Privacy Notice (draft)
Draft · to be confirmed once the hosting region is decided. Lists only data the site actually collects and uses.
What we collect
Sign-in: phone number or email address, a hash of the code (no plain code stored), a hash of the request IP (rate limiting only, no plain IP), session token hashes.
Training: plans, sessions, sets and favourites you enter; private by default.
Phone numbers are used only to deliver sign-in codes via the SMS provider (Aliyun SMS); no ID documents or payment data; no third-party ads or behavioural tracking.
AI features
When the weekly-report explanation or poster copy call an external text model, only de-identified data is sent (weekly numbers, exercise and program names, dates) — never email, display name, phone number, note text or raw logs.
AI plan matching sends the sentence you type in its box to an external text model as is (up to 500 characters), so do not put personal details in it; the site records only a hash of that sentence, its length and the conditions recognised, not the text.
Pose photos are never sent to any AI model and never leave this site's server; they are reviewed by this site's reviewer personally. The full list of AI uses is on the “Method & AI” page.
AI-generated content is labelled on the page; changes to your training need your confirmation.
Export and deletion
You may request an export of your training data or deletion of your account; deletion removes your training records. Staff bylines follow the content rules.
Request it from the Account settings page; you can cancel any time before it is processed, and an administrator handles it. Our product goal is to complete the clean-up within 30 days of the request. That is an internal target, not a cancellation window and not a statutory deadline.
Once carried out: the account can no longer sign in, identifying details such as phone number and email are cleared (the same number can register again), and training records, check-ins, favourites and questions are deleted; to keep the content review chain intact, review bylines and audit records on the content side are kept but unlinked from your account.
Some steps are still being completed during development; the formal process is published once the region is set.
Development stage
The site is not publicly launched; data lives in a project-specific database and runtime secrets are injected by the deployment, never written into code or docs.
This notice will change version with the hosting region and final text.