Zásady ochrany osobních údajů

Last updated: July 25, 2026

This Privacy Policy explains how Voona ("we", "us", "the app") collects, uses and protects your personal data when you use the Voona mobile application and the website voona.app.

Data controller: Leanid Liabetski (sole proprietor)

Contact: contact@voona.app

By using Voona you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. WHAT DATA WE COLLECT

Account data

- Email address and display name (from Sign in with Apple or Google Sign-In)

- Profile photo, if you add one

- Account identifiers needed to operate your account

Profile and fitness data you provide

- Age, gender, height, weight, body measurements

- Fitness level, training goals, training schedule and preferences

- Injuries or physical limitations you choose to share

- Weight goals and progress history

Activity data generated in the app

- Workout plans, completed workouts, sets, reps and weights

- Food diary entries, water intake, supplements

- Photos of meals you take for AI food analysis

- Custom banner or profile images you upload

- Messages you exchange with the AI coach and, if you use one, with your personal trainer

Apple Health data (optional)

- With your explicit permission, we read data such as steps, active energy, sleep and workouts from Apple Health to improve your recommendations. We never write incorrect data to Apple Health, never use Health data for advertising, and never sell it. You can revoke access at any time in iOS Settings.

Camera and photos

- The camera and photo library are used only when you choose to scan food, set an avatar or upload a banner image. Photos are processed for the stated purpose only.

Automatically collected data

- Basic device information (model, OS version, language, region)

- Crash and performance diagnostics

- Push notification tokens, so we can deliver notifications you enabled

- Usage analytics: anonymous statistics about which features are used and how often (for example, that a workout was completed or a meal was logged). See section 6 for details — this data is not used for advertising and does not include the content of your workouts, meals or messages.

- Device integrity signals: a cryptographic attestation from Apple confirming that requests to our servers come from a genuine, unmodified copy of the Voona app. This is used solely to protect the service against abuse and does not identify you personally.

2. HOW WE USE YOUR DATA (PURPOSES AND LEGAL BASES)

Under the EU/EEA General Data Protection Regulation (GDPR), we rely on the following legal bases:

- Providing the service (contract, Art. 6(1)(b) GDPR): creating your account, generating workout plans, analysing meals, tracking progress, syncing your data between devices, enabling trainer–client features.

- Your consent (Art. 6(1)(a) GDPR): reading Apple Health data, sending push notifications, processing health-related information you voluntarily provide (Art. 9(2)(a)). You can withdraw consent at any time.

- Legitimate interests (Art. 6(1)(f) GDPR): keeping the service secure, preventing abuse (including verifying that requests come from a genuine copy of the app), fixing crashes, understanding aggregate feature usage and improving core features.

- Legal obligations (Art. 6(1)(c) GDPR): responding to lawful requests and keeping records we are required to keep.

We do NOT sell your personal data. In particular, we never sell or share your health and fitness data — your workouts, meals, weight and measurements are never used for advertising of any kind.

The Voona app shows no third-party ads. We do advertise Voona itself on platforms such as Meta (Facebook/Instagram), TikTok and Google; see section 6 for how ad measurement works.

3. AI FEATURES

Voona uses artificial intelligence to generate workout plans, analyse food photos and power the AI coach chat. To do this, relevant parts of your data (for example a meal photo, or your fitness profile summary) are processed by our AI service providers on our behalf. Our primary provider is OpenAI (OpenAI, L.L.C., USA). To keep the app working during provider outages, the same requests may instead be processed by our backup provider, Google (Gemini API, Google LLC, USA). Each provider processes this data only to deliver the feature and, under the API terms we use, does not use your data to train their models.

We also use automated checks to protect the integrity of competitive features (for example, detecting implausible activity on the leaderboard). We do not make any decisions producing legal or similarly significant effects about you based solely on automated processing (Art. 22 GDPR).

AI output is general fitness and nutrition information, not medical advice. Estimates such as calories, portion sizes and recommendations may be inaccurate. Always consult a qualified professional before making significant changes to your diet or training, especially if you have a medical condition.

4. LEADERBOARD AND COMPETITIVE FEATURES

Voona includes an optional leaderboard that ranks users by an activity score.

- What is visible to other users: your display name, your country (derived from your device region) and your activity score. Nothing else — no workouts, meals, body data or messages are ever shown to other users.

- The score reflects only your consistency (completed workouts, diary days, streaks, goals). It does not expose the content of your training or nutrition.

- Participation is on by default and you can opt out at any time: Profile → Settings → "Show me in the leaderboard". Opting out immediately removes your entry from the public leaderboard.

- If you delete your account, your leaderboard entry is deleted with it.

Trainer access to your data

Voona lets you connect with a personal trainer. This is always your choice: a trainer gains access ONLY after you enter the invite code they gave you and confirm the connection in the app.

- What a connected trainer can see and edit: your workouts and workout plans, your food diary and water intake, and your body data (weight, measurements, goals). A trainer can also create and edit workout plans for you and log workouts on your behalf during a session.

- What a trainer can NEVER see: your private chat with the AI coach, your account settings, notification preferences, or any payment information.

- Transparency: the app keeps an access log, so you can see when your trainer viewed your data.

- Revoking access: you can disconnect a trainer at any time in Profile → Trainer. Access ends immediately and permanently; reconnecting requires a new invite code from you.

