Privacy Policy – Android

Last updated: October 2026 · David Zwirtmayr

This Privacy Policy applies to the Ryppd app for Android, installed from Google Play. The iPhone app has its own Privacy Policy.

1. Data Controller

The data controller in connection with the Android app "Ryppd – AI Workout Planner" is David Zwirtmayr (email: repoff-support@dopaminedept.org).

2. Data We Collect & Purpose

We process personal data only as necessary to provide and improve the app, or where you have consented. You can use most of the app without an account; your data then stays on your device.

• Account & sign-in data: If you sign in with Google or Apple, we receive your email address, your name as supplied by the sign-in provider and a user ID, to manage your account and sync your data. Google sign-in runs through your Google account on the device; Apple sign-in opens Apple's sign-in page.
• Content you create: Workouts and sets, personal records, strength entries, body weight, meals, your own dishes (ingredients, quantities, portions, cooked weight and preparation), water intake, training plans and your own workouts, goals, streak and achievements, your onboarding answers (for example gender, age, height, weight, goal weight, training goal and experience) and app settings. They are stored in the app on your device. If you sign in, they are synced with your account in Google Firebase Firestore so you can use them on other devices and restore them. The profile photo you pick in the app stays on your device and is not uploaded.
• Usage & device data: Google Firebase Analytics records how the app is used (for example which screens are opened and which features are used), together with device model, Android version, app version and language. Analytics identifies this installation of the app by an app-instance ID, Crashlytics (section 4) by an installation ID; Firebase creates both at random, and neither is the advertising ID. Google derives an approximate location (country, region, city) from your IP address; we do not receive your IP address or your precise location. Analytics also receives workout statistics: the workout name, duration, number of sets and exercises and the training volume, and for a new personal record the exercise, the weight lifted, the reps and the estimated one-rep max. To understand which groups use which features, Analytics also receives a few onboarding answers in coarse form: training goal, experience, training days per week, age range and how you heard about Ryppd. If you are signed in, these data are linked to your user ID. The app does not use the advertising ID, and analytics events contain no body weight, meal names or calories.
• Subscriptions & payments: Purchases are handled exclusively by Google Play; we never receive your payment details. We receive the subscription status and purchase information (product, price, currency, order ID) to unlock premium features and to measure purchases (see section 9).

3. Ranking, Leaderboard, Friends & Feed

The app includes a ranking and leaderboard feature. When you sign in, the following data is stored in Google Firebase Firestore:

• Public profile: Your display name, rank, points (XP), number of workouts, training volume, weekly points, gym streak, the date you joined, when you were last active, your country and your friend code. Your display name, rank, points and workout figures appear on the global leaderboard and on the leaderboard of your country, which other users of the app can see, including people who use the app without an account.
• Friend code: A randomly generated 6-character code is assigned to your profile. You can share it (also as a QR code or link) so others can add you as a friend. The code does not contain personal information.
• Friends system: When you send a friend request, the recipient sees your display name and rank. Friends see each other's display name, workout count, points and rank on a separate friends leaderboard.
• Community feed (only with your consent): Nothing is posted automatically. Only when you tap “Share to feed” after a finished workout, a new personal record, a streak milestone or an unlocked trophy (the first time you confirm that the post is public), a short post appears in a feed that all users of the app can see, including users who are not signed in: the finished workout (the trained muscle groups, the duration and the number of sets, never the name of the workout; since October 2026 also a body map with the figure you picked in the app, showing for each muscle group how hard it was trained: light, medium or hard), the personal record (exercise, weight and repetitions), the streak milestone or the trophy, together with your display name and rank. You can delete single posts in the feed at any time. No free text, photos, body weight or nutrition data are shared. Signed-in users can react to posts with one of three fixed emojis; we store who reacted with which emoji, and the post shows how many people reacted. Posts are deleted automatically after 30 days. The legal basis is your consent. You can withdraw it at any time with “Show me in the feed” (Profile → Account & Sync); your previous posts and the reactions to them are then deleted. Posts and reactions are also deleted together with your account or when you use "Delete all data".
• Reporting a profile: If you report another user's display name (offensive name, spam or harassment), we store server-side your user ID, the reported user's ID, the reason, where in the app you reported it and the time. The report we review contains a copy of the reported display name, but not who reported it; your user ID is never shown to the reported user or to anyone else. We use reports only to review them and to act within 24 hours (for example by hiding a profile from the leaderboards or suspending an account). The legal basis is our legitimate interest in a safe community. Your user ID is removed from your reports when you delete your account or use "Delete all data". If your own display name is reported, the report contains your user ID and the reported name; we keep it as long as needed to handle it and to recognise repeated violations.
• Blocking: If you block another user, the list of users you blocked (their user ID and the time) is stored in your own account so that blocking works on all your devices; only you can see it. Blocking removes the friend connection, cancels open friend requests between you and hides that person's name for you. The list is deleted together with your account or when you use "Delete all data".

