In short
- Operator Fitness stores the training data you enter so it can show your progress.
- Sleep, bodyweight, mood, stress and nutrition logs are health data. We process them only with your separate, explicit consent, which you can withdraw at any time.
- We do not sell or share your data, we do not show ads, and we do not track you across apps or websites.
- You can export or permanently delete everything from Settings, or on the web.
1. Who is responsible
The controller of your personal data is Operator Apps ("Operator", "we", "us"). Contact us about privacy at support@operatorapps.dev.
We will update this section if we appoint a data protection officer or a representative in the EU or the UK.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Username (callsign), email, password (stored only as a salted hash), display name, weight and height units, time zone, gender, date of birth or age | You, at sign-up and in Settings |
| Training data | Workouts, exercises, sets (weight, reps, effort/RPE, distance, time), routines, custom exercises, goals, and the personal records and achievements computed from them | You; CSV files you import from Hevy or Strong |
| Health data (only with consent) | Biometrics logs: sleep duration and quality, bodyweight, mood, stress, calories, protein, hydration, recovery score, private notes | You |
| Squad data (only if you use squads) | Squads you create or join, your activity-sharing choice, reports and blocks you make | You |
| Consent records | Which policy versions you accepted and your health-data consent choice, with dates | You, at sign-up and in Settings |
| Technical data | Server logs of requests (time, path, status, your user ID), security events such as failed sign-ins, the date of your last activity, and error reports if error tracking is enabled | Automatically, when you use the service |
We do not collect your location, contacts, photos, advertising identifiers or data from other apps. We do not read health platforms (Apple Health, Health Connect) today. If we add that, we will ask for your permission first and update this policy.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Create and run your account; log workouts; show history, records, routines, goals, recovery and training-load (ACWR) insights computed from your training | Contract (Art. 6(1)(b)) |
| Store and analyse Biometrics logs (readiness, sleep, nutrition, lifestyle correlations) | Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) |
| Squads: show your callsign to members and, if you switch on sharing, your activity | Contract (Art. 6(1)(b)), at your request; for health-related values, your explicit consent given by switching sharing on (Art. 9(2)(a)) |
| Keep the service secure: rate limiting, preventing abuse, handling reports, investigating incidents and errors | Legitimate interests (Art. 6(1)(f)) |
| Keep records we must keep by law, and records that prove your consent | Legal obligation (Art. 6(1)(c)); establishing and defending legal claims |
All insights are computed for you only. We make no automated decisions that have legal or similarly significant effects on you.
4. Health data and your consent
- Consent is separate from accepting the Terms, is never pre-ticked, and is optional: you can use Operator Fitness for workouts without it.
- Without consent, the service refuses to store or read Biometrics logs.
- You can give or withdraw consent at any time in Settings › Privacy & data. When you withdraw, Biometrics logging stops. You can choose to delete your existing logs at the same moment; otherwise they are kept until you delete them or your account.
- Health data is never used for advertising, marketing or profiling, and never sold.
Residents of Washington, Nevada and Connecticut should also read our Consumer Health Data Privacy Policy.
5. Squads
Squads are optional private groups of up to 50 people, joined with an invite code.
- Always visible to members of a squad you join: your callsign (username) and your membership.
- Visible only if you switch on activity sharing for that squad (off by default): completed sessions (name, date and total volume), selected personal records (exercise and value), your weekly volume and session count on the squad leaderboard, and your contribution to the squad's weekly challenge.
- Your biometrics logs, notes, bodyweight and profile details are never shown to other members.
- You can switch sharing off or leave a squad at any time. You can block a member so you no longer see their activity, and report a member for abuse. Reports are reviewed by us and kept only as long as needed to handle them.
6. Who receives your data
We do not sell, rent or share your personal data for advertising. Apart from the squad features you choose to use, nobody else can see your account. We use service providers (processors) that process data only on our instructions and under a data processing agreement:
- our cloud hosting and database provider, which stores the service and your data;
- an error-tracking provider, if enabled, configured not to receive request contents, email addresses or health values;
- an email provider, if we send you service emails.
