Privacy policy

1 Data we collect

When you create an account we collect your name, email address, body measurements, workout logs, and training preferences.

To coach you, Volyume uses your health and nutrition data:

• Your weight and how it changes over time
• Your body fat percentage and lean mass when you enter them
• Everything you log to your food diary
• Your weekly check-ins, including energy, recovery, and how you feel
• The screening questions you answer about eating habits
• Progress photos you choose to take, plus photo quality, result confidence, leanness band, Volyume Score and progress change when you use that feature

Volyume Score is a visual progress feature. It is not an exact body-fat percentage, DEXA scan, diagnosis, or medical assessment. Progress photo image files stay on your device unless you choose to share or export them.

This is special-category health data under UK GDPR Article 9. We use it only with your explicit consent, recorded on the consent screen at onboarding. Without that consent the engine cannot run.

2 How it is used

Volyume uses your health and food logs to help guide training, nutrition, and recovery. This data is used solely to run the app and give you personalised training and nutrition guidance.

We also keep first-party usage telemetry to see which features get used and where the app is slow: things like which screens open, when a sync runs, and whether a purchase flow completes. It is tied to a pseudonymous account id, not your name, and it never includes your training, food, or body data. We do not use third-party analytics or tracking tools, and we do not build advertising profiles. You can switch it off in Settings.

3 Where it is stored

On your phone, your data sits in encrypted local storage: EncryptedSharedPreferences on Android and Keychain on iOS for tokens, and SQLite for your training history, food diary, progress metadata and rollups.

Progress photo and scan image files are device-local. Cloud-backed account data is stored in Supabase (EU region), with row-level security so only you, and the team supporting your account when needed, can see it. It does not leave the UK or EU.

4 The safety check

Volyume checks your weight trend, energy, and food logs together for signs of under-fuelling or disordered eating. If a concerning pattern shows up, it pauses your calorie changes and points you to support. This runs automatically on your health data.

When that happens, you can keep using Volyume normally. Your weight log, food diary, training, and check-ins all continue. Only the calorie target stops shifting. The eating-disorder pattern flags are the most sensitive data we hold, and the support team never sees the raw flag data.

5 Health Connect

If you opt in under Settings, Volyume can read your most recent body weight and daily steps, so the morning-weight card and step count can pick up entries from your scale or wearable, and write completed workouts so your health app shows your training. On Android this goes through Health Connect.

We do not read heart rate, sleep, or HRV. All health-app access is opt-in and revocable from the OS Settings app at any time.

6 Third parties

We never sell it, never share it with advertisers, and never use it to train a public AI model.

A small number of sub-processors help run the app, each contractually bound to process your data only for the purpose described:

• Supabase (EU region) for the database, authentication and storage
• Sentry for crash and error reporting, on scrubbed events with your weight, intake and body data removed
• Apple App Store and Google Play for subscription purchases
• Expo push for notification delivery
• Open Food Facts and USDA FoodData Central for food lookup data

Adding a new sub-processor requires updating this policy with 30 days' notice via in-app push.

7 Deleting your data

When you confirm deletion, cloud removal starts immediately and local data is wiped at once on the device that initiated it. If final sign-in removal cannot finish while offline, Volyume tells you and completes it when you reconnect. Backup copies are purged within 30 days.

We keep one thing after deletion: a one-way hash of your email address, held only to stop the 14-day free trial being restarted by deleting and re-registering. It holds no readable email or other personal data, and is never used to contact you or rebuild your account.

8 Your UK GDPR rights

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you
• Rectify anything inaccurate
• Erase your account and data, from Settings, Account, Delete account
• Port your data: Settings, Your data lets you export workout sets as CSV and create a JSON app-data backup. The JSON backup includes database records, including progress photo metadata and Volyume Score analysis metadata, but not private photo image files
• Restrict or object to processing
• Withdraw consent for the Article 9 health and nutrition processing at any time, which deletes your account because the engine cannot run without that data
• Lodge a complaint with the ICO

We respond to verifiable requests within 30 days.

9 Children

Volyume is for users 13 and over, the UK age at which a person can consent to their own data being processed. We do not knowingly create or serve accounts for under-13s.

If we discover an account belongs to someone under 13, we delete the account and refund any active subscription.

10 Contact

Questions or requests: support@volyume.app