Strikt is an iOS fitness app and website operated by its independent creator in Italy. This policy explains what information Strikt collects, how it is used, and the choices available to you.

Information We Collect

If you joined Strikt's website launch waitlist before the public App Store release, we collected the email address you submitted, submission time, browser locale, landing-page path, referring website domain, form placement, and any campaign labels included in the link you followed: utm_source, utm_medium, utm_campaign, utm_content, and utm_term. The public website no longer offers a waitlist form. Legacy records may retain both first and most recent source attribution.

In the app, Strikt may collect account identifiers, profile information, fitness and workout results, product interaction events, crash data, diagnostic logs, user-submitted feedback, community product ideas, votes and moderation reports, and media you choose to upload, such as avatars or share images.

If you subscribe, we use your email address to send the Strikt Weekly: a weekly editorial email with guides, small experiments, community questions, and product news. We record your preferred language, request, confirmation time, consent wording version, and subscription status separately from app accounts and the former launch waitlist. Subscription is optional and based on your consent. We send a confirmation email first; you join the list only after confirming your address.

Firebase stores subscription records and Resend delivers emails. To prevent misuse, we keep short-lived, keyed hashes of network addresses and request counters; these are not used for advertising. Unconfirmed requests are removed after seven days during daily cleanup, and network rate-limit records expire after one day and are removed during daily cleanup.

You can leave through the unsubscribe link in an email or by writing to strikt.support@gmail.com. Unsubscribing removes your email from our subscriber record immediately and stops future newsletter sends. We retain a keyed suppression record without your email for up to 90 days plus the daily cleanup interval. Delivery records may remain with Resend under its retention practices. Withdrawal does not affect earlier lawful processing or your app account. Newsletter replies stay private; we ask before quoting or identifying you in a story.

Website Analytics And Your Choice

Optional website statistics are off unless you allow them. Strikt uses its own Firebase service in Frankfurt to measure visits, public pages read, active reading time, scroll depth, referring domains, campaign labels, approximate country, device category, website language, and clicks toward the app or newsletter. The approximate country is provided by the website host; we do not request your precise location. An App Store click does not tell us whether you installed the app or created an account.

With your statistics consent, we also count video starts, when playback reaches the end, and changes of movement in the phone setup guide. Reaching the end does not prove the entire video was watched.

We do not record screens or form contents, identify website visitors by email, or connect visits to app accounts or newsletter addresses. Statistics exclude full URLs, arbitrary query parameters, invitation codes, and confirmation tokens. A random identifier groups pages within a browser session and is stored in first-party session storage. Sessions restart after 30 minutes without updates, four hours, or 30 pages. Raw IP addresses are not stored in the analytics records; a temporary keyed identifier is used to limit excessive requests. Do Not Track is respected.

Your analytics choice is stored as a first-party browser preference for up to six months so that the website can remember it. Refusing analytics does not limit the website or your access to the App Store.

Website Language

We use your browser’s language preference on the homepage and remember a language you choose in a first-party cookie for up to one year. This preference is used only to display the website in your chosen language and does not enable analytics or advertising.

Camera And Motion Data

Strikt uses the device camera to count reps and provide movement feedback. In the public app, pose detection and rep counting run on device. Movement diagnostics do not upload raw camera frames, recorded video, or audio. If you separately choose Share movement diagnostics in the app, Strikt may upload a short-lived trace covering camera setup and each camera-tracked set, uploaded when the set ends, containing 2D and 3D pose landmarks, joint confidence, derived angles, and tracker decisions. The trace is linked to your account solely so support can explain missed or incorrect reps and improve tracker reliability. It is not used for advertising or to train AI models and is deleted within seven days. During a live race with video enabled, your camera is additionally streamed to your opponent as described below.

Coach Lens may temporarily record an audio-free replay of a camera-tracked exercise block on your device to provide post-set feedback. Those clips are never uploaded and are removed by the app as part of its temporary-file cleanup.

