Strenvio

Strenvio Privacy Policy

Version: 2 · Last updated:

Strenvio helps you build skills, follow your progress, and get personalised sports coaching. This Privacy Policy explains what personal information we collect, how we use it, who receives it, and your choices when you use our mobile app, strenvio.ai, or contact us (together, the “Services”).

Your training information is personal. We do not sell it, share it with data brokers, or use it for targeted advertising. Our primary application database is hosted in the European Union. Some providers process information internationally, as explained below.

On this page

1. Who we are

Strenvio (“we”, “us”, or “our”) is operated by Jindřich Kubát, a natural-person entrepreneur registered in the Czech Trade Licensing Register, business identification number (IČO) 01124030, with a registered address at Marešova 639/1, 198 00 Praha, Czech Republic. He is the controller responsible for the personal information described in this policy.

For privacy questions or requests, contact privacy@strenvio.ai. You can also write to the registered address above.

This policy applies to users worldwide. Your local law may give you additional rights. Our Terms of Service describe the conditions for using Strenvio. Third-party services you choose to use, including Apple and Google sign-in and app-store payments, also have their own privacy policies.

2. Information we collect

Information you provide

  • Account and profile: email address, authentication credentials, display name, and the age group you confirm when you accept these terms (13–15, or 16 and older). We do not ask for your date of birth when you create an account. If you choose to, you can add a date of birth, gender, and profile photo to your profile. Our authentication provider handles passwords in protected form.
  • Training and preferences: sports, goals, experience, training frequency, structured training preferences such as movements to avoid, coach selection, units, and app and notification settings.
  • Content and progress: journals, notes, messages to the AI coach, images you attach, drill results, sessions, training plans, and performance statistics and recommendations derived from them.
  • Communications: your contact details, the contents of support or privacy requests, and information you send us when asking for help.

You choose what to include in messages and attachments. Please avoid including another person’s information without permission, or medical diagnoses, medication, or clinical records. Strenvio is a sports-training service, not a medical service. Training preferences and journal content can nevertheless reveal sensitive information, including health information. Sensitive information may require additional protection and a separate legal basis under applicable law; ordinary account registration is not explicit consent to process health information.

Information from your use of the Services

We process technical information such as IP address, browser or device type, operating system, app version, connection information, and security or device-verification signals. An IP address can indicate an approximate location, even though we do not collect GPS routes or precise device location.

If you turn them on, app analytics and crash reporting include features and screens used, timestamps, crash reports, error traces, and actions preceding an error. These services receive a user ID and device information, but not your email address. We also count how you use the app from training records we already hold, as described in section 3. See sections 3 and 4 for the purposes and your choices.

Information from other services

If you choose Apple or Google sign-in, we receive the account identifier and profile information that the sign-in service provides. For subscriptions, Apple, Google, and our subscription provider supply transaction identifiers, products purchased, subscription status, renewals, and entitlements. We also maintain your credit balance and credit-use history. Apple and Google process card payments; we do not receive your full payment-card details.

Account information is necessary to create and secure an account. Training content is necessary for the features that use it. If you choose not to provide that information, we may be unable to provide the corresponding feature. Optional profile content is your choice.

3. How we use information

We use personal information for the purposes below. Where the GDPR or a similar law requires a legal basis, the following bases apply to the relevant purpose:

