Strenvio Privacy Policy

Last updated: 9 September 2026

Strenvio helps you build skills, follow your progress, and get personalised sports coaching. This Privacy Policy explains what personal information we collect, how we use it, who receives it, and your choices when you use our mobile app, strenvio.ai, or contact us (together, the “Services”).

Your training information is personal. We do not sell it, share it with data brokers, or use it for targeted advertising. Our primary application database is hosted in the European Union. Some providers process information internationally, as explained below.

1. Who we are

Strenvio (“we”, “us”, or “our”) is operated by Jindřich Kubát, a natural-person entrepreneur registered in the Czech Trade Licensing Register, business identification number (IČO) 01124030, with a registered address at Marešova 639/1, 198 00 Praha, Czech Republic. He is the controller responsible for the personal information described in this policy.

For privacy questions or requests, contact privacy@strenvio.ai. You can also write to the registered address above.

This policy applies to users worldwide. Your local law may give you additional rights. Our Terms of Service describe the conditions for using Strenvio. Third-party services you choose to use, including Apple and Google sign-in and app-store payments, also have their own privacy policies.

2. Information we collect

Information you provide

• Account and profile: email address, authentication credentials, display name, date of birth, gender, and a profile photo if you upload one. Our authentication provider handles passwords in protected form.
• Training and preferences: sports, goals, experience, training frequency, structured training preferences such as movements to avoid, coach selection, units, and app and notification settings.
• Content and progress: journals, notes, messages to the AI coach, images you attach, drill results, sessions, training plans, and performance statistics and recommendations derived from them.
• Communications: your contact details, the contents of support or privacy requests, and information you send us when asking for help.

You choose what to include in messages and attachments. Please avoid including another person’s information without permission, or medical diagnoses, medication, or clinical records. Strenvio is a sports-training service, not a medical service. Training preferences and journal content can nevertheless reveal sensitive information, including health information. Sensitive information may require additional protection and a separate legal basis under applicable law; ordinary account registration is not explicit consent to process health information.

Information from your use of the Services

We process technical information such as IP address, browser or device type, operating system, app version, connection information, and security or device-verification signals. An IP address can indicate an approximate location, even though we do not collect GPS routes or precise device location.

App analytics and diagnostics may include features and screens used, timestamps, crash reports, error traces, and actions preceding an error. Diagnostic services may receive account identifiers, including a user ID and email address, as well as device information. See sections 3 and 4 for the purposes and choices relating to this processing.

Information from other services

If you choose Apple or Google sign-in, we receive the account identifier and profile information that the sign-in service provides. For subscriptions, Apple, Google, and our subscription provider supply transaction identifiers, products purchased, subscription status, renewals, and entitlements. We also maintain your credit balance and credit-use history. Apple and Google process card payments; we do not receive your full payment-card details.

Account information is necessary to create and secure an account. Training content is necessary for the features that use it. If you choose not to provide that information, we may be unable to provide the corresponding feature. Optional profile content is your choice.

3. How we use information

We use personal information for the purposes below. Where the GDPR or a similar law requires a legal basis, the following bases apply to the relevant purpose:

• Provide the Services — performance of a contract, Article 6(1)(b) GDPR. Create and manage your account, save training content, track progress, generate the coaching you request, apply your preferences, manage subscriptions and credits, and answer service-related questions.
• Keep the Services secure and reliable — legitimate interests, Article 6(1)(f). Deliver the website and app updates, authenticate requests, prevent fraud and misuse, investigate security incidents, and resolve service faults. These interests must be balanced against your rights. You may object to this processing.
• Optional analytics and crash reporting — consent, Article 6(1)(a). Understand app use and diagnose crashes beyond the technical processing necessary to deliver and secure the Services. Consent is required for these optional purposes; accepting this policy alone does not provide it.
• Marketing — consent, Article 6(1)(a). Send product news and offers with the permission required by applicable electronic-marketing law. You can ask us to stop marketing at any time. Essential account, security, purchase, and service messages are separate from marketing.
• Meet legal obligations — Article 6(1)(c). Keep required tax and accounting records, respond to valid legal requests, and handle data-protection obligations. We may also retain information necessary to establish, exercise, or defend legal claims based on our legitimate interests.

When we rely on consent, you can withdraw it at any time by contacting privacy@strenvio.ai or using the relevant controls available in your app. Withdrawal does not affect processing lawfully carried out before it. Refusing optional analytics or marketing does not change your entitlement to core training features.

4. Cookies, device permissions, and your choices

The website uses browser storage and similar technologies where needed for sign-in, security, and interface preferences. It does not load Google Analytics or advertising trackers. Your browser allows you to clear or block cookies and local storage; doing so may affect sign-in or saved preferences.

The website loads fonts from Google. When your browser requests them, Google receives connection information, including your IP address, browser information, and the font request. This is separate from audience measurement. Google explains its handling of information in its Privacy Policy.

