Privacy policy

1. Who is responsible

RJS Studio AB is the data controller for the personal data processed in CleanBoy. Contact: support@cleanboyapp.com.

2. What we collect

Account data: your email address, your name if you enter it, and an identifier from Apple or Google if you sign in with them. Data you log: workouts, nutrition, body weight and measurements, daily routines, supplements and sleep. Photos you take in the app: progress photos, plate photos and product photos. Location during cardio sessions, only while a session is being tracked. Health data from Apple Health if you allow it: sleep, heart rate variability, resting heart rate, blood oxygen, steps, active energy, workouts and body measurements. WHOOP data if you connect WHOOP: recovery, sleep, strain and workouts. Technical data: app version and sync status, used for updates and troubleshooting. Your Ask AI conversation is stored only on your phone. Anonymous counts: how many times per day a few steps happen in the app, for example completing the introduction, starting a trial or logging a first workout. A count carries no account, device or other identifier.

3. Why we collect it

Solely to provide the service: showing your history and statistics, syncing and backing up your data, sending the reminders you turn on, and handling your subscription. The legal basis is the agreement with you; for Apple Health, location, camera and notifications it is your consent, which you can withdraw at any time in iOS Settings. For the AI features (Ask AI and Calculate your meal with AI) it is the consent you give in the app before first use, which you can withdraw at the bottom of this page.

4. Apple Health

Data read from Apple Health is used to show it in the app and to store it in your own account. It is never used for advertising and never sold. It is shared with a third party in one case only: if you use Ask AI and have agreed to it, a summary that can include sleep, heart rate variability, steps and weight is sent to our AI provider (see section 5) to answer your question. The app writes to Apple Health only your daily water intake, and only if you turn that on under Water habits.

5. Where it is stored and who processes it

Data is stored on your device and, when you are signed in, in our cloud database run by Supabase. Photos are stored privately and only your account can access them. We use Expo for app updates, Apple and Google for sign-in, and Apple for payments. RevenueCat keeps track of whether your subscription is active. Crash reports: when the app crashes or hits an error, a report with the error, the app version and the device model is sent to Sentry; ID numbers and email addresses are removed before it is sent, and it never contains your name or what you have logged. If you connect WHOOP, data is fetched from WHOOP according to the permissions you grant, and you can disconnect at any time. AI: Ask AI and Calculate your meal with AI use Claude, an AI model from Anthropic (USA). The photo you choose, or a summary of what you have logged when you ask a question, is sent to Anthropic only after you have agreed in the app; your name and profile picture are never sent. Routes: route planning and cleaning up a GPS track send the coordinates of the route to a public OpenStreetMap routing service (Valhalla, run by FOSSGIS e.V. in Germany). Barcodes: a scanned barcode is looked up in Open Food Facts. Notifications: push notifications are delivered through Expo's push service, which carries the notification text. Anthropic, Expo, RevenueCat and Sentry are based in the USA, so using those features means data is transferred outside the EU/EEA.

6. What you share with friends

Friend requests, your name, your profile number and your profile picture are visible to other users so they can find and add you. You can turn off being findable under Friends, Visibility. A workout you choose to share, and any photo attached to it, is stored and shown to your accepted friends until you delete it; shared photos are stored under a randomly generated address. Comments you write are shown to everyone who can see that post. Blocking someone hides both of you from each other. Reports you submit are stored so we can act on them.

7. Sharing

We do not sell your data, we do not share it with advertisers and we do not use it for advertising. Data is shared only with the processors above, to the extent needed to run the service, or when the law requires it.

8. Retention

Your data is kept as long as your account exists. Deleted items stay in the trash for up to 30 days and are then removed permanently. When you delete your account under Settings, Account settings, your login, profile, shared posts, comments, friendships and photos in the cloud are deleted immediately, and any copies in backups disappear within 30 days. Data stored only on your phone stays there until you delete the app.

9. Your rights

Under the GDPR you have the right to access, correct, export, restrict and delete your data, and to object to processing. Export everything under Settings, Data and sync. Delete your account under Settings, Account settings. For anything else, email us. You can also complain to the Swedish Authority for Privacy Protection (IMY).

10. Children

CleanBoy is not directed to children under 13, and we do not knowingly collect data from them.

11. Changes

Changes to this policy are announced in the app before they take effect.