Privacy policy
This page says what Voimana collects, why, who handles it, and what you can do about it. It covers the Voimana app for iPhone and this website. We treat everything you log in the app as health data, and we use it only to run the app for you.
Who runs Voimana
Voimana is made and run by one person, Josiel Loya, in Utah, United States. When this policy says "we", it means Josiel. You can reach us at privacy@voimana.com.
What we collect
Only what you put into the app, and what the app needs to work. We do not ask for your name, age, sex, height or birthday, and the app reads nothing from Apple Health, your contacts, your photos or your location.
Your account
Your email address, your account id, your password (of which Supabase keeps only a scrambled form that cannot be turned back into it), when you last signed in, and the IP address and device details of each phone you are signed in on. On your phone, your sign in is kept in the iOS Keychain, the phone's secure storage.
Your training
Your workouts, the exercises you create, the exercises in each workout, your sets (weight, reps, time, distance, RPE, which is how hard a set felt, and set type), your templates and the rest settings you choose for an exercise. The records and charts the app shows you are worked out from these.
Your body measurements
Your body weight, body fat and the 15 tape measurements the app offers.
Your words
The words you type: the names of your workouts, templates and exercises, and the notes on an exercise or a set.
Your settings
Your units, your rest timer defaults, your timer step, and the record of when you agreed to this policy.
What stays on your phone
What the app needs to work on this phone: the queue of changes waiting to sync, where a download left off, your import choices and the rest timer in progress. It never leaves your phone, except as the changes it carries to our server.
Importing and exporting
When you import an export from Strong, the app reads its own copy of the file on your phone and then deletes that copy. Only the workouts and measurements it found are kept. Your original file stays where you saved it.
When you export your data, the file is built on your phone and goes only where you send it. We never see it.
Why we use it
Only to run the app for you:
- to store, sync and restore your history, so it is safe and comes back on a new phone;
- to show you your progress, like your records and your charts;
- to keep the service secure;
- to fix a problem you report to us.
Nothing else.
Where it is kept
- On your phone, protected by iOS's file encryption, which works when your phone has a passcode.
- On Supabase's servers in Oregon, United States.
- In your iPhone backup, if you make one (in iCloud or on a computer). That backup is yours, and it holds the app's data as it does every app's.
The companies that handle it for us
We share your data with no one. These companies handle parts of it on our behalf, only to do the job written beside each one.
Supabase
Runs our database, sign in and server functions, on Amazon Web Services in Oregon, United States. It receives everything above except what stays on your phone. Like any server, it also keeps technical logs of each request, your IP address among them, which expire as Deleting your data says.
Resend
Sends the emails with your 6 digit codes, when you sign up or reset your password, through Amazon. It receives your email address.
Cloudflare
Serves voimana.com and forwards mail sent to privacy@voimana.com. It receives no app data. It handles your IP address to deliver a page to you, and the emails you send us pass through it.
Apple
Delivers the app through TestFlight, Apple's app for trying an app before its release, while Voimana is being tested. It receives the crash reports and feedback you choose to send while testing. Apple's own privacy policy covers what Apple collects.
Hosts the mailbox that privacy@voimana.com forwards to. It receives what you email us.
What we never do
- We never sell your data.
- We never use it for advertising.
- We never track you across other companies' apps or websites.
- We never give it to data brokers.
- We never use your health or fitness data for marketing.
- We never put it in iCloud ourselves. Your own iPhone backup may include the app, as it does every app.
- We hand it over only when the law makes us, and then we tell you, unless the law forbids that.
Your health data
We treat everything you log as health data: your workouts and sets, the words you type, and your body measurements. The app asks for your agreement before you log anything, and asks again before we collect a new kind of data, use a new company, or use your data in a new way. You can withdraw your agreement at any time by deleting your account, or by emailing us. Our consumer health data privacy policy says the same in the form Washington's My Health My Data Act asks for.
How long we keep it
As long as your account exists. The app deletes nothing of yours on a schedule, because your history is the point of it. The technical copies our providers keep expire on their own, as Deleting your data says.
Deleting your data
Deleting your account (in the app, Account, then Delete account) removes every workout, set, measurement, template and note from our server right away, and clears this phone. The copies our providers keep expire on their own: their technical logs within 7 days, backups of our database within 7 days, and their records of the emails we sent you within 30 days.
Deleting a single workout, set, measurement or template hides it everywhere in the app. The hidden copy stays on your phone and on our server until your account is deleted, because that is how the app makes a deletion reach every copy of your data. If you want one item erased for good, email us and we will erase it from our server. The hidden copy on your phone goes when you sign out or delete your account.
If you are signed in on another phone, the copy there stays until you sign out on it. An iPhone backup you made earlier keeps what it held until you replace or delete that backup.
Your rights
- See it and take a copy. In the app, Account, then Export all your data, gives you a copy of your workouts, measurements, templates, exercises and settings. It leaves out what you deleted and a workout still in progress; email us for those.
- Correct it. Edit your workouts, measurements, templates and settings in the app. For anything else, like your email address, email us.
- Delete it. In the app, or by email.
- Withdraw your agreement. Delete your account, or email us and we will delete it for you.
- Know who has it. Ask us, and we will confirm what we hold about you and list every company that handles it (they are all named above).
- Appeal. If we turn a request down, reply to our answer and we will look at it again.
Email us from the address on your account, so we know it is you. We answer within 30 days, and using a right never costs you anything.
Children
Voimana is not for anyone under 13. If we learn that an account belongs to someone younger than that, we delete it.
How we protect it
- Everything between the app and our server is encrypted on the way.
- On our server, Supabase encrypts it while it is stored.
- On your phone, iOS's file encryption protects it when your phone has a passcode, and your sign in lives in the iOS Keychain, the phone's secure storage.
- Through the app, each account can reach only its own data (our database checks every request; this is called row level security).
Who looks at your data
We open your data only to fix a problem you reported to us, to answer a request you make under Your rights, or to keep the service running, and we let nobody else open it. That is a promise about what we do, not a claim that it cannot be done: whoever runs a service like this one can reach its database. Supabase's own staff are bound by Supabase's terms.
If someone gets into your data
If we confirm that someone got into your data, we tell you by email within 72 hours, with what happened and what we did about it.
AI
No AI service receives your data today. Before that changes, the app will ask you.
This website
voimana.com sets no cookies, runs no scripts and no analytics, and loads nothing from anywhere else. Cloudflare handles your IP address to deliver the page.
Changes to this policy
This is version 1, effective . When we change something that matters (a new kind of data, a new company, a new use of your data), the version goes up and the app asks you again before anything new happens. A change of wording only changes the date.
Contact
Email privacy@voimana.com, from the address on your account so we know it is you.