one-way bcrypt algorithm

2.2 Profile Data (during onboarding or later from the Profile screen, optional)

DataRequired?Purpose
Username / display nameNoIn-app personalization
Fitness goalNoStrength, hypertrophy, endurance, etc.
Experience levelNoBeginner / intermediate / advanced
Weekly workout targetNoFor program recommendations
Weight (kg)NoProgress tracking and calorie calculation
Height (cm)NoBody mass index and calorie calculation
AgeNoCalorie and training intensity calculation
GenderNoCalorie and training intensity calculation
Target weight (kg)NoProgress tracking
Weight historyNoCharting weight change over time
Training locationNoGym / home / dumbbells only — for program recommendations
Injury / limitation notesNoFree text; taken into account for program recommendations. May contain health-related information.
Ramadan modeNoOn/off preference; adapts training and nutrition suggestions to fasting hours. May be considered religion/belief-related information.
You are never required to fill in optional profile fields. Data in these fields is used only to provide a better experience. Injury/limitation notes and Ramadan mode are fields that may be considered special-category personal data by their nature; they are processed only if you choose to fill them in / enable them, and by continuing to use the App you consent to their processing.

2.3 Workout and Activity Data

DataDescription
Workout sessionsDate, duration, completed exercises
Exercise dataNumber of sets, reps, weight used
Personal recordsCalculated automatically by the App
Saved workout plansPrograms you created
Active program statusWhich program, which week/day you are on

2.4 Body Measurement Data (optional)

Manually entered weight and measurement records (dated).

2.5 Technical Data

DataDescription
Session token (JWT)For authentication; stored in your device's secure storage
IP addressHeld temporarily in server memory to prevent abuse (15 minutes); never written to or stored in a database

2.6 Data Stored Only on Your Device

DataDescription
AI Coach chat historyStored only on the device the App is installed on; never transmitted to or retained on the server
Nutrition log (food/calorie entries) and water intake trackingStored only on the device; never transmitted to or retained on the server
Data we do not collect: Location, camera/microphone access, contact lists, device identifiers (IDFA/GAID), browsing history, social media accounts. The App's crash-reporting tool is not currently active.

3. Purposes of Data Use

We use the data we collect only for the following purposes:

  1. Account creation and authentication — Registration, login, and session management.
  2. Providing the service — Workout tracking, progress visualization, program management.
  3. Personalization — Training recommendations based on your profile data.
  4. Data continuity — Making your data accessible across different devices.

No data is used for marketing, advertising, or third-party profiling purposes.

4. Where Your Data Is Stored

Your data is stored in a PostgreSQL database running on Railway.app infrastructure. Railway is a cloud infrastructure provider operating data centers in the European Union and the United States.

5. Sharing With Third Parties

Your personal data is never sold, rented, or shared for advertising purposes.

Only the minimum data necessary to provide the service is shared, and only with the following sub-processors:

Sub-processorPurposeData sharedPolicy
Railway.appServer and database infrastructureAll account and workout datarailway.app/legal/privacy
Expo (650 Industries, Inc.)App update delivery (EAS Update)Automatically, every time the App is opened: device platform, app/runtime version, and an anonymous update/installation identifier. Your account information or personal data is not sent during this check.expo.dev/privacy
Anthropic, PBC (not yet active)AI Coach featureIf/when AI Coach is enabled: profile information (including age, weight, height, gender, fitness goal, experience level, training location, injury/limitation notes, Ramadan mode status), last 10 workout sessions, personal records, body measurements. This feature is not currently enabled in the App; the AI Coach screen currently shows only pre-written responses and no data is sent to Anthropic.anthropic.com/privacy
RevenueCat, Inc. (not yet active)Premium subscription/purchase managementWhen a purchase is made: an anonymous user identifier, subscription/transaction status. This feature is not currently enabled in the App.revenuecat.com/privacy
No data is shared with any third party other than those listed above. Google Analytics, Facebook Pixel, ad networks, or analytics tools are not used.

6. Data Retention Period

Data typeRetention period
Account and profile dataUntil the account is deleted
Workout and measurement dataUntil the account is deleted

7. Deleting Your Account and Data

From within the App: Profile screen → bottom section → use the "Permanently delete account" button. After you confirm, your account and all of your data are deleted from the server instantly and permanently. This action cannot be undone.

By email: If you cannot access the App, you may email btnedim.kahraman@gmail.com with the subject "Account Deletion Request." Your request will be processed within 30 days.

8. Security Measures

If you discover a security vulnerability, please report it to btnedim.kahraman@gmail.com.

9. Children's Privacy

The App is not directed at individuals under the age of 13, and personal data is not knowingly collected from them. If you become aware that data has been collected from a user under 13, please contact us; the related account and data will be deleted immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If there are material changes, you will receive a notice when you open the App. The current policy is always published on this page.

11. Contact

Nedim Kahraman
Email: btnedim.kahraman@gmail.com


© 2026 Nedim Kahraman. All rights reserved.