Sporvik

Privacy policy

Last updated: October 13, 2026

In short: we only collect what is needed to track your training. In the free version your training data stays on your device. With Premium it is stored with your account in the EU. We don't sell data and we don't show ads.

1. Who are we?

Sporvik is an app by an independent developer based in Belgium ("we"). We are the controller of your personal data. Contact: zeping02@gmail.com.

2. What data do we process?

Account data via Google sign-in: name, email address and a unique user ID.
Profile: first name, sex, date of birth, height, weight, training goal and experience.
Training data: workouts, exercises, sets, weights, reps, routines and body weight.
Nutrition data: the foods you log (name, amount, meal and nutritional values), your own foods, your activity level and your calorie and macro targets.
Subscription: status, term and a purchase reference from Google Play. We never see your payment details (such as your card); Google processes those.
Buddies (only if you turn on sharing): your first name, the dates you trained in the last 10 weeks, your last workout (time, name and duration) and personal records from the last 14 days, plus the list of buddies you connected with and your invite code. Sets, weights per set, body weight and nutrition are never shared.
Profile photo (optional, Premium): if you set a profile photo, we store it in Google Firebase (Cloud Storage, European Union). Only you and your buddies can see it. You can remove it at any time; it's also deleted when you delete your account.
Buddy reports: if you report a buddy, we keep your report (reason, optional note, which buddy you reported, their name and a reference to their profile photo) to review it and handle abuse.
Notifications: a push token for your device, your app language and your notification settings, so we can send buddy notifications (nudges and "your buddy trained").
Meal photos (Premium, optional): when you use "Snap a meal", the photo is sent to Google (Gemini API) to recognize the foods and estimate the amounts. We don't store the photo and it isn't kept after the analysis; only the foods you confirm are saved in your food log. We keep a daily counter of how many photos you analyzed.
Usage statistics and crash reports (only if you agree): when you choose "Yes, help improve" (or turn on Profile → Share usage statistics & crash reports), the app sends anonymous usage statistics to Google Analytics for Firebase and crash reports to Firebase Crashlytics: which features you use and which screens you open (for example "workout finished", "food logged", with rounded values such as a duration of 30–45 minutes), the app version, your app language, your device model and operating system, an app instance ID, and details of crashes. We don't send your name, email address, user ID, food names or anything you type, and this data is never used for ads (advertising IDs and ad personalization are turned off). Without your consent nothing is sent. You can turn it off at any time in Profile; the statistics collected on your device are then reset.
Technical data needed to run the service (such as error logs from our servers).

We process health-related data (such as weight, training and nutrition) only because you enter it to track your own progress, based on your explicit consent when using the app.

3. Where is your data stored?

Free version: your profile and training data are stored only on your device. We have no access to it. Your account (sign-in) and subscription status are stored with Google Firebase. If you turn on buddy sharing, the small activity summary described above is also stored there, in any version of the app.
Premium: your data is synced with your account in Google Firebase (Cloud Firestore) in data centers in the European Union, so you can access it on any device.

4. What do we use it for, and on what legal basis?

Running the app and showing your progress (performance of the contract).
Processing and verifying subscriptions (performance of the contract and legal obligations).
Health-related data: based on your consent. You can withdraw it at any time by deleting your account.
Usage statistics and crash reports, to see which features are used and to fix crashes: based on your consent, which you can withdraw at any time in Profile.

We don't use your data for advertising, profiling or automated decision-making, and we never sell it.

5. Who do we share data with?

Google (Firebase and Google Play) as a processor for sign-in, storage, server functions, push notifications and payments, and (Gemini API, paid service) to analyze meal photos. Google doesn't use these photos to train its models.
Google (Google Analytics for Firebase and Firebase Crashlytics) as a processor for usage statistics and crash reports, only if you agreed (see section 2). Google signals and ad features are turned off.
Your buddies: people you connect with through an invite see your activity summary and profile photo (see section 2). You can remove a buddy or stop sharing at any time; stopping deletes the summary.
Open Food Facts (a non-profit food database): when you search for a product online or scan a barcode, the search term or barcode is sent to Open Food Facts to look up the product. No account data or personal information is sent with it.
No one else, unless the law requires us to.

Data may be processed by Google outside your country under Google's standard data protection terms.

6. How long do we keep it?

As long as your account exists. If you delete your account, we erase your data within 30 days. Usage statistics are kept for 14 months (our Google Analytics retention setting) and crash reports for 90 days, after which Google deletes them automatically. Data we are legally required to keep (such as purchase records for accounting) is kept as long as required.

7. Your rights

You have the right to access, correct, delete, restrict, object to and port your data, and you can withdraw your consent at any time. Email us at zeping02@gmail.com. You can also file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the data protection authority in your country.

8. Deleting your account and data

In the app: Profile → Delete account. Or follow the steps on this page.

9. Security

Data is sent encrypted (HTTPS) and in the cloud it is only accessible to your account. Our server verifies subscriptions with Google.

10. Children

Sporvik is intended for people aged 18 and over.

11. Changes

We will let you know in the app about important changes.

This policy is also available in Dutch.