These statements describe movement diagnostics and Coach Lens. Replays and the restricted real-time AI coach pilot have separate data flows, described below.

Restricted Real-Time AI Coach Pilot

The real-time AI coach is an internal pilot restricted to authorized administrator accounts. It is not available to general App Store users. When an authorized pilot user activates it, the app sends microphone audio and limited context such as age range, experience level, and preferred coaching style to an external AI service. During camera-tracked sets, it also sends sampled camera images and selected facts from the on-device tracker. The service returns spoken feedback; the on-device tracker, not the AI coach, decides which repetitions count.

Movement diagnostics, Coach Lens, Replays, and live race video are separate features. Their settings do not authorize this AI processing. Before making the real-time coach available to other athletes, Strikt will update this policy and ask for separate consent for the camera, microphone, and coaching context used by the feature.

Replays

Replays are off until you turn them on in the app, and they are available only to athletes aged 18 or over. You can turn them off at any time in Settings, Data & privacy.

With Replays on, Strikt records a video of each camera-tracked set (workouts, movement breaks, bot duels, friend races and ranked races), without audio, together with the tracker’s own record of that set (the pose points and the repetition count). A small “REC” mark is on screen while a set is being recorded. A set you pause, skip or discard is not kept. The video and the tracker record are uploaded to Strikt’s cloud storage in the European Union and then removed from your phone.

Who can watch a replay: only you, in your profile in the app. This includes friend races and ranked races: you see your own side of the race, and your opponent never sees your video, nor you theirs. Replays are never public and are never used for advertising.

We do not sell these videos and we do not share them with third parties for their own purposes. Our cloud provider stores them on our behalf.

Turning Replays off stops recording at once and removes recordings still waiting on your phone. Your replays stay in your profile until you delete them: one at a time from the replay, or all at once in Settings, Data & privacy, Replays. Deleting a replay removes it from our servers. Deleting your account deletes all your recordings.

Other people: record yourself only. If someone else is in the frame, make sure they agree, or turn Replays off.

Live Race Video

During head-to-head races athletes aged 18 or over can choose to share live video with their opponent. The live call is shown only to your opponent for the duration of the race and is never recorded by Strikt. If you have turned Replays on, your own iPhone separately saves its own camera picture of the race; see Replays. Live video flows only when both athletes have it enabled, and you can pause or turn it off at any time, including mid-race, from Settings or the race screen.

To establish the direct connection, connection setup data (including device network addresses) is exchanged through our infrastructure, readable only by the two race participants, and deleted after the race.

For safety, both athletes complete a short check-in after every race with video. Reports of inappropriate behavior result in the reported athlete being blocked from matching with the reporter and can suspend the reported athlete's access to video features. Reports are stored for moderation and abuse-prevention purposes and are not visible to the reported athlete.

How We Use Information

We use information to provide the app, manage accounts, maintain any necessary legacy waitlist records, show training history and social features, process subscriptions, prevent abuse, diagnose issues, improve product quality, measure the aggregate effectiveness of acquisition campaigns, and communicate about service updates.

Ideas And Community Feedback

Strikt Lab lets signed-in athletes submit product ideas and vote on published requests. Ideas are reviewed before publication. Published cards do not display an author name, handle, avatar, or account identifier, but Strikt keeps the submitting account identifier privately so it can enforce one vote per account, rate limits, blocking, moderation, and account deletion.

Reports and blocks are private. Other athletes do not see who reported or blocked a post. Do not include names, contact details, links, health information, or other personal information in an idea. Private bug reports, screenshots, and diagnostic logs use a separate support system and are never turned into community posts.