  • Provide the Services — performance of a contract, Article 6(1)(b) GDPR. Create and manage your account, save training content, track progress, generate the coaching you request, apply your preferences, manage subscriptions and credits, and answer service-related questions.
  • Keep the Services secure and reliable — legitimate interests, Article 6(1)(f). Deliver the website and app updates, authenticate requests, prevent fraud and misuse, investigate security incidents, and resolve service faults. These interests must be balanced against your rights. You may object to this processing.
  • Aggregated app statistics — legitimate interests, Article 6(1)(f). Count how the app is used, using training and credit records we already hold, so we can improve it. See “Aggregated app statistics” below. You can object at any time, and we always honour the objection.
  • Optional analytics and crash reporting — consent, Article 6(1)(a). Understand app use and diagnose crashes beyond the technical processing necessary to deliver and secure the Services. These are off until you turn them on. We ask once, on the screen where you accept these terms, and only if you confirm you are 16 or older (see section 11). Accepting this policy alone does not give consent. See “Google Analytics for Firebase” below.
  • Marketing — consent, Article 6(1)(a). Send product news and offers with the permission required by applicable electronic-marketing law. You can ask us to stop marketing at any time. Essential account, security, purchase, and service messages are separate from marketing.
  • Meet legal obligations — Article 6(1)(c). Keep required tax and accounting records, respond to valid legal requests, and handle data-protection obligations. We may also retain information necessary to establish, exercise, or defend legal claims based on our legitimate interests.

When we rely on consent, you can withdraw it at any time by contacting privacy@strenvio.ai or using the relevant controls available in your app. Withdrawal does not affect processing lawfully carried out before it. Refusing optional analytics or marketing does not change your entitlement to core training features.

Google Analytics for Firebase

If you turn on analytics, the app uses Google Analytics for Firebase.

  • What it collects: the screens and features you use and how long you spend on them, events such as starting or finishing a drill or viewing AI advice, app version, device model and operating system, approximate location (country, region, and city) derived from your IP address, an app-instance identifier, and your Strenvio user ID. Google does not store your IP address for this purpose.
  • Why: only to understand how the app is used so we can improve it. It is not used for advertising. We do not collect advertising identifiers (IDFA or AAID), Google signals and ads personalisation are switched off, and the data is not sold.
  • Legal basis: your consent, Article 6(1)(a). Turning analytics off in Profile → Privacy & data stops collection and resets the analytics identifier on your device.
  • Retention: 14 months in Google Analytics. We also keep a daily copy in Google BigQuery in the European Union for 14 months. To have data already collected deleted sooner, contact us.

Aggregated app statistics

To understand how Strenvio is used by everyone, not only by people who turn on analytics, we count usage from records we already keep to run the app.

  • What we use: for each drill session, the sport, drill, category, difficulty, when it ended, and how long it took; for AI features, which feature used credits, how many, and when; and a daily snapshot of your plan, skill level, sport, and chosen training frequency. These are keyed to your Strenvio user ID.
  • What we never use for this: your journals, notes, messages, reflections, AI responses, scores, or any other free text.
  • How: a copy is kept in Google BigQuery in the European Union and used only for aggregate statistics, such as how many drills a typical active user completes in a week. We do not use it to make decisions about you, profile you for marketing, or share or sell it.
  • Legal basis: our legitimate interest in understanding and improving the app, Article 6(1)(f). We weighed it against your interests and rights, including for users aged 13–15.
  • Your choice: you can object at any time with the “Aggregated app statistics” switch in Profile → Privacy & data. It is on by default. When you switch it off, we stop including you and delete the copy we already hold. You can do this at any age.
  • Retention: 14 months, or until you object or delete your account, whichever comes first.

4. Cookies, device permissions, and your choices

The website uses browser storage and similar technologies where needed for sign-in, security, and interface preferences. It loads Google Analytics only if you allow it, as described below, and does not load advertising trackers. Your browser allows you to clear or block cookies and local storage; doing so may affect sign-in or saved preferences.

Website analytics (Google Analytics)

When you first visit strenvio.ai, a banner asks whether we may use Google Analytics. Until you choose, and if you reject, the website does not load Google Analytics and sends nothing to it.

  • What is collected: pages you view, page titles and the previous page, approximate location derived from your IP address (Google Analytics does not store IP addresses), browser, device type, screen size and language, scrolling, file downloads (such as practice-plan PDFs), the drill levels you open, clicks on links that leave the website (including app-store buttons), and a random identifier stored in the cookies _ga and _ga_TL3MNYHR09. We do not send your name, email address, or any account information.
  • Purpose: understand which pages are useful and improve the website. We do not use it for advertising: the website tells Google that advertising storage, advertising use of data, ad personalisation, and Google signals are off.
  • Legal basis: your consent, Article 6(1)(a), which also covers storing the cookies on your device.
  • Retention: the cookies expire after 13 months, and Google Analytics keeps the data for 14 months. Your choice is stored in your browser’s local storage, and we ask again after 12 months.
  • Your choice: change or withdraw your consent at any time with “Cookie settings” in the website footer. Withdrawing stops collection immediately and deletes the Google Analytics cookies from your browser. Refusing has no effect on what you can do on the website.