The legal basis is performance of the contract (use of the app features). You can delete all ranking data at any time by deleting your account in the app (see section 12). Upon account deletion, your profile, leaderboard entries and all friend connections are permanently removed.

4. Competitions, Country, Notifications, Crash Reports & App Integrity

• Competitions: When you join a competition, your display name, rank and score are visible to the other participants of that competition. If you create a private competition, your display name is shown as its host to anyone who has the code.
• Crews: A crew is a private group that others join with a code. Members see each other's display name, profile photo (if supplied by the sign-in provider), rank, join date, competition scores and training days in the current week. If you turn on muscle-rank sharing on a crew's page, the ranks of your ten muscle groups are also stored in that membership and shown to the crew. You can turn sharing off again. When you start a crew, its name is derived from your display name; the crew name and founder name are visible to people who have its code. Leaving removes your membership and crew scores. Account deletion removes your memberships and scores and clears the names of crews you founded.
• Country leaderboard: To show the leaderboard of your country, the app stores the country of your device's region setting in your profile. The app does not access your location.
• Notifications: Reminders (for example training or meal reminders and the end of a rest timer) are scheduled on your device. If you are signed in and allow notifications, we store a push token for Firebase Cloud Messaging together with your app language, your platform (Android) and whether you want offers and news, so we can send you notifications (for example friend requests). The token is removed when you sign out or delete your account.
• Crash reports: If the app crashes or a technical error occurs, a report (device model, Android version, app version, the steps before the error) is sent to Google Firebase Crashlytics. If you are signed in, the report is linked to your user ID.
• App integrity: To protect our backend and the AI features against abuse and fraud, Firebase App Check uses the Google Play Integrity API to confirm that requests come from the genuine Ryppd app on a genuine device. Google processes device and app integrity information for this purpose.

5. Community Food Contributions

The app lets signed-in users contribute food entries to a shared food database. When you contribute, confirm or report an entry, the following is stored in Google Firebase Firestore:

• The food data you enter (name, manufacturer, nutrition values, serving sizes), visible to other users of the app. This is product information, not personal data.
• A pseudonymous author hash on the public entry — a one-way, non-reversible value that lets other users block a contributor, but does not identify you.
• Your user ID is stored server-side only (never on the public entry) to link your confirmations/reports and to enable moderation and deletion.

The legal basis is performance of the contract (use of the app features). When you delete your account, your user ID is removed from all community records (authorship, confirmations, reports); the contributed product data itself remains in the shared database in pseudonymized form. You can report inaccurate or objectionable entries and block other contributors directly in the app.

6. Food Search & Barcode Scanner

• Food search: When you search for a food, the search text is sent to Open Food Facts and USDA FoodData Central to find matching products. When you scan a barcode, the barcode number is sent to Open Food Facts. As with any internet request, these services receive your IP address; they do not receive your account or any other personal data from us.
• Barcode scanner: Barcodes are recognised on your device with Google's ML Kit (part of Google Play services). The camera image is processed on the device and is not uploaded. The app uses the camera only while the scanner or the meal-photo camera is open.

7. Health Connect

If you connect Ryppd with Health Connect, the app accesses only the data types you allow in the Health Connect permission dialog. Ryppd requests exactly these eight permissions:

• Read: body weight, steps and active calories burned.
• Write: body weight, exercise (your completed workouts), active calories burned, nutrition and hydration.

What Ryppd reads, and why:

• Body weight is read only when you tap "Import weight from Health Connect" (Profile → Health Connect), to add your latest weight to your weight log in Ryppd.
• Steps and active calories are shown in your statistics. If you turn on "Add burned calories to budget", today's active calories are added to your daily calorie budget.

What Ryppd writes, and why: so that your training and nutrition from Ryppd also appear in Health Connect and in other apps you allow:

• Exercise: each completed workout (start, end, title and type), together with an estimate of the active calories burned.
• Body weight: weight entries you log in Ryppd (a weight imported from Health Connect is never written back).
• Nutrition: meals you log (name, meal, calories, protein, carbohydrates and fat).
• Hydration: your daily water intake.

