Privacy policy

1 Data we collect

When you create an account we collect your name, email address, body measurements, workout logs, and training preferences.

To coach you, Volyume uses your health and nutrition data:

• Your weight and how it changes over time
• Your body fat percentage and lean mass when you enter them
• Everything you log to your food diary
• Your weekly check-ins, including energy, recovery, and how you feel
• The screening questions you answer about eating habits

This is special-category health data under UK GDPR Article 9. We use it only with your explicit consent, recorded on the consent screen at onboarding. Without that consent the engine cannot run.

2 How it is used

Volyume works by using your health and nutrition data to tell you what to train, what to eat, and when to back off. This data is used solely to run the app and give you personalised training and nutrition guidance.

We also keep first-party usage telemetry to see which features get used and where the app is slow: things like which screens open, when a sync runs, and whether a purchase flow completes. It is tied to a pseudonymous account id, not your name, and it never includes your training, food, or body data. We do not use third-party analytics or tracking tools, and we do not build advertising profiles. You can switch it off in Settings.

3 Where it is stored

On your phone, your data sits in encrypted local storage: EncryptedSharedPreferences on Android and Keychain on iOS for tokens, and SQLite for your training history, food diary, and rollups.

Your cloud data is stored in Supabase (EU region), with row-level security so only you, and the team supporting your account, can see it. It does not leave the UK or EU.

4 The safety check

Volyume watches your weight trend, energy, and food logs together for signs of under-fuelling or disordered eating. If a concerning pattern shows up, it pauses your calorie changes and points you to support. This runs automatically on your health data.

When that happens, you can keep using Volyume normally. Your weight log, food diary, training, and check-ins all continue. Only the calorie target stops shifting. The eating-disorder pattern flags are the most sensitive data we hold, and the support team never sees the raw flag data.

5 Health Connect

If you opt in under Settings, Volyume can read your most recent body weight, so the morning-weight card picks up entries from your scale or wearable, and write completed workouts so your health app shows your training. On Android this goes through Health Connect.

We do not read heart rate, sleep, HRV, or step data without a separate opt-in. All health-app access is opt-in and revocable from the OS Settings app at any time.

6 Third parties

We never sell it, never share it with advertisers, and never use it to train a public AI model.

A small number of sub-processors help run the app, each contractually bound to process your data only for the purpose described:

• Supabase (EU region) for the database, authentication and storage
• Sentry for crash and error reporting, on scrubbed events with your weight, intake and body data removed
• Google Play (Play Billing) for Android in-app purchases

Adding a new sub-processor requires updating this policy with 30 days' notice via in-app push.

7 Deleting your data

When you confirm deletion, your account and all cloud-stored personal data are deleted immediately, and local data is wiped at once on the device that initiated it. Backup copies are purged within 30 days.

We keep one thing after deletion: a one-way hash of your email address, held only to stop the 14-day free trial being restarted by deleting and re-registering. It holds no readable email or other personal data, and is never used to contact you or rebuild your account.

8 Your UK GDPR rights

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you
• Rectify anything inaccurate
• Erase your account and data, from Settings, Account, Delete account
• Port your data: Settings, Privacy, Download my data emails you a CSV bundle
• Restrict or object to processing
• Withdraw consent for the Article 9 health and nutrition processing at any time, which deletes your account because the engine cannot run without that data
• Lodge a complaint with the ICO

We respond to verifiable requests within 30 days.

9 Children

Volyume is for users 13 and over, the UK age at which a person can consent to their own data being processed. We do not knowingly create or serve accounts for under-13s.

If we discover an account belongs to someone under 13, we delete the account and refund any active subscription.

10 Contact

Questions or requests: support@volyume.app