The website loads fonts from Google. When your browser requests them, Google receives connection information, including your IP address, browser information, and the font request. This is separate from audience measurement. Google explains its handling of information in its Privacy Policy.

In the app, Profile → Privacy & data lets you turn analytics, crash reporting, and marketing on or off (if you are 16 or older), and object to aggregated app statistics (at any age). You can manage notification and photo permissions in your device settings. We receive the images you choose to upload. If you use biometric unlock, the biometric check is handled by your device; we do not receive your fingerprint or face template.

The current app does not record GPS routes, connect to Apple Health, Google Fit, or wearables, record or transcribe audio, or access your contacts, calendar, or microphone. We do not run advertising networks or collect mobile advertising identifiers.

5. AI coaching and personalisation

Strenvio uses Google Cloud Vertex AI to generate coaching responses, plans, insights, and recommendations. When you use these features, relevant information is sent to the AI provider. Depending on the request, this can include your messages, journal entries and attachments, sport, goals, training preferences, drill results, and performance summaries.

The information supplied with a request is assembled from your stored profile and training content so the response can reflect your progress. Your journals and conversations remain account content subject to the retention and deletion provisions below; leaving a conversation does not by itself delete that content.

The AI provider processes submitted information under the terms applicable to its service. You can contact us for information about the provider’s data-use terms and the safeguards applicable to your information.

Recommendations are produced automatically and may be inaccurate. They are suggestions you can choose whether to follow. We do not use AI coaching outputs to make decisions with legal or similarly significant effects on you, such as deciding your eligibility for a service. Do not use the coach to obtain a medical diagnosis or treatment advice.

6. When we disclose information

We use service providers to operate Strenvio. The information they receive depends on the work they perform:

  • Google / Firebase: account authentication, database and file storage, backend services, and abuse protection; processes account information, service content, and technical data.
  • Google Cloud Vertex AI: AI coaching and recommendations; processes the information described in section 5.
  • Google Firebase Crashlytics and Sentry (Functional Software, Inc.): app diagnostics and performance monitoring, only if you turn on crash reporting; may process your user ID, device details, crash reports, and error context.
  • Google Analytics for Firebase: app analytics, only if you turn it on; processes the information described in section 3.
  • Google Analytics (website): website analytics, only if you allow it in the cookie banner; processes the information described in section 4.
  • Google BigQuery: storage and analysis of aggregate statistics, in the European Union; processes the daily copy of analytics data and the aggregated app statistics described in section 3.
  • RevenueCat: subscriptions and entitlements; processes customer identifiers, product details, and purchase and subscription events.
  • Expo (650 Industries, Inc.): app delivery and updates; processes connection information and app and device versions.
  • Google Fonts: website typography; processes the connection information described in section 4.

Apple and Google act separately for payments through their stores and for their own sign-in services. Their policies explain their use of that information: Apple Privacy Policy and Google Privacy Policy.

We may disclose information to authorities, courts, professional advisers, or other recipients when legally required, or when necessary and lawful to protect people, investigate fraud, or establish or defend legal claims. If Strenvio undergoes a business transfer or reorganisation, relevant information may be transferred as part of that process, subject to applicable privacy requirements and notice of material changes.

We do not sell personal information or disclose it to data brokers. We do not share personal information for cross-context behavioural advertising or use it for targeted advertising.

