Legal
Privacy policy
Version 1.0 · Last updated 14 August 2026
This is written in plain English on purpose. Onda is a fitness app, which means it asks you for some genuinely personal things — your weight, what your body can do today, how often you follow through. You should be able to read exactly what happens to all of it without a law degree.
The short version
- We collect what the app needs to plan and reroute your training — and not much else.
- We do not sell your data. We do not use it for advertising. There are no ad networks in Onda.
- Your health and body data is never shared with advertisers, data brokers, or analytics tools.
- You can delete your account and everything in it from inside the app, at any time, without asking us.
- Questions go to privacy@ondaroute.com and a person reads them.
- 1. Who we are
- 2. What we collect
- 3. Why we collect it
- 4. What we do not do
- 5. Who else touches your data
- 6. Health data
- 7. How long we keep it
- 8. Deleting your data
- 9. Your other rights
- 10. Security
- 11. Children
- 12. Not medical advice
- 13. Changes
- 14. Contact
1. Who we are
Onda is a mobile fitness app operated by [LEGAL ENTITY NAME] (“Onda”, “we”, “us”), at [REGISTERED BUSINESS ADDRESS]. We are the data controller for the information described here. This policy covers the Onda mobile app and the website at ondaroute.com.
2. What we collect
Account information
Your email address, and a password (stored only as a cryptographic hash — we never see or store the password itself). Optionally a display name, your date of birth, sex, height, unit preference, and time zone. Date of birth and sex are used only to make training and calorie-adjacent estimates less wrong; you can leave them blank.
Body metrics
If you choose to log them: body weight and body fat percentage, each with the date it was measured. You decide whether to record these at all. Onda works without them.
Workout logs
What you were prescribed and what you actually did: exercises, sets, reps, weight lifted, duration, perceived effort, and when each set was completed. This is the substance of the app — it is what makes next week’s plan better than this week’s.
Behavioural and adherence data
This is the part most apps do not tell you about, so we will be specific. Onda records:
- When a session was proposed, started, completed, or skipped.
- When you rerouted a session, and the reason you gave — for example less time, low energy, wrong location, missing equipment, soreness, boredom, or travel.
- Derived measures such as your completion rate by session length, which hours of the day you actually train, how often a rerouted session gets finished, and how often a session is proposed but never started.
- Traits and obstacles you tell us about during onboarding — for example an unpredictable schedule, a tendency to get overwhelmed, or a need for variety.
- Injuries or sore regions you record, and exercises you have told us you dislike.
All of this exists for one purpose: so the app can reroute a plan around your real life instead of marking you as a failure. It is not used to profile you for anyone else, and it never leaves our systems in a form tied to your identity.
Device and diagnostic data
Crash reports and basic technical information — app version, device model, operating system version, and an anonymous installation identifier — so we can fix things that break. Crash reports are scrubbed of personal content before they are sent.
Purchase information
If you subscribe, Apple (or Google) processes the payment, not us. We receive a receipt confirming that a subscription is active, its type, and when it renews or lapses. We never see your card number, billing address, or full payment details.
3. Why we collect it
- To give you the service you asked for: building your plan, generating each session, and rerouting when the day changes.
- To make the plan fit you: adherence data is what lets Onda propose a twenty-minute session on the days you never finish a sixty-minute one.
- To keep your account working across devices and restore it if you reinstall.
- To fix bugs and keep the app stable.
- To manage subscriptions and confirm what you are entitled to.
Where the law requires a lawful basis (for example under the UK/EU GDPR), we rely on performance of our contract with you for the core service, your explicit consent for health-related data, and our legitimate interest in keeping the app secure and working. Where consent is the basis, you can withdraw it at any time — see deleting your data.
4. What we do not do
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Not to advertisers, not to data brokers, not to insurers, not to employers.
- There is no advertising in Onda and no advertising SDK in the app. Your data is not used to target ads anywhere, in Onda or outside it.
- We do not track you across other apps or websites. Onda does not request App Tracking Transparency permission because it has nothing to track you with.
- We do not read your contacts, photos, messages, or continuous location. When Onda asks where you are training, it is asking you to pick from a short list — gym, home, outdoors, travelling — not reading your GPS.
- We do not use your health or body data to train third-party AI models.