The app stores that distribute the apps (Google Play and the Apple App Store) act as independent controllers for their stores. We may disclose data if the law requires it.
7. International transfers
If a provider processes data outside the European Economic Area or the UK, we rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies, or the UK Extension to it) or on the European Commission's Standard Contractual Clauses (and the UK Addendum) with additional safeguards.
8. How long we keep it
| Data | Kept |
|---|---|
| Account, training, squad and health data | While your account exists. Deleting the account removes it from the live database immediately. |
| Inactive accounts | Accounts with no sign-in or activity for 25 months are deleted permanently, in the same way as a deletion you request. |
| Backups | Encrypted, kept at most 35 days, then overwritten. Deleted data is never restored into the service. |
| Application logs | 30 days (no request contents, no health data) |
| Security logs | 90 days (180 days for export and deletion events) |
| Error reports | Up to 90 days (no request contents, emails or health values) |
| Your consent choices and when you made them | Part of your account; deleted with it |
| Emails you send us | Up to 12 months after the conversation ends, unless the law requires longer |
9. Your rights
| Right | How |
|---|---|
| Access and portability | Settings › Export my data downloads everything we hold about you as a ZIP file: a complete JSON file plus CSV tables of your workouts, sets, Biometrics logs and personal records. |
| Rectification | Edit your profile, workouts and logs in the app, or contact us. |
| Erasure | Settings › Delete account permanently, or the web deletion page. |
| Withdraw consent | Settings › Privacy & data, at any time, without affecting processing that happened before. |
| Restriction and objection | Email support@operatorapps.dev. |
| Complaint | To the data protection authority where you live or work, or where we are established. In the UK, please contact us first; we acknowledge complaints within 30 days, and you can then complain to the Information Commissioner's Office. |
We answer requests within one month (extendable by two months for complex requests). Requests from your signed-in account are verified by the sign-in itself; email requests are verified through your account email address.
10. United States residents
We do not sell or share (for cross-context behavioural advertising) personal information, including sensitive personal information, and we do not use it to infer characteristics about you beyond providing the service. We honour Global Privacy Control signals, although there is no sale or sharing for them to switch off.
Residents of California and other states with privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana) have rights to know, access, correct and delete their personal information, to obtain a portable copy, and not to be discriminated against for exercising them. Use the tools above or email us; you may use an authorised agent. If we decline a request, you can appeal by replying to our answer.
California notice at collection. Categories collected in the last 12 months: identifiers (username, email, user ID); personal records under Cal. Civ. Code §1798.80 (name if you give one); characteristics of protected classifications (age, gender); sensitive personal information (account login credentials; health information, with consent); internet activity limited to your use of the service; inferences shown only to you. Purposes, sources and retention are described in sections 2, 3 and 8. None are sold or shared.
Washington, Nevada and Connecticut consumer health data is covered by the Consumer Health Data Privacy Policy.
11. Children
Operator Fitness is for people aged 16 and over. We ask for your date of birth at sign-up and refuse younger users before an account is created, so nothing is stored about them. If you believe someone under 16 has an account, contact us and we will delete it.
12. Security
Data is encrypted in transit (HTTPS). Passwords are stored as salted hashes. Each request is checked against your account so that one user can never read another's data. In the app, your sign-in token is kept in your device's secure storage. Access to production data is limited to people who need it. No method is perfectly secure; we will notify you and the authorities of a breach as the law requires.
13. Cookies and browser storage
The app uses no cookies and contains no analytics, advertising or tracking SDKs.
14. Not medical advice
Readiness, recovery, training-load, nutrition and other insights are general fitness information for healthy adults. They are not a diagnosis or medical advice. Consult a physician before starting a new training programme.
15. Changes
We will post changes here and update the version date. For material changes we will notify you in the app before they take effect, and ask for consent again where the law requires it.
16. Contact
Operator Appssupport@operatorapps.dev