You can manage notification and photo permissions in your device settings. We receive the images you choose to upload. If you use biometric unlock, the biometric check is handled by your device; we do not receive your fingerprint or face template.

The current app does not record GPS routes, connect to Apple Health, Google Fit, or wearables, record or transcribe audio, or access your contacts, calendar, or microphone. We do not run advertising networks or collect mobile advertising identifiers.

5. AI coaching and personalisation

Strenvio uses Google Cloud Vertex AI to generate coaching responses, plans, insights, and recommendations. When you use these features, relevant information is sent to the AI provider. Depending on the request, this can include your messages, journal entries and attachments, sport, goals, training preferences, drill results, and performance summaries.

The information supplied with a request is assembled from your stored profile and training content so the response can reflect your progress. Your journals and conversations remain account content subject to the retention and deletion provisions below; leaving a conversation does not by itself delete that content.

The AI provider processes submitted information under the terms applicable to its service. You can contact us for information about the provider’s data-use terms and the safeguards applicable to your information.

Recommendations are produced automatically and may be inaccurate. They are suggestions you can choose whether to follow. We do not use AI coaching outputs to make decisions with legal or similarly significant effects on you, such as deciding your eligibility for a service. Do not use the coach to obtain a medical diagnosis or treatment advice.

6. When we disclose information

We use service providers to operate Strenvio. The information they receive depends on the work they perform:

• Google / Firebase: account authentication, database and file storage, backend services, and abuse protection; processes account information, service content, and technical data.
• Google Cloud Vertex AI: AI coaching and recommendations; processes the information described in section 5.
• Google Firebase Crashlytics and Sentry (Functional Software, Inc.): app diagnostics and performance monitoring; may process account identifiers, device details, crash reports, and error context.
• RevenueCat: subscriptions and entitlements; processes customer identifiers, product details, and purchase and subscription events.
• Expo (650 Industries, Inc.): app delivery and updates; processes connection information and app and device versions.
• Google Fonts: website typography; processes the connection information described in section 4.

Apple and Google act separately for payments through their stores and for their own sign-in services. Their policies explain their use of that information: Apple Privacy Policy and Google Privacy Policy.

We may disclose information to authorities, courts, professional advisers, or other recipients when legally required, or when necessary and lawful to protect people, investigate fraud, or establish or defend legal claims. If Strenvio undergoes a business transfer or reorganisation, relevant information may be transferred as part of that process, subject to applicable privacy requirements and notice of material changes.

We do not sell personal information or disclose it to data brokers. We do not share personal information for cross-context behavioural advertising or use it for targeted advertising.

7. EU storage and international processing

Our primary application database is hosted in the European Union. EU hosting does not mean that every service provider processes all information exclusively in the EU. Providers supporting authentication, diagnostics, subscriptions, app delivery, and other services may process information in the United States and other countries, including through support access.

International processing is subject to the transfer requirements of applicable data-protection law. For information protected by the GDPR, transfers outside the European Economic Area require a lawful mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses with additional measures where needed. The EU–US Data Privacy Framework is available only for transfers covered by an eligible recipient’s current certification. UK and Swiss requirements apply separately where relevant.

To ask which safeguards apply to your information or request a copy of applicable transfer safeguards, contact privacy@strenvio.ai.

8. How long we keep information

• Account and training records: we keep your profile, journals, messages, plans, results, and related statistics while your account remains active, unless you request deletion sooner. Inactive accounts are subject to the one-year limit and automatic deletion described below.
• Attachments and processing records: uploaded images, technical archives, and AI processing logs may have shorter storage periods than your account history. Their retention depends on their role in delivering the feature and the applicable storage and provider settings; they are not a permanent backup of your originals.
• Diagnostics and security records: retention depends on the incident being investigated, the time needed to identify and resolve faults or abuse, and the applicable provider settings.
• Support and privacy requests: we keep information needed to resolve the request and evidence of how it was handled. Consent records may be retained to demonstrate your choices and meet legal obligations after the relevant processing stops.
• Transaction and legal records: we retain records for applicable accounting, tax, dispute, and other statutory periods. These periods depend on the type of record and the obligation involved.

Inactive accounts

We retain an inactive account and its data for no more than 1 year (12 consecutive months) after your last use of Strenvio while signed in.

One month before the scheduled automatic deletion, we will send a warning email to the email address associated with your account. The email will state the deletion date and explain how to keep your account. Sign in and use Strenvio before that date to cancel the scheduled deletion and restart the inactivity period. Keep your account email address current so you can receive this notice.

If your account remains inactive when the 12-month period ends, we will automatically and permanently delete your account and all associated data, including your profile, journals, messages, images, training history, plans, and results. This deletion includes copies held on our behalf by service providers and in backups. Neither you nor Strenvio can restore the account or recover its deleted data.