Service Providers

Strikt uses Firebase for authentication, database, storage, functions, and legacy waitlist records; RevenueCat for subscription entitlement management; Apple services for App Store purchases and Sign in with Apple; Resend for transactional, newsletter, and prior waitlist emails; and PostHog for app product analytics and, where enabled, crash reporting; and OpenAI only when you ask support to analyze a minimized diagnostic summary. Firebase also stores separately consented movement-diagnostic traces for no more than seven days. If you ask support to investigate a specific set, Strikt may use OpenAI business services to process that support request and review a minimized diagnostic summary under Strikt's instructions. The summary excludes raw pose landmarks, camera frames, video, audio, email addresses and internal account identifiers; contact details you include in the support request may be processed only to handle that request. These data are not used to train AI models. In the app, Usage Sharing is enabled by default on new installations and can be disabled persistently in Settings. Consent-gated website statistics are processed separately through Strikt’s Firebase service in Frankfurt. The website does not send statistics, browser exceptions, or diagnostic logs to PostHog.

Google Cloud Storage stores Replay recordings on our behalf in europe-west3 (Frankfurt, European Union).

The restricted real-time AI coach pilot uses an external AI processor for the images, audio, tracker facts, and limited context described above. This pilot is not part of the public App Store release.

Advertising Attribution

If we run app-install advertising campaigns, install attribution uses Apple's privacy-preserving SKAdNetwork and the Meta (Facebook) SDK, which may log app install and app launch events to Meta. Advertiser-ID collection is disabled, and Strikt does not track you across other companies' apps or websites without your permission.

Legal Bases

Where GDPR applies, legacy waitlist information was processed to take the steps you requested and send the launch notice you asked for. We rely on our legitimate interests to measure aggregate campaign effectiveness using bounded campaign labels and reduced source information, without unique recipient tags. Optional website analytics, movement diagnostics, and non-essential access to browser information are based on your consent. We also process information where necessary to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention, service diagnostics, and product improvement, after considering your rights and interests.

Replays (recording, storage and playback of your set videos): your consent, which you can withdraw at any time in Settings.

Retention

Legacy waitlist records are kept only as long as needed to handle delivery, support, security, and legal needs related to the requested launch notice. We periodically review and delete records that are no longer needed, and you may ask us to delete yours sooner. Consent-gated website session statistics are kept for 90 days and then removed during daily cleanup. The first-party preference that remembers your analytics choice is kept for up to six months.

Account data is kept while your account is active or as needed for legal, security, and operational purposes. Consented movement-diagnostic traces are deleted within seven days and are also deleted when you turn sharing off or delete your account. Other diagnostic data is kept for a limited period and pruned when no longer needed. Deleting your account removes product ideas you authored and your account-level votes, reports, blocks, and rate-limit records from Strikt systems, subject to limited legal or security retention where required.

Replay videos and their tracker records: kept until you delete them in the app or delete your account.

Your Choices

You can accept or refuse optional website analytics when asked. You can later change or withdraw that choice at any time through the Cookie settings control on the website. Withdrawal stops future website analytics events and clears the website's local analytics state; it does not affect processing that was lawful before withdrawal. You can use the website and follow App Store links even if you refuse analytics.

You can request access, correction, deletion, restriction, or export of personal information, and you can object to processing based on legitimate interests, by contacting us. In the app, you can delete your account from settings, which starts deletion of account data handled by Strikt systems. You can turn Usage Sharing off persistently in Settings at any time; doing so stops future app product-analytics and consent-aware diagnostic events and clears the active analytics runtime on that device. Movement diagnostics use a separate choice. You can enable or disable Share movement diagnostics in Settings; disabling it stops new traces and requests deletion of retained traces. You can turn either choice back on later.

If you are in the EU or EEA, you also have the right to lodge a complaint with your data protection authority — in Italy, the Garante per la Protezione dei Dati Personali.

Children

Strikt is not intended for children under 13, or under the minimum age required in your jurisdiction. Do not use Strikt if you are not old enough to consent to this policy. Live race video is limited to athletes aged 18 or over; profiles under 18 have it locked off and race on the skeleton view.

Replays and live race video are available only to athletes aged 18 or over.

International Transfers

Website statistics are hosted in Frankfurt through Google Firebase. Other providers may process data in countries other than your own. When required, we rely on appropriate safeguards for international transfers.

Contact

For privacy questions or requests, contact strikt.support@gmail.com.