Privacy Policy

What data Operiona stores

Operiona stores data needed to run training, planning, progress, and account features:

• Account data: email address and internal user identifier (managed through ASP.NET Core Identity)
• Profile data: display name, age, height, weight, goal, and training level
• Training preferences: workout days, session length, equipment, and limitations
• Training plans: workout days, exercises, rep ranges, RPE, and rest settings
• Workout history: sessions, sets, load, reps, RPE, notes, and duration
• Gamification data: XP, level, achievements, challenges, and events

Data not collected

Operiona does not collect and does not request access to:

• Location (precise or coarse)
• Contacts or call logs
• Calendar data
• SMS or MMS messages
• Photos or videos (the Android app has no photo upload feature)
• Microphone or camera
• Advertising ID (AAID) or any ad tracking identifiers

Operiona does not use third-party advertising, tracking, or analytics SDKs.

Where data is stored and security

Data is stored on the server running Operiona and linked to your account by an internal user identifier. All communication between the app and server uses HTTPS/TLS encryption. Passwords are not stored in plain text — ASP.NET Core Identity uses secure hashing.

Backups, local drafts, and imports

You may export a JSON backup of your data. Workout drafts may be temporarily stored locally on your device to prevent loss during an active workout. Backup files contain personal and training data and should not be shared publicly.

Training analytics and AI features

Operiona analyzes saved workouts to show volume, progress, compliance, weak-point signals, readiness, and weekly reports. These analytics are private unless you explicitly share specific content.

OpenAI-backed features are optional and require explicit consent. Without consent, deterministic local fallbacks are used and no data leaves the app. When you consent, selected training and profile data (such as weights, reps, RPE, goal, and training level — not pain notes or personal identifiers beyond what is needed) are sent to OpenAI in accordance with their privacy policy. You can withdraw consent at any time in privacy settings.

AI features do not diagnose injuries, replace medical advice, or automatically change your plan.

Notifications

The mobile app may use local OS notifications to deliver rest timer reminders during workouts. These notifications are generated by your device without communicating with our servers. On Android 13 and above the app requests notification permission (POST_NOTIFICATIONS) before showing any notifications.

Operiona does not send SMS or marketing email notifications.

Diagnostics

If the app encounters a runtime error, the mobile client may send a diagnostic report to our own server. This report may include: error message, stack trace, app version, device type, and platform. No personal training data or sensitive personal information is included in error reports.

Operiona does not use third-party crash reporting or analytics SDKs. Diagnostic data stays on our infrastructure.

Subscriptions and payments

Some features may be available through the Operiona Pro subscription. When paid features are active, purchase and subscription flows are handled by Google Play Billing or Apple App Store. Operiona does not process or store payment card data.

If billing is active, we may receive subscription status events and an internal user identifier from RevenueCat (our subscription management provider) to grant or revoke Pro access. No personal payment details are shared with us in this process.

Public sharing, Arena, rankings, and photos

Public profile, public workouts, public plans, Arena visibility, rankings, and public photos are opt-in. Content remains private unless you explicitly make it public. Public visibility can later be revoked where supported.

Moderation

Public content may be reported and moderated. Moderators may hide content that violates community guidelines. Hiding is reversible — your data is not deleted. Reports are anonymous to the content author.

Data retention

Account and training data is retained until you delete it. Technical and security logs are kept for a limited period (up to 90 days) for diagnostic and security purposes. If paid subscriptions are used, billing-related records may be retained as required for accounting and fraud prevention.

Deleting data

You have the right to delete your data at any time:

• Delete training data removes profile, exercises, plans, and workout history while keeping the account active.
• Delete account removes training data and the Identity account. This action is irreversible.

Both options are available in the app under Profile → Settings. To request deletion by email or learn more about the process, see Account deletion.

Contact

For privacy questions or data requests, contact us at kontakt@operiona.com.