Privacy Policy

Last updated: October 2026 · David Zwirtmayr

1. Data Controller

The data controller in connection with the app "Ryppd – AI Workout Planner" is David Zwirtmayr (email: repoff-support@dopaminedept.org).

2. Data We Collect & Purpose

We process personal data only as necessary to provide and improve the app, or where you have consented:

• Account & sign-in data: Email, display name (e.g. when signing in with Apple), to manage your account and make the app available.
• Usage & device data: Device type, operating system, general usage statistics (e.g. via Firebase/Google), to fix issues and improve the app. This includes, without your name or email, your onboarding answers (e.g. age range, gender, goal, training place, diet, chosen figure) and how you use the subscription screen (e.g. which plan you tap), so we can see which parts of the app work for whom.
• Content you create: Workout data, nutrition entries, goals, etc. are stored on your device and, if you sign in, optionally in our backend to provide app features.
• Subscriptions & payments: Handled via Apple (iPhone) or Google Play (Android); we do not receive payment card details. We receive the subscription status and transaction information (product, price, currency, transaction ID) to control access to premium features and to measure purchases.

3. Ranking & Leaderboard

The app includes a ranking and leaderboard feature. When you sign in and use this feature, the following data is stored in Google Firebase Firestore:

• Public profile: Your display name, total number of workouts, total points (XP), and your current rank are visible to all users of the app, including users who are not signed in, via the global leaderboard and the leaderboard of your country. Signed-in users can also open your entry on a leaderboard and see your training volume and day streak, and they can read the other fields of your profile (friend code, country, weekly points, league level, the date you joined and when you were last active).
• Friend code: A randomly generated 6-character code is assigned to your profile. You can share this code so others can add you as a friend. The code does not contain personal information.
• Friends system: When you add a friend (or are added by someone), both users can see each other's display name, workout count, points, and rank in a separate friends leaderboard.
• Muscle comparison (friends only): Mutual friends can compare their strength side by side: each of you sees the other's rank per muscle group and best set (weight and repetitions) per ranked exercise. Nobody else can see this data, and it does not appear on the global leaderboard. Your body weight is never shared; for bodyweight exercises, only the number of repetitions is stored. The data is uploaded only after you have viewed the comparison in the app, where a notice explains what your friends see. When a friendship ends, the former friend loses access, and the data is deleted together with your account or when you use "Delete all data".
• Community feed (only with your consent): Nothing is posted automatically. Only when you tap “Share to feed” after a finished workout, a new personal record, a streak milestone or an unlocked trophy (the first time you confirm that the post is public), a short post appears in a feed that all users of the app can see, including users who are not signed in: the finished workout (the trained muscle groups, the duration and the number of sets, never the name of the workout; since October 2026 also a body map with the figure you picked in the app, showing for each muscle group how hard it was trained: light, medium or hard), the personal record (exercise, weight and repetitions), the streak milestone or the trophy, together with your display name and rank. You can delete single posts in the feed at any time. No free text, photos, body weight or nutrition data are shared. Signed-in users can react to posts with one of three fixed emojis; we store who reacted with which emoji, and the post shows how many people reacted. Posts are deleted automatically after 30 days. The legal basis is your consent. You can withdraw it at any time with “Show me in the feed” (Profile → Account & Sync); your previous posts and the reactions to them are then deleted. Posts and reactions are also deleted together with your account or when you use "Delete all data".
• Reporting a profile: If you report another user's display name (offensive name, spam or harassment), we store server-side your user ID, the reported user's ID, the reason, where in the app you reported it and the time. The report we review contains a copy of the reported display name, but not who reported it; your user ID is never shown to the reported user or to anyone else. We use reports only to review them and to act within 24 hours (for example by hiding a profile from the leaderboards or suspending an account). The legal basis is our legitimate interest in a safe community. Your user ID is removed from your reports when you delete your account or use "Delete all data". If your own display name is reported, the report contains your user ID and the reported name; we keep it as long as needed to handle it and to recognise repeated violations.
• Blocking: If you block another user, the list of users you blocked (their user ID and the time) is stored in your own account so that blocking works on all your devices; only you can see it. Blocking removes the friend connection, cancels open friend requests between you and hides that person's name for you. The list is deleted together with your account. "Delete all data" keeps it, so the people you blocked stay blocked.

Ranking data is stored in Google Firebase Firestore (cloud database). The legal basis is performance of the contract (use of the app features). You can delete all ranking data at any time by deleting your account in the app (see section 10). Upon account deletion, your profile, leaderboard entries, muscle comparison data, feed posts and reactions, and all friend connections are permanently removed.

3a. Competitions, Country, Notifications & Crash Reports

• Competitions: When you join a competition, your display name, profile photo (if your sign-in provider supplies one), rank and score are visible to the other participants of that competition.
• Crews: A crew is a private group that others join with a code. Members see each other's display name, profile photo (if your sign-in provider supplies one), rank and the date they joined, plus their scores in the crew's competitions and the number of days they trained in the current week (the crew week). Once you have seen the notice on a crew's page, members of that crew also see the rank of each of your ten muscle groups; this copy is stored in your membership and removed when you leave. When you start a crew, its name is derived from your display name and your display name is shown as its founder to anyone who has the code. When you leave a crew or delete your account, your membership and crew scores are removed; for crews you started, the crew name and founder name are cleared.
• Country leaderboard: To show the leaderboard of your country, the app stores the country of your device's region setting in your profile. The app does not access your location.
• Notifications: If you are signed in and allow notifications, we store a push token together with your app language, your platform and whether you want offers and news, so we can send you notifications (for example friend requests). The token is removed when you sign out or delete your account.
• Crash reports: If the app crashes, a crash report (device model, operating system, app version, the steps before the crash) is sent to Google Firebase Crashlytics. If you are signed in, the report is linked to your user ID.

