Privacy Policy

Antrena provides personalized fitness coaching. The data we process:

• Account: your name and email provided when you sign in with Apple/Google (we support Apple's private email relay).
• Health & fitness data: weight, body measurements, sleep, nutrition, workouts, steps, heart rate/HRV — entered by you or synced from your connected devices.
• Health information (optional): chronic conditions, injuries, allergies and medications you share during onboarding — used solely to coach you safely.

Your data is used only to provide you personal coaching (training, nutrition, supplement suggestions, analysis and reminders). We do not sell your health and coaching data and we do not share it for advertising; the limited events sent to Meta for ad measurement (no health data) are described in section 5.

Coach responses are generated using Google's Gemini AI service (cloud) to produce personalized recommendations. For this purpose, the relevant health/fitness data is transferred to Google (abroad) to the extent necessary. Google does not use this API-processed data to train its AI models (under a data processing agreement/DPA). You provide explicit consent for this transfer when you start using the app (GDPR/KVKK cross-border transfer); you can withdraw consent by deleting your account. Your data is also stored on our own infrastructure, scoped to your account and encrypted; never sold or shared for advertising.

Services that receive data abroad, and the basis: the servers of the services below are located abroad; for each one, what is transferred, the purpose and the transfer basis are as follows.

• Google Gemini — purpose: coach replies and AI features. Transferred: the health/fitness data and messages needed to generate your reply. Basis: the explicit consent you give during onboarding and whenever the version changes (KVKK art. 9 / GDPR) + Google's data processing agreement (DPA); Google does not train models on this data.
• Meta (Facebook) — purpose: ad measurement. Transferred: on the web, only if you choose Accept in the cookie banner, the address/type of the public page and browser information; in the mobile app, install, trial and subscription events. Health data is not sent. Basis: on the web, your explicit consent in the cookie banner; in the app, our legitimate interest in measuring ad effectiveness and Meta's data processing terms.
• Cloudflare — purpose: delivery, security and attack protection of the website (CDN/DNS). Transferred: technical connection data created during a request (IP address, browser information). Basis: our legitimate interest in keeping the service secure; Cloudflare's data processing agreement and standard contractual clauses.
• Umami Cloud — purpose: antrena.app visit statistics. Cookie-free, anonymous statistics; it runs before consent: it sets no cookie and keeps no identifier that identifies you, so it counts page views regardless of your cookie-banner choice. It does not run inside your account or on health data. Basis: anonymous aggregate statistics (measurement that does not process personal data) and Umami's data processing terms.
• Sentry — purpose: error monitoring. Transferred: error message, technical context, a random account number; email, IP, cookies and health data are scrubbed (see section 5). Basis: our legitimate interest in service reliability; Sentry's data processing agreement and standard contractual clauses.
• RevenueCat — purpose: managing subscription and trial status (together with Apple/Google payments). Transferred: a random account number, subscription and purchase events; your card details and health data are not sent. Basis: providing your subscription (performance of the contract) and RevenueCat's data processing agreement and standard contractual clauses.

To withdraw your consent to the cross-border transfer or to have your data deleted, you can delete your account or write to [email protected].

With your permission, data is synced from services such as Apple Health, Fitbit or WHOOP. This only happens with your explicit consent; you can disconnect any integration at any time. Subscription payments are processed via the Apple App Store / Google Play (RevenueCat); we never access your card details.

To keep the service reliable:

• Error monitoring (Sentry): server errors are recorded with the Sentry error-tracking service. Identity and request data are scrubbed before sending — error records NEVER include your email, IP, cookies or health data; only the error message, technical context and a random account number may be sent.
• In-app usage events: to understand how the app is used (e.g. onboarding step reached, feature usage counts) we keep event records on our own infrastructure. These records stay on our own infrastructure; they never contain health data or personal content, and are never shared for advertising.
• Website measurement (Umami): visits to antrena.app are counted with Umami, which is cookie-free and does not identify individuals.
• Meta pixel (web, only with your consent): If you choose Accept in the cookie banner on antrena.app, the Meta (Facebook) pixel loads and sets a cookie (_fbp) for ad measurement. The address and type of the public page you visit (e.g. a food or exercise page), store-button clicks and browser information are sent. The pixel runs only on public marketing pages; it never loads inside your account (dashboard, diary, coach), and your health data and personal content are never sent to Meta. If you choose Decline, the pixel never loads; you can change your choice any time via the “Cookie preferences” link in the footer.
• Meta SDK (mobile app): To measure the effect of ad campaigns, the app uses the Meta SDK: app install/open, trial start and subscription events (with value and currency) are sent to Meta. No advertising identifier (IDFA) is used, no tracking permission (ATT) is requested, and health data (weight, calories, meals, workouts) is NEVER sent to Meta.
• Error monitoring (mobile app): when the app crashes or errors, a crash record, device model, operating system and app version, visited screen names and your random account number are sent to Sentry; your email, IP and health data are not sent.

You can access your data and permanently delete your account from within the app (Settings → Delete Account) — this irreversibly removes your account and all personal data (GDPR/KVKK "right to be forgotten").

If the app is not installed, you can also delete your account at antrena.app/account-deletion: confirm the single-use verification link sent to your email and your account and data are permanently deleted. That page lists exactly which data is deleted and which is retained (a random device number that blocks free-trial abuse, and subscription events kept for financial record-keeping).

While your account is open: your account data (profile, health and fitness records, coach chats, connected integrations) is kept for as long as your account stays open, so we can provide the coaching service.

When you delete your account: when you delete it from within the app (Settings → Delete Account) or request deletion at antrena.app/account-deletion, your account and personal data are deleted immediately and permanently; there is no waiting period. A deleted account cannot be restored.

What remains after deletion:

• In-app usage events: not deleted but anonymized: the link to your account is removed and they remain only as aggregate statistics.
• Device number (free-trial abuse lock): a random device number is kept to prevent repeated free trials; it contains no name, email or health data.
• Subscription/payment events: kept to meet financial record-keeping obligations, under a random number not directly linked to your account; we do not hold your card details.

Backups: daily database backups are taken and automatically deleted after 14 days. Data of a deleted account may remain in backups taken within that period; backups are not used for any new purpose and serve only to restore data after a possible loss.

Third parties: data passed to Google (Gemini) for coach replies, Sentry for error monitoring, Meta for ad measurement and Apple/Google/RevenueCat for subscriptions is subject to those services' own retention policies; we do not set their retention periods. Health data is never sent to Sentry or Meta in the first place (see section 5).

Deletion request: Settings → Delete Account in the app; if the app is not installed, antrena.app/account-deletion; or [email protected].

Data controller: MOONTRA SOFTWARE YAZILIM VE İNOVASYON TİCARET LİMİTED ŞİRKETİ (Tax ID: 6222607413)
Halkalı Merkez Mah. Halkalı Cad. Tekno Park İdare Binası No: 281/23 İç Kapı No: 2, Küçükçekmece/İstanbul, Türkiye

For questions and GDPR/KVKK requests (access, rectification, deletion, withdrawal of consent): [email protected]