Privacy Policy

In effect since August 28, 2026. The controller of your data is RopturGym. Write to contacto@ropturgym.com about anything on this page, including exercising your rights. This is a translation. The Spanish version is the binding one.

What you should know before reading the rest

We store health data: weight, body composition, measurements, heart rate, sleep, injuries and photos of your body. It is sensitive information and we treat it as such.
The assistant sends some of that data to Anthropic, in the United States, every time you ask it something. We do not send your name or your email.
The database and the photos are not encrypted on the server, and neither are the nightly copies we take of the database. What travels over the internet is encrypted, and so is the backup file you download.
Backups keep what you delete for up to seven days (the daily ones) and up to four weeks (the weekly ones).
The server is in Santiago, Chile, not in Argentina.

1. What we store

Everything below is entered by you, or comes from what you do inside the app.

Your account: email, name, password (stored as a cryptographic hash, never in clear), profile picture if you set one, public handle and the names of the devices you signed in from.
Your profile: date of birth, sex, height, target weight, activity level, goal, experience, and the free-text field for injuries and medical notes.
Training: routines, sessions with date and duration, every set with its weight and reps, perceived effort, energy, mood, sleep quality, pain flags, records and notes.
Cardio: type, duration, distance, pace, average and maximum heart rate, elevation, weather and effort.
Nutrition: meals by day with their time, your own foods and recipes, nutrition targets, water, supplements with their dates and prices, and meal plans.
Measurements and photos: weight, circumferences, skinfolds, body fat percentage, muscle mass, body water, basal metabolic rate, and the progress photos you upload.
Phone health data: if you turn it on in the Android app, one value per day for heart rate, steps and sleep, taken from Health Connect.
Spending: description, amount, date, category, payment method and vendor.
Social: friendships, challenges you take part in, and the content of the messages you send.
Assistant: your full conversations, the facts you asked it to remember, and how much you used it.
Preferences and operation: theme, units, currency, language, time zone, reminders, notifications, and a log of important actions (what you did and when, never the content).
Subscription: which plan you have, until when, the amount and exchange rate it was contracted at, a MercadoPago identifier, and your payment history —date, amount, plan and whether any was refunded—.

We do not store any card details: not the number, not the last digits, not the holder, not the expiry. All of that happens inside MercadoPago. We also do not ask for or store national ID, tax ID or address.

2. What we use it for

To show you your own data and compute your statistics, progress and goals.
So the assistant can answer you using your data, when you ask it.
To bill you, if you have a paid plan, and to track your usage limits.
To send the emails we can’t do without: verification, password reset and security alerts.
To moderate the social layer when someone reports a message.
To keep the service running: error logs, backups and anti-abuse limits.

We do not use your data for advertising, we do not sell it and we do not share it commercially. There is no third-party analytics, no trackers and no ad SDKs, on the web or in the app.

3. The assistant, and what goes to Anthropic

The assistant runs on models from Anthropic, a company in the United States. Every time you ask it something, the context it needs to answer travels there:

Your age, height, target weight, level, training days per week and goal.
The text of your injuries and medical notes, if you filled it in.
Your latest weigh-ins, your latest sessions, your recent records.
Your nutrition targets, what you ate today and yesterday, your active reminders.
Your own foods and exercises, your currency, units and time zone.
Which screen you’re asking from.
The photo, only when you attach one. It is not stored on the server.

Your name and email are not sent. Phone health data (heart rate, steps, sleep) is only sent if you turn that switch on, and it comes turned off; you can turn it off again whenever you want from Settings, and delete what was already imported from Settings → Reset.

If you never use the assistant, nothing goes to Anthropic. How Anthropic handles that information is governed by its own policies, which we do not control.

4. The other services involved

MercadoPago (Argentina): receives your email and an internal identifier so it can bill you. Only if you subscribe.
Spacemail: this is where our emails go out from. It receives your address and your first name. No health data ever travels by email.
Open Food Facts (France): when you scan a barcode or search for a food, we send that code or that text. Nothing that identifies you.
dolarapi.com: we fetch the exchange rate from the server, with no data of yours.
Google Play Services (Android only): the barcode-reading module is downloaded from there. The scan itself happens on your phone.
Your phone’s voice dictation: we use the system recognizer. On most Android phones that means the audio is processed on Google’s servers, beyond our reach. It’s optional: it only happens if you tap the microphone.
Health Connect (Android): we read heart rate, steps, sleep and weight from it, and only when you tap “Sync” after granting permission. Never automatically.

App updates are downloaded from our own server. Your phone tells it which version it has and nothing else; there is no third-party telemetry.

