1. Who we are
Fortium is made by Sviatoslav Nahirnyi, an independent developer based in the United Kingdom, who is the data controller for the personal data described here.
2. The short version
- No ads. No tracking. We never sell or share your personal information.
- Your data is used to run and improve Fortium, and nothing else.
- AI features only run after you say yes, and you can turn them off at any time.
- Logging, your full history and data export are free. You can delete your account and all your data from inside the app.
3. What we collect and why
| Data | Examples | Why we use it | Where it comes from |
|---|---|---|---|
| Training data | Workouts, sets, reps, weights, programs, routines, notes, custom exercises, records | To run the app: show targets and records, and back up your data | You |
| Profile and preferences | Goal, experience, equipment, training schedule, units, an optional display name | To build and adjust your program | You |
| Health information you give us | Body weight you enter; injuries, pain or limits you mention in onboarding or to the coach | To adjust your program around them (only with your explicit consent) | You |
| Content you import | Photos, screenshots, scans, PDFs, Word or Excel files, pasted text | To read your program and turn it into workouts | You |
| Coach messages | What you ask the AI coach and its replies | To answer you and propose changes, and to back up your coach thread | You |
| Account identifiers | A random account ID, created without sign-up | To back up your data and restore it if you reinstall Fortium | Our server, when you first open Fortium |
| Purchase information | Your Fortium Pro subscription: the tier (trial or Pro), the product, the expiry date and the App Store's original transaction ID. We never see your payment details. | To unlock Fortium Pro and its AI allowances | Apple (the App Store), sent by the app |
| Usage information | Which AI features you use and when | To enforce fair-use limits and prevent abuse | Our server, when you use an AI feature |
We don't collect: your location, contacts, browsing history, advertising identifiers or payment card details. Exercise search and on-device text recognition stay on your iPhone.
Fortium Pro: Apple takes the payment, and Fortium never sees your payment details. To know you're Pro, the app sends the App Store's signed transaction for your Fortium Pro subscription to our server in the EU. The server keeps the tier (trial or Pro), the product, the expiry date and the App Store's original transaction ID with your anonymous account, and they're deleted with it. So one subscription can't be shared across many accounts, the server also remembers which accounts used it in the last 30 days, and which of its transactions Apple refunded. Both hold only random account IDs and App Store transaction IDs, and outlast a deleted account for the times in section 9.
This website sets no cookies and uses no analytics. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security and reliability.
4. Our legal bases (UK GDPR and EU GDPR)
| What we do | Legal basis |
|---|---|
| Your account, backup, workouts, programs, targets and subscription status | Performance of our contract with you |
| Health information (body weight, injuries and limits) | Your explicit consent, asked the first time the app would keep it. Withdraw it in Profile › Privacy & data › Health details, which deletes it. |
| Sending your material to our AI provider for imports, plans and coach replies | Your consent, given in the app before the first AI request |
| Fair-use limits, abuse prevention and security logs | Our legitimate interests in running a secure, working service. You can object at any time. |
| Records we must keep by law | Legal obligation |
You don't have to give us health information or use AI features: they are optional, and logging works without them. An account ID is needed for Fortium to back up your data.
Fortium doesn't make decisions about you based solely on automated processing that have legal or similarly significant effects. The AI coach only proposes changes to your program, and you approve or decline each one.
5. AI features
Fortium uses Anthropic's Claude models, through Fortium's own server, to read programs you import, build programs and power the AI coach. Before the first AI request, Fortium asks for your permission.
What is sent: the files and photos you choose to import; the messages you write to the coach; the answers you gave in onboarding (such as goal, experience, equipment and schedule); a summary of your training (for example recent sessions, top sets and your body weight if you logged it); and injuries or limits you told Fortium about, when they matter to the request.
What is never sent: your name, your email address or your Apple Health data.
Retention: Fortium's AI server does not store the content of AI requests. It logs only technical details such as the request ID, the feature used, token counts and cost. Your coach thread is kept on your iPhone and in your backup, like your workouts. Anthropic deletes inputs and outputs within 30 days, may keep them for up to 2 years if its safety systems flag them, and does not use them to train its models.