7. EU storage and international processing

Our primary application database and our statistics storage (Google BigQuery) are hosted in the European Union. EU hosting does not mean that every service provider processes all information exclusively in the EU. Providers supporting authentication, diagnostics, analytics, subscriptions, app delivery, and other services may process information in the United States and other countries, including through support access. Google Analytics, for example, may process data outside the EU; Google LLC is certified under the EU–US Data Privacy Framework.

International processing is subject to the transfer requirements of applicable data-protection law. For information protected by the GDPR, transfers outside the European Economic Area require a lawful mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses with additional measures where needed. The EU–US Data Privacy Framework is available only for transfers covered by an eligible recipient’s current certification. UK and Swiss requirements apply separately where relevant.

To ask which safeguards apply to your information or request a copy of applicable transfer safeguards, contact privacy@strenvio.ai.

8. How long we keep information

  • Account and training records: we keep your profile, journals, messages, plans, results, and related statistics while your account remains active, unless you request deletion sooner. Inactive accounts are subject to the one-year limit and automatic deletion described below.
  • Attachments and processing records: uploaded images, technical archives, and AI processing logs may have shorter storage periods than your account history. Their retention depends on their role in delivering the feature and the applicable storage and provider settings; they are not a permanent backup of your originals.
  • Analytics and aggregated app statistics: 14 months in Google Analytics (app and website), and 14 months for the copies in Google BigQuery. Your aggregated-statistics data is deleted sooner if you object or delete your account.
  • Diagnostics and security records: retention depends on the incident being investigated, the time needed to identify and resolve faults or abuse, and the applicable provider settings.
  • Support and privacy requests: we keep information needed to resolve the request and evidence of how it was handled. Consent records may be retained to demonstrate your choices and meet legal obligations after the relevant processing stops.
  • Transaction and legal records: we retain records for applicable accounting, tax, dispute, and other statutory periods. These periods depend on the type of record and the obligation involved.

Inactive accounts

We retain an inactive account and its data for no more than 1 year (12 consecutive months) after your last use of Strenvio while signed in.

One month before the scheduled automatic deletion, we will send a warning email to the email address associated with your account. The email will state the deletion date and explain how to keep your account. Sign in and use Strenvio before that date to cancel the scheduled deletion and restart the inactivity period. Keep your account email address current so you can receive this notice.

If your account remains inactive when the 12-month period ends, we will automatically and permanently delete your account and all associated data, including your profile, journals, messages, images, training history, plans, and results. This deletion includes copies held on our behalf by service providers and in backups. Neither you nor Strenvio can restore the account or recover its deleted data.

The only exception is records we are required by law to retain, such as mandatory accounting or tax records. Those records are kept only for the required period and cannot be used to restore your account or training history.

You can request account deletion sooner through the app’s account settings or by contacting us. Requested deletion may involve separate steps for our systems, service providers, and backups, subject to applicable legal deadlines. These steps do not extend the maximum inactivity period above. Contact us for the status of a deletion request.

Deleting Strenvio or cancelling a subscription does not itself delete your account. Deleting your account does not cancel an app-store subscription; manage that subscription with Apple or Google.

9. Your privacy rights and requests

Depending on applicable law and its exceptions, you may ask us to:

  • confirm whether we process your information, explain that processing, and provide access and a copy;
  • correct inaccurate or incomplete information;
  • delete information or restrict its use;
  • provide eligible information in a portable, machine-readable format;
  • stop processing based on legitimate interests where your circumstances justify an objection, and stop direct marketing at any time (for aggregated app statistics you do not need a reason: use the switch described in section 3 and we always honour it);
  • give effect to withdrawal of consent; and
  • respect applicable rights relating to automated decisions.

Send requests to privacy@strenvio.ai, preferably from the email associated with your account, and tell us what you would like to do. You do not need to use legal terminology. We may request information reasonably needed to verify your identity and protect your account. Please do not send identity documents unless we ask for them through an appropriate channel.

We respond without undue delay and within applicable legal deadlines. For GDPR requests, this is normally one month. If the request is complex or we receive multiple requests, that period may be extended by up to two additional months; we will explain the extension within the first month. Requests are normally free. Any refusal, permitted fee, or exception will be explained as required by law.