The only exception is records we are required by law to retain, such as mandatory accounting or tax records. Those records are kept only for the required period and cannot be used to restore your account or training history.

You can request account deletion sooner through the app’s account settings or by contacting us. Requested deletion may involve separate steps for our systems, service providers, and backups, subject to applicable legal deadlines. These steps do not extend the maximum inactivity period above. Contact us for the status of a deletion request.

Deleting Strenvio or cancelling a subscription does not itself delete your account. Deleting your account does not cancel an app-store subscription; manage that subscription with Apple or Google.

9. Your privacy rights and requests

Depending on applicable law and its exceptions, you may ask us to:

• confirm whether we process your information, explain that processing, and provide access and a copy;
• correct inaccurate or incomplete information;
• delete information or restrict its use;
• provide eligible information in a portable, machine-readable format;
• stop processing based on legitimate interests where your circumstances justify an objection, and stop direct marketing at any time;
• give effect to withdrawal of consent; and
• respect applicable rights relating to automated decisions.

Send requests to privacy@strenvio.ai, preferably from the email associated with your account, and tell us what you would like to do. You do not need to use legal terminology. We may request information reasonably needed to verify your identity and protect your account. Please do not send identity documents unless we ask for them through an appropriate channel.

We respond without undue delay and within applicable legal deadlines. For GDPR requests, this is normally one month. If the request is complex or we receive multiple requests, that period may be extended by up to two additional months; we will explain the extension within the first month. Requests are normally free. Any refusal, permitted fee, or exception will be explained as required by law.

An authorised representative may submit a request where local law allows it. We may need proof of their authority and verification of your identity. We will not unlawfully discriminate against you for exercising your privacy rights. If you disagree with our response, reply requesting a review or appeal; you may also contact the appropriate regulator.

10. Additional information for your region

European Economic Area, United Kingdom, and Switzerland

The GDPR and applicable UK and Swiss data-protection laws provide rights subject to their respective conditions. The purposes and GDPR legal bases are described in section 3. You may complain directly to the Czech Office for Personal Data Protection (ÚOOÚ), or to the competent authority where you live, work, or believe an infringement occurred. UK residents can contact the Information Commissioner’s Office; Swiss residents can contact the Federal Data Protection and Information Commissioner. You do not have to contact us first.

United States, including California

Where applicable US state privacy laws cover our processing, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), residents may have additional access, correction, deletion, portability, and appeal rights. These laws may also provide rights to opt out of sales, targeted advertising, and certain profiling, and to limit specified uses of sensitive information. We do not sell information or share it for cross-context behavioural advertising, and do not use AI to make legally or similarly significant decisions.

Sections 2, 3, 6, and 8 describe the categories of information, their sources, purposes, recipients, and retention criteria. These include identifiers, account and commercial information, internet or device activity, content and images, and training-related inferences. Some account credentials and content can be sensitive information under state law. You may also request information about the categories collected and disclosed about you during the preceding 12 months.

Use the contact and verification process in section 9 to make a request or appeal. Where an opt-out right applies, you may also communicate it through a legally recognised preference signal such as Global Privacy Control. Our website does not perform the sale or advertising sharing that such a signal opts out of. It does not separately change its behaviour in response to the older Do Not Track browser setting.

Other countries

Your local privacy law may provide additional protections, including under Brazil’s LGPD, Canadian privacy laws, or Australian privacy law. Contact us using section 9 to exercise rights available to you or raise a complaint. Nothing in this policy limits mandatory rights or prevents you from contacting your local privacy regulator.

11. Children and young people

Strenvio is intended for people aged 13 or older, or the higher minimum age required by local law. Do not use the Services if you are below the applicable minimum age.

The age at which a young person may independently consent to optional processing varies by country and can be higher than 13. A minimum age for using an app does not itself authorise analytics, marketing, or processing of sensitive information. Additional local requirements for young people continue to apply.

If you believe a child below the applicable minimum age has provided personal information, or you are a parent or guardian with a privacy concern, contact privacy@strenvio.ai. We will investigate and take the steps required by applicable law, including deleting information where required.

12. How we protect information

We use technical and organisational measures designed to protect personal information, including encryption in transit and at rest, authentication, and access controls. No method of storage or transmission is completely secure. Protect your account credentials and contact us if you suspect unauthorised access.

Where a personal-data breach requires notification, we will notify the relevant authority and affected individuals within the deadlines required by applicable law.

13. Changes to this policy

We may update this policy as the Services or legal requirements change. The date at the top identifies the latest revision. Where a change materially affects how we handle personal information, we will provide appropriate notice, such as an in-app notice or email, before it takes effect where required. We will request fresh consent if the law requires it; publishing an update does not by itself give us your consent.

14. Contact us

Privacy and data requests: privacy@strenvio.ai

General support: support@strenvio.ai

Controller: Jindřich Kubát, IČO 01124030, Marešova 639/1, 198 00 Praha, Czech Republic.