AI can be wrong. Review every program and suggestion before you train. Fortium does not give medical advice.
Turn it off: open Profile › Privacy & data › AI features in the app. Logging, history, targets and records keep working without AI.
More detail: How Fortium uses AI.
6. Who processes your data
We use a small number of service providers. Each is bound by a data processing agreement and must protect your data to at least the standard in this policy.
| Provider | What they do for us | Where | How long |
|---|---|---|---|
| Supabase | Your backup, your anonymous account, your subscription status and our server functions (our AI proxy stores no request contents) | European Union (Ireland) | Until you delete your data |
| Anthropic (Claude API) | Imports, program building and coach replies | Stored in the United States; processing may happen in other countries | Up to 30 days (up to 2 years if flagged); never used for training |
| Apple | Payments and subscriptions through the App Store, crash reports you choose to share | — | Under Apple's privacy policy |
| Google (Gmail) | Support email | United States / EU | See section 9 |
| Lovable | Hosting this website | Various | Standard server logs |
7. International transfers
Some providers process data outside the UK and the European Economic Area, mainly in the United States. We protect these transfers with the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or the EU–US Data Privacy Framework and its UK Extension where the provider is certified.
8. Apple Health
Apple Health integration is planned for a future version. When it arrives, Fortium will read or write only the data types you allow (for example, saving your workouts). Health data from Apple Health stays on your device. It is never used for advertising or marketing, never sold, never sent to our AI provider and never stored in iCloud by Fortium.
9. How long we keep data
| Data | How long |
|---|---|
| Account and training data | Until you delete it or your account |
| Subscription status | Until you delete your data or your account |
| Which accounts used a subscription | 30 days after its last use, even if you delete your account |
| Refunded App Store transactions | Until the period they paid for would have ended, plus a day |
| Content of AI requests | Not stored by Fortium; Anthropic up to 30 days (longer only if flagged) |
| AI usage records | As long as your account exists; deleted with it |
| Backups | Deleted data leaves our hosting provider's daily backups within 7 days |
| Support emails | Up to 2 years after the conversation ends |
10. Your rights and your privacy choices
You can use these rights at any time, free of charge:
- Access and export: Profile › Privacy & data › Export my data gives you every set you've logged as a CSV file, plus your programs, routines, exercises, body weight and coach chat. Or email us for a copy of everything we hold.
- Correction: edit anything in the app, or ask us.
- Deletion: Profile › Privacy & data › Delete all data on this device erases everything on your iPhone and deletes your account and its backup on our server: at once, or as soon as you're back online. Cancel an active subscription separately in your iPhone Settings, because Apple handles billing.
- Withdraw consent: turn Health details off in Profile › Privacy & data (it deletes your body weight and injury answers), and AI features off in Profile › Privacy & data › AI features.
- Object or restrict: object to how we use your data for fair-use limits and security, or ask us to limit how we use your data.
- Complain: you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority in the EU.
To make a request, email sviatoslav.nahirnyi@gmail.com. We reply within one month.
Fortium does not track you across other companies' apps or websites, so it never shows Apple's tracking prompt.
11. Children
Fortium is not for children under 13, or under the age of digital consent in your country if that is higher. If you believe a child has given us personal data, contact us and we will delete it.
12. Notices for US residents
We do not sell or share personal information, we don't use it for targeted advertising, and we don't use it for profiling that has legal or similarly significant effects. Residents of California, Washington, Nevada and other states with privacy laws can use the rights in section 10. See our Consumer Health Data Privacy Policy for health data.
13. Security
Data is encrypted in transit (TLS). Each account's data is isolated with database access rules, and access is limited to the developer. If a breach affects your data, we will notify you and the authorities as the law requires.
14. Changes to this policy
We'll update the date at the top when we change this policy, and tell you in the app before material changes take effect. Previous versions are available on request.