5. What other people can see

Your friends only see the metrics you chose to share. All four switches come turned off. Joining a challenge turns on that challenge’s metric — without your number there is no leaderboard — and it turns itself back off when you leave, when it’s deleted or when it ends, unless another challenge of yours still uses it. You can review it any time in Friends → Privacy.
Messages are seen by the person you send them to. You can delete your own, and they disappear from their screen too; you can’t delete theirs, because deleting what someone said is a different thing. A message someone reported can’t be deleted, so the report doesn’t lose its content. You can block and report.
Anyone with the link can see a report you shared, without an account. In clinical mode that report includes your full name, age, sex, height, BMI and body composition. They last up to thirty days and you can revoke them one by one from Statistics → Report.
Your progress photos are served through a signed link valid for two hours. During that time, whoever has the link can open them without signing in. They never appear in shared reports.
Whoever runs the service has direct access to the database, so technically they can see everything you store. The day-to-day work is not done that way: there is an internal panel that shows only a few fields — emails, names, handles, dates, device names and assistant usage — and the content of messages someone reported. It does not show your meals, your photos or your private conversations. Direct database access exists to operate and repair; the commitment is about what is looked at, not about what could be.

6. How long we keep it

Trash: 30 days. Deleted sessions, meals, measurements, cardio and photos can be recovered during that window; after that they go on their own. Everything else is deleted immediately.
Action log: 365 days.
Accounts that never verified their email: 24 hours, and they are fully deleted.
Copy taken before a restore: the last three, up to 30 days.
Everything else is kept while you have the account, until you delete it.

Backups are the exception, and it needs saying plainly. They run every night and include the database and your photos. Seven daily and four weekly copies are kept, unencrypted, on the same server. That means something you delete today can still exist in a backup for up to four weeks before it is gone for good. There is no honest way to put it differently.

7. What you can do

Take your data: Statistics → Export gives you a file with workouts, meals, measurements, goals, routines, records, cardio, foods, supplements, spending, recipes, preferences, the assistant’s memory and your phone’s health data. If you choose to include photos, the photo files travel too (and their records always do). It does not include your conversations with the assistant or the social layer — friends, challenges and messages. If you need any of that, ask us and we’ll send it.
Deactivate your account: you’re signed out everywhere and your data waits for you. You come back by signing in again.
Delete it forever: erases everything — including the photo files, the assistant’s conversations and memory, and health data — and cancels your plan if you have one. It asks for your password and for you to type the word ELIMINAR. There is no way back, except for whatever remains in backups until they rotate.
Delete in parts: Settings → Reset deletes the category you pick — nutrition, training, measurements, spending, the assistant’s memory and phone health data — without touching your account.
Correct anything wrong: everything is editable in the app. If something isn’t, write to us.
Control the assistant: turn health data off, see and delete one by one what it remembers about you, and delete whole conversations.
Close sessions: Settings → Sessions lists every device and closes them.
Revoke shared reports and adjust what your friends can see.

If you want to exercise any of these rights and can’t find where, write to contacto@ropturgym.com and we’ll sort it out. You can also complain to Argentina’s Agency for Access to Public Information.

8. How we protect it, without overstating

What we do:

Passwords are stored as bcrypt hashes. Nobody can read them, us included.
Everything travels over HTTPS. The database is not exposed to the internet.
The phone session uses a fifteen-minute token plus a renewal credential that lives in Android’s secure store, rotates on every use, and is revoked entirely if we detect it was reused.
Every query checks the data is yours, and automated checks block shipping code that skips that filter.
There are brute-force limits on sign-in, sign-up and password reset.
Error logs do not store personal data: they store your internal identifier, not your email, and discard content.

What we don’t do, and we’d rather you knew:

There is no encryption at rest for the database or the photos, nor for the nightly copies we take of the database. Anyone with access to the server could read them. The backup file you download and the copy we keep of your data right before a restoreare encrypted; their key also lives on the server, so they protect the file if it leaves — not against someone who gets in.
There is no two-factor authentication. Your password is the only key: use one you don’t reuse anywhere else.
Backups live only on the same server. There is no copy in another location.

9. Where the data lives

The server is in Santiago, Chile, on Oracle Cloud infrastructure rented for that purpose. Even though the service is aimed at Argentina, your data is stored there. On top of that, as described above, information goes to the United States (Anthropic), Argentina (MercadoPago) and France (Open Food Facts).

10. Minors

RopturGym is for people aged 16 or older. We do not aim it at anyone younger and we do not knowingly collect their data. If you are a parent or guardian and believe we created an account with a minor’s data, write to us and we’ll delete it.

11. Changes

If this policy changes, we publish the new version here with its date. If the change is significant — a new third party, a new use of your data — we email you before it takes effect.

The terms of use are in the Terms of Service.