5. Who else touches your data
We use a small number of vendors to run the service. They act as our processors: they may only handle data on our instructions, for the purposes below, and may not use it for their own ends.
| Processor | What it does | What it receives |
|---|---|---|
| Supabase | Database, authentication, and file storage — this is where your account lives. | Everything you store in Onda: account details, body metrics, workout logs, adherence data. |
| RevenueCat | Manages subscription entitlements and validates App Store receipts. | An anonymous app user identifier and store transaction data. No body metrics, no workout logs. |
| Sentry | Crash and error reporting so we can fix what breaks. | Technical crash data, app version, device model, and an anonymous identifier. Body metrics and workout content are excluded. |
| PostHog | Product analytics — which features get used, where people get stuck. | Pseudonymous usage events, such as “reroute completed”. Not your weight, not your lifts, not your injuries. |
We will also disclose information if we are legally required to — a valid court order, for example — or where it is necessary to protect someone’s safety. If Onda is ever acquired, your data may transfer to the acquirer, and we will tell you before that happens so you can delete your account first if you would rather.
Some of these vendors operate outside your country. Where data is transferred out of the UK or EEA, it is done under the appropriate safeguards, including the European Commission’s standard contractual clauses. [CONFIRM TRANSFER MECHANISM WITH COUNSEL]
6. Health data
Body metrics, injuries, soreness, and workout logs are health-related data, and we treat them as the most sensitive thing in the app.
- They are never sold, never shared with advertisers or data brokers, and never used for marketing.
- They are not sent to our analytics or crash-reporting vendors.
- They are encrypted in transit and at rest, and access is scoped so that only your account can read your rows.
- They are not used for any purpose other than operating Onda for you.
If you choose to connect Apple Health, Onda reads only the specific data types you approve, and writes back only workouts you complete. You can revoke that permission at any time in the iOS Health app; Onda keeps working without it. Consistent with Apple’s requirements, data obtained through HealthKit is never used for advertising, never sold, and never disclosed to third parties for their own purposes.
7. How long we keep it
- While your account is open: we keep your data so the app can use your history to plan. Training history is only useful if it is long.
- After you delete your account: your data is removed from our live systems within 30 days, and purged from encrypted backups within 90 days as those backups age out.
- Records we are required to keep — for example proof of a transaction for tax purposes — are retained for as long as the law requires, and nothing more.
8. Deleting your data
You can delete your account and all of the data in it yourself. You do not need to email us, wait for a reply, or explain yourself.
- In the app: Settings → Account → Delete account. You will be asked to confirm once, because it cannot be undone.
- Or email privacy@ondaroute.com from the address on your account, and we will do it within 30 days.
Deleting your account removes your profile, body metrics, workout logs, plans, and adherence data. It does not cancel your subscription — subscriptions are managed by the App Store and must be cancelled there. See the support page for how.
9. Your other rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent. We extend these rights to everyone who uses Onda, wherever they live.
Ask by emailing privacy@ondaroute.com from your account address. We will respond within 30 days. We will not charge you, and we will not degrade the app because you exercised a right. If you are in the UK or EEA and you are not satisfied with our answer, you can complain to your local data protection authority.
10. Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to the people who need it and protected by multi-factor authentication. Database access rules are enforced per row so that one account cannot read another’s data. Passwords are hashed, never stored in readable form.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the relevant regulator without undue delay.
11. Children
Onda is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, email privacy@ondaroute.com and we will delete it.
Important
12. Not medical advice
Onda is a general fitness and wellbeing app. It is not a medical device. It does not diagnose, treat, cure, or prevent any disease or medical condition, and nothing it shows you is a medical opinion. The plans it generates are general fitness guidance for healthy adults, not a prescription.
Talk to a qualified clinician before starting a new exercise programme, especially if you are pregnant, recovering from injury or surgery, or managing a health condition. If something hurts, stop. If you think you are having a medical emergency, call your local emergency number.
13. Changes to this policy
If we change how we handle your data, we will update this page and change the version and date at the top. For anything significant — a new processor, a new category of data, a new purpose — we will tell you in the app before it takes effect, and where the law requires it, ask for your consent.
14. Contact
Privacy questions, data requests, and complaints:
privacy@ondaroute.com.
Anything else: support@ondaroute.com, or
the support page.
Postal: [LEGAL ENTITY NAME], [REGISTERED BUSINESS ADDRESS].