PlamLegal
Privacy policy
The short version
- Your workouts, programs and progress photos are stored on your iPhone and Apple Watch. Logging needs no account and sends nothing to us.
- Some things leave your device only when you use them: the backup to your account, the Coach, and photo analysis. Each is explained below.
- Coach messages and photos you send for analysis are processed by Anthropic's Claude in the United States. Our server passes them on and keeps none of them.
- No ads, no tracking, no analytics in the app, and we never sell data. Apple Health data is never used for advertising.
- You can export or delete everything from the app, and delete your account at any time.
Who we are
Plam is published by FENIX PLUS EOOD (ФЕНИКС ПЛЮС ЕООД), 38 Tsanko Tserkovski St., 5000 Veliko Tarnovo, Bulgaria, company number (EIK) 104049558. We are the controller of the personal data described here. For anything about your data, write to [email protected].
What stays on your device
Everything you log is stored in the app on your iPhone, and on your Apple Watch if you use it: your gyms, machines and their settings, exercises, workouts and sets, programs, Coach conversations, progress photos and check-ins, and photo analysis results. Your iPhone and Watch exchange workouts and programs directly with each other.
Progress photos are processed on your iPhone before they are saved: turned upright, resized, stripped of their metadata (such as location), and, if you choose, with faces blurred. The original is not kept. Photos are stored with the strongest file protection iOS offers, so they cannot be read while your phone is locked.
We do not receive any of this unless you use one of the features below.
Apple Health
If you allow it, Plam:
- reads your latest body weight, to fill it in on a progress check-in;
- on the Watch, reads your heart rate and active calories during a workout, to show them while you train;
- saves your strength workouts, and body weight you log with Siri or Shortcuts, to Apple Health.
Health data is used only for these purposes. It is never used for advertising or marketing, never sold, and never shared with anyone, except that a body weight you include in a photo analysis is sent with that analysis (see below).
What leaves your device, and when
Your account and backup (optional)
You can create an account with Sign in with Apple. Plam asks Apple for no name and no email address; we receive only an identifier that Apple creates for Plam. With an account, these records are backed up so you can restore them on a new iPhone: exercises you created, gyms, machines and their settings, workouts with their exercises and sets, and programs with their days and planned exercises. Progress photos, check-ins, photo analyses and Coach conversations are not backed up.
The backup is stored by our hosting provider, Supabase, in its Frankfurt (Germany) region. We also keep, per account, a count of Coach and photo-analysis requests and what they cost, so we can apply monthly limits. These counts never include the content of a request.
The Coach (Plam Pro)
When you send the Coach a message, the app sends your conversation together with the training information the Coach needs to answer: your current program, your recent weekly sets per muscle, your recent and best lifts and any that have stalled, your gym's machines, the exercise catalog, and the result of your latest photo analysis, if you have one. It goes to our server function in Frankfurt, which passes it to Anthropic's Claude model and returns the answer.
Photo analysis (Plam Pro, opt-in, 18+)
Photo analysis is off until you turn it on, confirm you are 18 or older, and agree to it. Then, each time you ask for an analysis, the app sends that check-in's photos, and the body weight and waist measurement if you entered them, to our server function in Frankfurt, which passes them to Anthropic's Claude model. The result (an estimated body-fat range and notes on muscle development) comes back to your iPhone and is stored there. You can turn photo analysis off again at any time in the app.
How the Coach and photo analysis are processed
- Where: Anthropic, PBC processes these requests in the United States. This means the content of a Coach request, and the photos of an analysis, are transferred outside the European Union. Anthropic acts as our processor under a data processing agreement that includes the European Commission's standard contractual clauses.
- Our server keeps nothing: our functions do not store or log the content of a request, your photos or the answer. They record only that a request happened, whether it succeeded, and its cost.
- Anthropic: does not use these requests to train its models. It keeps them only for a limited period set out in its commercial terms (currently up to 30 days) to operate its service and detect misuse, unless the law requires otherwise, and then deletes them.
