Legal

Privacy Policy

Last updated: August 16, 2026 · Version française

Who we are

Sport Habits is published by BULDEE (contact: legal@sporthabits.app). This policy describes the data processed by the Sport Habits iOS and Android application and its related services.

Data stored on your device

Most of your data stays local, on your device: training programs, session history, loads, weigh-ins, hydration, meal check-offs, settings. It is deleted when you uninstall the app.

Data processed by our servers

  • Account: e-mail address, first name and a technical identifier. Your password is never stored in clear text, only its cryptographic hash. Authentication is handled by our own server, not by a third-party identity provider.
  • Program import: the PDF or Excel file you import is sent encrypted (TLS) to our server, passed to the Claude API (Anthropic) to extract the program structure, then deleted immediately after analysis. Anthropic does not use it to train its models.
  • Trial and subscription: your trial state, applied coach code and subscription tier, to enforce your access rights.
  • Sync: your finished sessions and measurements are kept on our servers so they can be restored after a reinstall or on a new device.
  • Coach space: if you create a coach space, your display name, referral code and aggregate counters. Never your clients' identities without their knowledge.
  • Purchases: receipt validation goes through Apple or Google; we never see your payment details.
  • Stability: anonymized crash reports via Firebase Crashlytics.

Health (HealthKit / Health Connect)

With your explicit permission, the app reads your steps and reads or writes your weight and workouts in Apple Health or Health Connect. This data stays on your device and in your health store; it is never sent to our servers, nor backed up to iCloud. You can revoke access at any time in system settings.

What we do not do

  • In the application: no ads, no ad trackers, no data resale. Website audience measurement is described further down and asks for your agreement.
  • No profiling. YouTube videos linked to your exercises open in an embedded player, subject to YouTube's privacy policy, only when you play them.

Website audience measurement

This section covers the sporthabits.app website only, never the application. We measure how this site is found with Metrikia, a tool published by BULDEE, so we know which pages bring in athletes, coaches and gyms. No measurement script is loaded and no data is sent until you accept the question asked at the bottom of the page.

Your choice is kept in your browser's local storage, on your device. You can change it at any time.

Retention and deletion

Server data is kept for as long as your account exists. You can delete your account from inside the app, in your profile, or by writing to the address below. Requests are processed within 30 days.

Your rights

Under the GDPR you have the rights of access, rectification, erasure, portability and objection. Contact: privacy@sporthabits.app.

Processors

Railway Corporation (server and database hosting, European Union), Anthropic (analysis of imported programs), Google Firebase (app integrity attestation, notifications, Crashlytics), Apple and Google (in-app purchases). Transfers outside the European Union are covered by standard contractual clauses.