• Where the data goes: Steps and active calories read from Health Connect are only shown or used for calculations in the app and never leave your device. A body weight you import becomes part of your weight log in Ryppd; if you are signed in, your weight log is synced with your account (section 2).
• What we never do: We do not use data from Health Connect for advertising, do not sell it and do not share it with third parties. We do not use it to determine creditworthiness or for any purpose unrelated to the health and fitness features you see in the app.
• Retention & deletion: Ryppd keeps its copies of Health Connect data (an imported weight entry) only as long as the entry, your data or your account exists. Deleting the entry, "Delete all data" or deleting your account removes them from the app and, if you are signed in, from your account. Steps and active calories are not stored by Ryppd. Data in Health Connect stays under your control: you can view and delete it there at any time, and deleting your Ryppd account does not change it.
• Withdrawing access: You can change or withdraw Ryppd's access at any time in Health Connect (also reachable via Profile → Health Connect → "Manage in Health Connect"). After that, Ryppd no longer reads or writes Health Connect data.
• Security: All data is transmitted encrypted (TLS). Synced data is stored in Google Firebase, which encrypts it at rest, and access rules ensure that only your account can read it. On your device, Ryppd's data is protected by Android's app sandbox.

Ryppd's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

8. AI Coach & AI Meal Photo (from 18)

The AI Coach chat and the AI meal-photo analysis are powered by Google's Gemini AI via Firebase AI Logic. They are available only to people aged 18 or older, based on the age you enter in the app, and require a subscription.

• AI Coach: When you send a message, Google receives the text you write and, so that the answer fits you, your display name, training goal, calorie and protein goals, today's meals in total (calories, protein, carbohydrates, fat) and your workouts this week (number, training volume). Before you use the AI Coach for the first time, the app asks for your explicit consent. The conversation is kept only in the app's memory on your device; it is cleared when you sign out or switch accounts and is not stored on our servers.
• AI meal photo: When you take or choose a meal photo for analysis, only the photo is sent to Google to estimate the meal and its nutrition values. We do not store the photo on our servers, and you review the estimate before anything is saved.
• How Google handles the data: Google processes the requests to generate the answer. Google logs prompts and responses for a limited period of time to detect abuse and violations of its policies, and does not use them to train its models. Data is transmitted encrypted.
• Reporting AI answers: You can report an answer of the AI Coach directly in the app. We receive the reason you choose, the length of the answer and the AI model, not the text of the conversation, and use reports to improve the AI Coach.

You can use the app without the AI features. Google's privacy policy applies to data processed by the AI service: https://policies.google.com/privacy

9. Sharing with Third Parties

We share data only with service providers that help us operate the app, and only to the extent necessary. We use:

• Google/Firebase (sign-in, cloud database, cloud functions, analytics, crash reports, push notifications, App Check, AI Coach and meal-photo analysis, and the storage from which exercise videos are streamed)
• Google Play (purchases and subscriptions, Play Integrity, the in-app rating dialog, and ML Kit for the barcode scanner via Google Play services)
• Apple (only if you choose "Sign in with Apple")
• RevenueCat (overview of subscriptions and revenue): receives your user ID (or an anonymous ID without an account), the Analytics app-instance ID, your Google Play purchases and subscription status and a few coarse attributes (age range, how you heard about Ryppd); it does not collect the advertising ID or other device identifiers
• Open Food Facts and USDA FoodData Central (food search and barcode lookup, see section 6)

These providers may process data outside the EU/EEA; we ensure appropriate safeguards (e.g. standard contractual clauses) where required. We do not sell personal data.

10. Legal Basis

Processing is based on your consent (e.g. for the AI Coach, Health Connect and notifications), performance of the contract (use of the app and subscriptions), and our legitimate interests (operation, security, abuse prevention, improvement of the app), unless mandatory law provides otherwise.

11. Retention

We keep your data only as long as needed for the purposes above or as required by law. Your synced data is kept as long as your account exists. After you delete your account, personal data is deleted or anonymized promptly, unless legal exceptions apply. Usage statistics are kept for up to 14 months and crash reports for up to 90 days. Records of purchases are kept by Google Play and RevenueCat as required for billing and tax law.

12. Data Deletion

You can delete your data at any time in the app: Profile → Account & Sync → "Delete all data" or "Delete Account". Deleting your account does not cancel a subscription; cancel it in Google Play (Play Store → Profile → Payments & subscriptions → Subscriptions). If you no longer have the app, you can request deletion by email. All steps, and what is deleted or kept, are described on https://gymapp-5140d.web.app/konto-loeschen.html.

13. Minimum Age

Ryppd is designed for adults and may be used from the age of 16; the age selection in the app starts at 16. The AI features (section 8) are available only from 18. We do not knowingly process data of children under 16; if you believe a child has given us personal data, please contact us and we will delete it.

14. Your Rights

You have the right to access, rectify, delete, and restrict processing of your data, as well as data portability and to object. Where processing is based on consent, you can withdraw it at any time with effect for the future. You may lodge a complaint with a data protection authority. For questions or to exercise your rights, contact repoff-support@dopaminedept.org.

15. Changes

We may update this Privacy Policy when necessary. Material changes will be communicated in the app or by email.

Contact: repoff-support@dopaminedept.org