4. Community Food Contributions

The app lets signed-in users contribute food entries to a shared food database. When you contribute, confirm or report an entry, the following is stored in Google Firebase Firestore:

• The food data you enter (name, manufacturer, nutrition values, serving sizes), visible to other signed-in users. This is product information, not personal data.
• A pseudonymous author hash on the public entry — a one-way, non-reversible value that lets other users block a contributor, but does not identify you.
• Your user ID is stored server-side only (never on the public entry) to link your confirmations/reports and to enable moderation and deletion.

Legal basis is performance of the contract (use of the app features). When you delete your account, your user ID is removed from all community records (authorship, confirmations, reports); the contributed product data itself remains in the shared database in pseudonymized form. You can report inaccurate or objectionable entries and block other contributors directly in the app.

4a. Health Connect (Android) and Apple Health (iPhone)

If you connect Ryppd with Health Connect or Apple Health, the app accesses only the data types you allow in the system dialog. You can change or withdraw access at any time in Health Connect or Apple Health.

• Written by Ryppd: completed workouts (start, end, title, estimated active calories), body weight you log in the app, meals you log (calories, protein, carbohydrates, fat) and your daily water intake.
• Read by Ryppd: body weight (only when you import it), steps, active calories, sleep and resting heart rate.
• Where the data goes: Steps, active calories, sleep and resting heart rate are only shown in the app and never leave your device. A body weight you import becomes part of your weight log in Ryppd; if you are signed in, your weight log is synced with your account.
• What we never do: We do not use data from Health Connect or Apple Health for advertising, do not sell it and do not share it with third parties. It is used only to provide the health and fitness features you see in the app.

Ryppd's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

5. Legal Basis

Processing is based on your consent (e.g. when signing in), performance of the contract (use of the app and subscriptions), and our legitimate interests (operation, security, improvement of the app), unless mandatory law provides otherwise.

6. Retention

We keep your data only as long as needed for the purposes above or as required by law. After you delete your account, personal data is deleted or anonymized promptly, unless legal exceptions apply.

7. AI Coach & Third-Party AI Service

The app includes an AI Coach feature powered by Google's Gemini AI (via Firebase AI). When you use the AI Coach, the following data is sent to Google for processing:

• Fitness data: Your calorie and protein goals, today's meal entries (calories, protein, carbs, fat), workout statistics (weekly workouts, training volume).
• Chat messages: The text messages you send in the AI Coach chat.
• Profile data: Your display name and training goal (if set).

This data is used exclusively to generate personalized fitness and nutrition recommendations within the chat. Your chat messages are not permanently stored by the AI service and are processed only for the duration of the conversation. Data is transmitted encrypted.

Before using the AI Coach for the first time, the app asks for your explicit consent. You can use the app without the AI Coach feature.

AI meal-photo analysis: When you take or choose a meal photo for analysis, the photo is sent to Google's Gemini AI (via Firebase AI Logic) to estimate calories and macronutrients. We do not store the photo on our servers; you review the estimate before anything is saved.

Reporting AI answers: On Android, you can report an answer of the AI Coach directly in the app. We receive the reason you choose, the length of the answer and the AI model, not the text of the conversation, and use reports to improve the AI Coach.

Google's privacy policy applies to data processed by the AI service: https://policies.google.com/privacy

8. Sharing with Third Parties

We share data only with service providers that help us operate the app (e.g. hosting, analytics, auth), and only to the extent necessary. We use in particular:

• Google/Firebase (authentication, cloud database, analytics, crash reports, notifications, app integrity checks, AI Coach and meal-photo analysis)
• Apple (sign-in, subscription processing on iPhone)
• Google Play (subscription processing on Android)
• RevenueCat (subscription and revenue overview on iPhone and Android)
• AppsFlyer (install attribution and measuring purchases, iPhone only; the advertising identifier is used only if you allow tracking in the App Tracking Transparency dialog)
• Open Food Facts and USDA FoodData Central (food search and barcode lookup: only the search term or barcode is sent, no personal data)

These providers may process data outside the EU/EEA; we ensure appropriate safeguards (e.g. standard contractual clauses) where required.

9. Your Rights

You have the right to access, rectify, delete, and restrict processing of your data, as well as data portability and to object. You may lodge a complaint with a data protection authority. For questions or to exercise your rights, contact repoff-support@dopaminedept.org.

10. Data Deletion

You can delete your data at any time in the app: Profile → Account & Sync → “Delete all data” or “Delete Account”. Deleting your account does not cancel a subscription; cancel it in Google Play or your Apple Account settings. If you no longer have the app, you can request deletion by email. All steps, and what is deleted or kept, are described on Delete your account.

11. Changes

We may update this Privacy Policy when necessary. Material changes will be communicated in the app or by email.

Contact: repoff-support@dopaminedept.org