An authorised representative may submit a request where local law allows it. We may need proof of their authority and verification of your identity. We will not unlawfully discriminate against you for exercising your privacy rights. If you disagree with our response, reply requesting a review or appeal; you may also contact the appropriate regulator.

10. Additional information for your region

European Economic Area, United Kingdom, and Switzerland

The GDPR and applicable UK and Swiss data-protection laws provide rights subject to their respective conditions. The purposes and GDPR legal bases are described in section 3. You may complain directly to the Czech Office for Personal Data Protection (ÚOOÚ), or to the competent authority where you live, work, or believe an infringement occurred. UK residents can contact the Information Commissioner’s Office; Swiss residents can contact the Federal Data Protection and Information Commissioner. You do not have to contact us first.

United States, including California

Where applicable US state privacy laws cover our processing, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), residents may have additional access, correction, deletion, portability, and appeal rights. These laws may also provide rights to opt out of sales, targeted advertising, and certain profiling, and to limit specified uses of sensitive information. We do not sell information or share it for cross-context behavioural advertising, and do not use AI to make legally or similarly significant decisions.

Sections 2, 3, 6, and 8 describe the categories of information, their sources, purposes, recipients, and retention criteria. These include identifiers, account and commercial information, internet or device activity, content and images, and training-related inferences. Some account credentials and content can be sensitive information under state law. You may also request information about the categories collected and disclosed about you during the preceding 12 months.

Use the contact and verification process in section 9 to make a request or appeal. Where an opt-out right applies, you may also communicate it through a legally recognised preference signal such as Global Privacy Control. Our website does not perform the sale or advertising sharing that such a signal opts out of. It does not separately change its behaviour in response to the older Do Not Track browser setting.

Other countries

Your local privacy law may provide additional protections, including under Brazil’s LGPD, Canadian privacy laws, or Australian privacy law. Contact us using section 9 to exercise rights available to you or raise a complaint. Nothing in this policy limits mandatory rights or prevents you from contacting your local privacy regulator.

11. Children and young people

You must be at least 13 to use Strenvio, or the higher minimum age required by local law. Do not use the Services if you are below the applicable minimum age.

When you accept these terms, we ask you to confirm your age group: 13–15, or 16 and older. We do not ask for your date of birth.

  • Analytics, crash reporting, and marketing email rely on your consent, so we offer them only if you confirm you are 16 or older. Sixteen is the highest age at which any EU country lets a young person give this consent on their own (Article 8(1) GDPR), so the same rule works everywhere in the EU.
  • If you are 13–15, those features are switched off and cannot be turned on. Everything else in Strenvio works normally, because it is based on our contract with you, not on consent.
  • When you turn 16, you can confirm it in Profile → Privacy & data. The features then become available, but stay off until you turn them on.
  • Aggregated app statistics (section 3) apply at any age, because they rely on our legitimate interests rather than consent. Users aged 13–15 can object in exactly the same way as everyone else.

If you believe a child below the applicable minimum age has provided personal information, or you are a parent or guardian with a privacy concern, contact privacy@strenvio.ai. We will investigate and take the steps required by applicable law, including deleting information where required.

12. How we protect information

We use technical and organisational measures designed to protect personal information, including encryption in transit and at rest, authentication, and access controls. No method of storage or transmission is completely secure. Protect your account credentials and contact us if you suspect unauthorised access.

Where a personal-data breach requires notification, we will notify the relevant authority and affected individuals within the deadlines required by applicable law.

13. Changes to this policy

We may update this policy as the Services or legal requirements change. The date at the top identifies the latest revision. Where a change materially affects how we handle personal information, we will provide appropriate notice, such as an in-app notice or email, before it takes effect where required. We will request fresh consent if the law requires it; publishing an update does not by itself give us your consent.

14. Contact us

Privacy and data requests: privacy@strenvio.ai

General support: support@strenvio.ai

Controller: Jindřich Kubát, IČO 01124030, Marešova 639/1, 198 00 Praha, Czech Republic.