- What the AI does not do: it never changes your data. Every change it suggests is shown to you and applied only if you accept it. Photo analysis only describes muscle development and an estimated body-fat range; it never comments on appearance and is not medical advice.
Subscriptions
Plam Pro is bought through Apple's App Store. Apple handles payment; we never see your payment details. To know whether you have Plam Pro, the app reads your subscription status from the App Store. We use RevenueCat, Inc. (United States) to check and manage subscription status. It receives your purchase history and an anonymous identifier, not your name or email, acting as our processor.
Support emails and reports
If you email us, or report a Coach answer from the app (which opens an email to us), we receive what you write and your email address. We use it only to reply and to fix problems.
Crash reports
The app contains no analytics or crash-reporting code of its own. If you have chosen to share analytics with app developers in your iPhone's settings, Apple may share anonymous crash reports and usage statistics with us.
Why we may use it (legal bases)
| Use | Legal basis under the GDPR |
|---|---|
| Account, backup, the Coach, subscriptions | Providing the service you asked for (Art. 6(1)(b)) |
| Photos, body measurements and training data sent for analysis or to the Coach | Your explicit consent (Art. 6(1)(a) and 9(2)(a)), which you can withdraw at any time by turning the feature off |
| Monthly usage limits, preventing abuse, website server logs | Our legitimate interest in keeping the service safe and affordable (Art. 6(1)(f)) |
| Answering support emails | Our legitimate interest in helping you (Art. 6(1)(f)) |
| Records we must keep by law, such as for tax | Legal obligation (Art. 6(1)(c)) |
Who receives it
| Who | What for | Where |
|---|---|---|
| Supabase, Inc. | Hosting the account, backup and server functions | Frankfurt, Germany |
| Anthropic, PBC | The Coach and photo analysis | United States |
| RevenueCat, Inc. | Subscription status | United States |
| Apple | Sign in with Apple, App Store purchases, Apple Health, iPhone–Watch transfer | Under Apple's own privacy policy |
| Cloudflare, Inc. | Hosting this website | Global network |
Where a provider is outside the EU, the transfer is covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework. We do not sell personal data or share it for advertising.
How long we keep it
- On your device: until you delete it, or delete the app.
- Backup and usage counts: until you delete them or your account. Deleting your account deletes them straight away.
- Coach requests and photos sent for analysis: not kept by us at all; kept by Anthropic only as described above.
- Support emails: as long as needed to help you, then at most two years.
Your choices and rights
- Export: Settings › Privacy and data exports everything Plam holds on your device.
- Delete your data: Settings › Privacy and data deletes everything. If you are signed in, the deletion reaches your backup too.
- Delete your account: Settings › Account › Delete account deletes the account and everything stored with it on our server.
- Withdraw consent: turn photo analysis off in the Photos settings, or stop using the Coach.
- Apple Health: change Plam's access at any time in the Health app or iPhone Settings.
Under the GDPR you have the right to access, correct, delete, restrict and port your data, and to object to processing based on our legitimate interests. Write to [email protected]; we answer within one month. You can also complain to a data protection authority. In Bulgaria that is the Commission for Personal Data Protection (cpdp.bg); you may also contact the authority where you live.
Children
Plam is not meant for children under 16, and photo analysis is only for adults (18+). If you believe a child has given us personal data, contact us and we will delete it.
Security
Data travels encrypted (HTTPS). The backup can be read only with your own sign-in. Our server's access keys never ship in the app. No system is perfectly secure, but we keep what we hold to the minimum the features need.
This website
plamapp.com uses no cookies, no analytics and no third-party scripts or fonts. Our hosting provider processes your IP address and request details in short-lived server logs, to deliver the pages and protect against attacks.
Changes
If we change this policy, we will update the date at the top. If a change affects how your data is used in a significant way, we will tell you in the app before it takes effect.