Privacy Policy
Last updated: 13 June 2026.
1. Data controller
Data controller: Simon Kjeldsen (Yosano) Email: support@yosano.app Phone: +45 20 81 40 04 Address: Frederiksberg, 2000, Denmark
2. What data do we collect?
We process the data you provide in the app: account details (email, name, username or display name), answers and measurements from the onboarding flow (such as goals, height, weight, gender, date of birth, training experience and preferences), meal logs (calories, protein, and optionally fat and carbs), workout logs, AI chat history and settings (for example calorie and protein goals, theme). Technical data such as device type may also be processed.
3. Purpose and legal basis
We use the data to provide the app's features (personal statistics, workouts, nutrition and AI chat). Most processing is necessary to perform our agreement with you. Optional use of a profile summary with Yosano AI (Google Gemini) for personalisation is based on your explicit consent (GDPR Article 6(1)(a)), which you give in the app and may withdraw at any time under Profile → My data.
4. Retention
We store your data for as long as you have an active account. When your account is deleted, associated data is deleted in accordance with our routines.
5. Recipients and transfers
Data is stored with Supabase (hosting, database, authentication, file storage). We use the following processors where relevant: Google LLC (Gemini API for AI chat, meal scanning and onboarding macro suggestions; Google Sign-In), Apple (Sign in with Apple, HealthKit, App Store billing), RevenueCat (subscription management), Strava (optional workout sharing), Resend (support email), RapidAPI/ExerciseDB (exercise media proxy), and optionally Sentry (error monitoring if enabled). When you use Yosano AI (chat), your messages are always sent to Google Gemini to generate replies. If you opt in to AI personalisation under Profile → My data, we also send a short profile summary and, when Apple Health is connected, optional daily health summaries (steps, active energy, sleep) to tailor answers. Meal scanning sends meal images to Gemini. Onboarding macro targets may send age, sex, height, weight and goal to Gemini to estimate targets — this happens as part of setting up your account regardless of chat personalisation. Transfers outside the EU/EEA only take place where GDPR-compliant safeguards apply (e.g. standard contractual clauses).
6. Your rights
You have the right to access, rectification, erasure and in some cases restriction and data portability. You may complain to the Danish Data Protection Agency if you believe the processing is unlawful.
7. Security
We apply appropriate technical and organisational measures to protect your data. Access requires login, and data is transferred securely.
8. Changes
We may update this privacy policy. For material changes we will inform you via the app or email. The current version is always available in the app under Profile → Privacy Policy.
9. Integrations (Apple Health, Strava)
Integrations are strictly optional. We only process data from Apple Health or Strava after you explicitly accept the integration consent (during onboarding or under Profile → Integrations) and grant the necessary permissions. You can revoke consent at any time; data will no longer be read or written, and stored health summaries can be deleted under Profile → My data. Apple Health: When enabled we may read aggregated daily values you select (currently steps, active energy and sleep in the app) and we may write your logged meals and workouts back to Apple Health. Only daily aggregates — not raw samples — are stored in our database. Strava: When enabled, you can share individual workouts from Yosano to your Strava profile. Yosano only writes to Strava when you actively tap "Share to Strava". We do not read data from Strava. Your consent and changes are logged with a timestamp (GDPR art. 7).
10. Yosano AI, onboarding data and Google Gemini
Profile personalisation (optional). If you enable AI chat personalisation (during onboarding or under Profile → My data), we attach a concise summary of relevant profile fields — and, when Apple Health is connected, optional daily health summaries — to Yosano AI requests so answers can be tailored. Without this opt-in, chat still uses Gemini for your messages but without profile or health context. Onboarding macro targets. When you complete onboarding, we may send age, sex, height, weight and fitness goal to Google Gemini to suggest calorie and macro targets. Legal basis: performance of our agreement with you (GDPR art. 6(1)(b)). Processor. Google LLC provides the Gemini API as data processor (GDPR art. 28). Marketing email. If you opt in during onboarding, we may send product updates by email. Legal basis: consent (art. 6(1)(a)); you can withdraw by contacting support@yosano.app. Retention. We keep profile and account data while your account is active. Chat retention follows your chat history settings. You may withdraw AI personalisation consent at any time under Profile → My data.