Aptus ("the app") is a training app published by EbonyKris ("we", "us"). This policy explains what the app does with your information. It is short because the app collects little: almost everything it knows about you stays on your phone.
The short version
- Your training data lives in a database on your device. Our server holds no profile for you, and nothing tied to your account beyond a plan-build allowance and a few counts. The plan requests described next do contain some of your training details, and copies of them are kept — with no account attached.
- Building a plan requires signing in with Google. Sign-in tells our service whose daily allowance of plan builds to count against, so that one person cannot use everybody else’s, and it is what the per-account counts below are kept against. Everything else in the app works signed out.
- To write you a plan, the app sends a description of your training situation to our coaching service, which passes it to an AI model provider and returns the plan. We keep a copy of that request, including the goal you typed, so we can see what people ask a coach for. It is stored with nothing attached that says whose it was — no account, no digest, no name, no email address — so it is not linked to you and we cannot look yours up. If you ask, we will do our best to find it from what you tell us and remove it. The model provider may separately retain it for a limited period for abuse monitoring.
- Your name, your date of birth, your waist measurement and your measurement history never leave the device at all.
- From your Google account we receive an email address and an account identifier. We store neither in readable form: what we keep against a one-way digest of the account identifier is your remaining plan builds and counts of how often you built a plan or rebuilt a session. The request copies described above are kept separately, with no account attached at all.
- We show no ads, use no analytics or tracking SDKs, and sell nothing to anybody.
What stays on your device
The app stores the following locally, and never transmits it:
- Your profile name
- Your date of birth (only your age in whole years is ever sent — see below)
- Your waist measurement, and the history of your body measurements over time
- Your calculated BMI and waist-to-height ratio
- Your full workout history: every session, exercise, set, weight, time and note (except that rebuilding a single session sends your few most recent workouts for that day — see below)
- Your app settings
This database is excluded from Android’s cloud backup, deliberately, because it holds health information. It is included in Android’s direct device-to-device transfer, so that replacing a phone does not cost you your training history. That transfer is a copy you make yourself, between two devices you control; it does not pass through us.
What is sent when you ask for a plan
When you generate a plan, expand a plan, or rebuild a single session, the app sends the following to our coaching service:
- Your age in whole years, and your sex if you provided one
- Your height and weight
- The goal you typed, in your own words
- How many weeks remain until your deadline, if you set one
- How many days a week you train, how long a session should be (and whether its warm-up and cool-down count towards that), which weekdays you prefer, your easy running pace, and the mix of training types you chose
- Which of three pieces of equipment you have — a pull-up bar, a step or box, a resistance band — and, so the coach picks from movements you can do, the names of the exercises in the app’s own catalogue that suit your training types and equipment
- Any injuries you flagged: the body region, how severe you marked it, and the note you wrote about it in your own words
When you rebuild a single session — and only then — the app also sends up to four of your most recent workouts for that day of the plan: the exercise names, what was prescribed, whether you skipped anything, and for each set its status, reps, weight, distance or duration, together with any note you wrote on that workout. This is what lets the replacement session respond to what you actually did.
Nothing else is sent. In particular, the app does not transmit your name, your date of birth, your waist measurement, your measurement history, your device identifiers, your location, your contacts, or any advertising identifier. The app asks for no permission that reaches your location, contacts, camera, microphone, photos or files, and none that Android has to ask you about. The permissions it does declare are for network access, for vibrating when a timer ends, and those that Android’s own background-work and sign-in libraries declare for themselves.
Who processes it, and for how long
- Our coaching service runs on Google Cloud Run in the United States. Its logs record only that a request happened: a label, a truncated identifier, how long it took, and how much of your allowance remains. Separately it keeps a copy of the request itself — the goal you typed, the training details listed above, and for a rebuilt session the recent workouts sent with it — so we can see what people actually ask for and make the app better at answering it. Those copies are kept without any account attached and are not time-limited. Nothing in a copy records who sent it, but a copy can still contain things about you: your height and weight, and whatever you wrote in your goal, injury notes and workout notes. Please do not put your name or contact details in those fields.
- AI model providers receive the request in order to write the plan. Aptus currently uses Together AI as its primary provider and Anthropic as a fallback. They process the request under their own terms and may retain it for a limited period for abuse monitoring. Neither is permitted to use it to train models on our account.
- Google Firestore holds four things: your allowance (a one-way digest of your Google account identifier, how many plan builds are left, and the date); counts of how often plans are built and sessions rebuilt, and of how many requests were made for a session of a given length, number of days a week and training mix — numbers only, and the last of those carries nothing whatever to say whose requests they were, so it cannot tell one person asking a hundred times from a hundred people asking once; a record of the times a plan build failed, describing what was being asked for — the session length, how many days a week, the training mix, and how many injuries and pieces of equipment were on the profile, but never their details, never your goal, and with nothing saying whose request it was; and the unattached request copies described above. None of it holds your name or your email address.
We do not sell your information, and we do not share it with anyone other than the processors named above.
Purchases
If you buy anything in the app, Google Play processes the payment. We never see your card details, billing address or Google account. We receive only a purchase token from Google, which the app presents to our coaching service to confirm that a purchase entitles you to use it.
Security
Everything the app sends travels over HTTPS. The on-device database is protected by Android’s per-app sandbox, which keeps it unreadable by other apps on the phone.
Deleting your data
Everything that describes you or your training is on the device, so you delete it by deleting it:
- Deleting a profile in the app removes that profile along with its plans and its workout history.
- Signing out in Settings removes the sign-in from the device.
- Uninstalling the app removes the entire database from the device.
What is not on your device is your allowance and your activity counts: a digest of your Google account identifier, how many plan builds you have left, the date it was last topped up, and how often you have built a plan or rebuilt a session. Writing to us at support@ebonykr.is deletes all of it — see Delete your Aptus account.
The copies of plan requests are the exception, and it is worth being plain about why. They are stored with nothing recording whose they were, so deleting your account cannot reach them: there is no link from your account to follow. That is the trade: the copies are not tied to you, and for the same reason we cannot look yours up. If a goal, injury note or workout note you wrote contains something you would rather we did not hold, write to us and tell us roughly what it said and when, and we will do our best to find and remove it.
Our service logs record that each request happened, with a truncated identifier, and nothing of what was asked. They are not part of an account deletion.
If you would like a model provider’s copy of a past request removed, write to the same address and we will pass the request on.
Children
Aptus is not directed to children and is not intended for anyone under 18.
Health
Aptus is a training app, not a medical device or a medical service. Nothing it produces is medical advice, and the injury notes you write are used only to steer exercise selection away from what you flagged.
Changes
If this policy changes, the date at the top changes with it, and the current version will always be at this address.
Contact
EbonyKris — support@ebonykr.is