If you are a trainer using Voona's coach mode, you are responsible for handling your clients' data lawfully and only for coaching purposes.

Feedback board on our website

The voona.app website hosts a public "Feedback & Ideas" board where you can suggest features, report issues and vote, signed in with the same Voona account you use in the app.

- What is visible to anyone on the internet (the board can be read without signing in): the title and text of your posts, your display name, your profile photo (if your account has one), the posting date, the post's category and status, the total vote count, and a badge showing whether the account also uses the Voona app.

- Posts are public — do not include personal, sensitive or confidential information in them.

- Your individual votes are not shown publicly; only each post's total count is.

- We moderate the board: we may change a post's status, hide or remove posts, and restrict accounts that post unlawful, offensive or spam content. Posting is rate-limited to prevent abuse.

- To have one of your feedback posts removed, contact us (section 15) and we will delete it.

5. WHERE YOUR DATA IS STORED AND INTERNATIONAL TRANSFERS

Your data is stored with our cloud infrastructure provider. Data may be processed on servers located outside your country, including in the United States. Where data is transferred outside the EU/EEA, we rely on safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

6. COOKIES, ANALYTICS AND AD MEASUREMENT

Our website voona.app sets technically necessary cookies (security, basic site functionality). To measure the effectiveness of our own advertising campaigns, the website may also use advertising pixels and cookies from platforms such as Meta (Facebook/Instagram), TikTok and Google. These are set only with your consent where required by law (via the cookie banner on the site), and you can withdraw consent or manage cookies in your browser at any time. These pixels tell the ad platform that a visit or purchase happened; they do not receive your fitness or health data.

App install attribution: to understand which ads work, we may use Apple's privacy-preserving attribution framework (SKAdNetwork), which reports aggregate campaign results without identifying you. If we ever add tracking that links your app activity to third-party ad platforms, iOS will first ask for your explicit permission via the App Tracking Transparency prompt — tracking never happens without it.

In-app usage analytics: the Voona app uses an analytics service provided by our cloud infrastructure provider to collect aggregate usage statistics — for example, how many users complete a workout, log a meal or finish onboarding, along with basic device information. This helps us understand which features are useful and improve the app. This analytics data is tied to a random app-instance identifier, NOT to the advertising identifier (IDFA): the app does not access the IDFA at all, does not track you across other companies' apps or websites, and analytics data is never used to show you advertising. The content of your workouts, meals, messages and health data is never included in analytics events.

Crash and performance diagnostics in the app are used solely to fix bugs and improve stability — never for advertising.

7. HOW LONG WE KEEP YOUR DATA

- Account, profile and activity data: for as long as your account exists.

- Meal photos: stored with your food diary for as long as the diary entry exists.

- Crash and diagnostic logs: up to 90 days.

- After account deletion: your personal data is deleted or anonymized within 30 days, except where we must keep limited records to comply with legal obligations.

8. DATA DELETION AND YOUR CONTROLS

- Delete account in the app: Profile → Settings → Delete Account. This permanently removes your profile, workouts, nutrition history, photos, messages, leaderboard entry and cloud backups. This cannot be undone.

- You can also request deletion or a copy of your data by emailing contact@voona.app.

- Posts you published on the public feedback board are not deleted automatically when you delete your app account — email contact@voona.app and we will remove them.

- You can disconnect Apple Health, disable notifications, hide yourself from the leaderboard and revoke trainer access at any time in the app or in iOS Settings.

9. YOUR RIGHTS (EU/EEA)

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, contact us at contact@voona.app. We respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

If you live in the United Kingdom, you have equivalent rights under the UK GDPR. If you live in Brazil, you have similar rights under the LGPD, including the right to request review of decisions made by automated processing. We extend the same core rights (access, correction, deletion, portability) to all users worldwide.

10. UNITED STATES RESIDENTS (CALIFORNIA AND OTHER STATES)

If you are a California resident, you have the right under the CCPA/CPRA to know what personal information we collect, to request its deletion, to correct inaccurate information and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. Advertising cookies and pixels on our WEBSITE may constitute "sharing" for cross-context behavioral advertising under the CPRA — you can opt out via the cookie banner on the site or by enabling Global Privacy Control in your browser. Data from the Voona APP — including all health and fitness data — is never sold or shared for advertising.

Residents of other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah and Texas) have similar rights of access, correction, deletion and portability. We honour these rights for all users regardless of state. We do not discriminate against you for exercising your rights. To exercise them, email contact@voona.app.

11. CHILDREN

Voona is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, contact us at contact@voona.app and we will delete it.

12. SUBSCRIPTIONS AND PAYMENTS

Voona offers auto-renewing subscriptions (weekly, monthly or annual) purchased through the Apple App Store. Payment processing is handled entirely by Apple; we never see or store your payment card details. Manage or cancel your subscription in your App Store account settings.

13. SECURITY

Data is encrypted in transit (TLS) and at rest on our infrastructure. Access to your data is restricted by per-user security rules: only you — and a trainer you explicitly connected — can access your records. Requests to our servers are additionally verified with Apple's device attestation technology, so that only the genuine Voona app can read or write data. We regularly review our security practices.

14. CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be announced in the app or by email. The "Last updated" date at the top shows the current version. Continued use of Voona after changes take effect constitutes acceptance of the updated policy.

15. CONTACT

Questions about privacy or this policy: contact@voona.app