Privacy policy

This policy explains how BallerBiz Oy handles information when you use RepChief and this website.

Who is responsible

BallerBiz Oy, Limingantie 37A 1, 00560 Helsinki, Finland, is the controller of your RepChief information. Contact info@ballerbizoy.com for privacy questions or requests.

Information we process

• Account and profile: your sign-in identifier, email, name, and the profile details you provide, such as age, gender, goals, height, weight and training preferences. Apple or Google may provide the account details you authorize when you sign in.
• Training and daily records: your schedule, workouts, exercises, sets, repetitions, weights, completion confirmations, journal, recovery and nutrition entries.
• Photos and conversations: photos and videos you choose to upload, conversations with Chief and other lifters, and the answers or plans generated for you. Camera and photo access are optional.
• Apple Health: if you connect it, the measurements and workouts you authorize, including available sleep, heart and body measurements, and workouts with their heart rate and, for outdoor workouts, the route recorded (precise location). These support your Vitals view and add your workouts to your training calendar; newer weight readings can update your RepChief profile weight. Workout routes are kept only in your account and are not shown to other users. You control access in Apple Health and can disconnect it in RepChief.
• Social features: if you choose a username to use the Feed, your username, name, photo and bio, the workouts you share, your follows, likes and comments, and your best lifts and weekly sets on the leaderboards are shown to other RepChief users. You choose who sees each workout (Everyone, Followers or Only Me), and a private profile shows its workouts to accepted followers only. Your age, height, weight and sex only place you in leaderboard filters and are never shown.
• Calendar: if you import your phone's calendar while setting up your schedule, RepChief reads the next seven days of events on your phone and saves the title, weekday and time of each timed event as a commitment in your account, so Chief can plan around it. Nothing is written to your calendar, and calendar access is optional.
• Dictation: if you dictate a message to Chief, your speech is turned into text by Apple's speech service on your phone. RepChief receives and keeps only the text you send, not the recording.
• Contacts: if you use Find Friends and allow contact access, RepChief reads the email addresses in your contacts on your phone and sends only a one-way scrambled form of each (a SHA-256 hash) to find which of your contacts use RepChief; these are not stored. Your own sign-in email is held in the same scrambled form so friends who have it can find you. Contact access is optional, and invitations you send open Messages or Mail on your phone.
• Purchases: account identifiers, product and transaction identifiers, subscription status, entitlement records, Chief credit purchases and your credit balance, store country and currency information from Apple, Google Play and RevenueCat. RepChief does not receive your full payment card details.
• Technical and support records: device and app version, diagnostic or crash information, request logs, IP addresses and approximate country information used by our infrastructure, notification tokens when enabled, and correspondence you send to support. Food searches that find no match are kept for up to 180 days without your account, to improve the food catalog.

Why we use it

We use account and app records to provide the service you request, keep your devices in sync, create your schedule and display your history. Subscription information controls purchased access and helps us understand subscriptions, renewals and billing failures. Technical records help us operate securely, diagnose failures and respond to support requests.

Where the GDPR applies, the bases are performance of our agreement for core account and service operations, including Chief's coaching and photo analysis; your explicit consent for Apple Health processing, which you give by connecting Apple Health and can withdraw by disconnecting it; legitimate interests for proportionate security and troubleshooting, and for usage analytics and ad measurement; your consent for this website's advertising tags where we ask for it; and legal obligations for required records. Health information may reveal sensitive data.

How Chief uses AI

Chief's coaching, plan building and photo analysis are part of the RepChief service. When you use them, RepChief sends the relevant messages, selected images and profile, workout, nutrition and journal information to OpenRouter, which acts as our processor and routes each request to the AI model provider we have selected. Relevant context may include Apple Health measurements you have synced. AI providers receive the context needed for the requested feature, rather than access to your entire account database. If you do not want information processed this way, do not use those features, or delete your account.

Our AI requests use provider routes configured to prohibit training on those requests and require zero data retention at the model endpoint. RepChief itself stores your conversations and results so you can view them later; infrastructure and billing services may retain necessary operational metadata.

To have saved conversations removed, use account deletion or contact us. AI results can be inaccurate; they support your choices and do not make legal or similarly significant decisions about you.

Services that process information

• Google Firebase and Google Cloud: authentication, account and app data, uploaded files, hosting, backend processing and crash diagnostics.
• Apple and Google Play: sign-in where selected, store purchases and subscription management.
• RevenueCat: purchase validation and subscription access.
• OpenRouter and the AI model providers it routes to: the AI processing described above.
• PostHog: when usage analytics is available, feature-use, training and nutrition activity, Chief usage, referral and subscription events. Profile details, including age, gender, body size, goals, experience, equipment, training days, username and email, can be linked to this activity. We use this information to understand product use, retention, subscriptions and acquisition. Collection begins before sign-up; the installation history is linked to your account when you sign in. Approximate location may be derived from network information. RepChief does not record your screen.
• PostHog, for this website: the pages you open on repchief.com, how long and how far you read them, the site or ad campaign that linked you (the referring site, campaign tags and ad click identifiers), your device type, browser, language and screen size, the country, region and city our hosting provider derives from your network address, how far you scroll through the home page and watch the film, and the buttons you tap, such as Watch the film, Join the waitlist or Open in RepChief. We use this to understand which pages and links bring people to RepChief. The website keeps an identifier in your browser's storage, so your visits are recognised from one day to the next together with where you first came from. If you join the waitlist, your email is linked to those visits, so they can be matched to your RepChief account. When you tap Get the app, a store badge or Open in RepChief, the website passes that identifier and where you first came from to the app (for an App Store download, by copying a link the app reads after you install it), and the app links them to your account. The website records no screen.
• Meta, TikTok and Google, for this website: repchief.com uses the Meta Pixel, the TikTok Pixel and the Google tag, with Meta's Conversions API and TikTok's Events API, to measure our ads and to show RepChief ads to people who visited. They receive the pages you open, when you read the home page's story to the end or watch half of the film, when you tap Get the app, a store badge or Open in RepChief, and when you join the waitlist; the ad click identifiers and cookies these companies set; your network address and browser; and, when you join the waitlist, a hashed (SHA-256) copy of your email so they can match the signup to their own accounts. Each company uses this under its own terms and privacy policy, and may combine it with what it knows about you to measure ads and choose who sees them. Visitors in the European Union and European Economic Area, the United Kingdom and Switzerland are asked first, and these tags run only after they accept.
• Service and legal recipients: support providers, professional advisers or authorities when necessary to respond to a request, protect rights or meet legal obligations.

We do not sell personal information or send health and fitness data to ad networks. Passwords, payment-card details and the text of private messages between people are not sent to analytics services. Account deletion initiates applicable analytics-processor deletion work.

When ad measurement is available, AppsFlyer processes install and app-open information, vendor-scoped device and account identifiers, and device/network information to measure acquisition. RepChief can associate the AppsFlyer installation identifier with RevenueCat purchase information for subscription measurement. During setup, the iPhone app asks for permission to track (Apple's App Tracking Transparency). If you allow it, AppsFlyer and RevenueCat also send your device's advertising identifier (IDFA) with your install, trials and purchases, so the ad networks that ran an ad, such as Apple Ads, Meta, TikTok and Google, can attribute them to that ad and show RepChief's ads to similar people. If you don't allow it, no advertising identifier is collected, and AppsFlyer's Aggregated Advanced Privacy reports results to Meta and TikTok as campaign totals, without device or account identifiers. Apple Ads attribution comes from Apple. Health, fitness, nutrition and private message content are not sent to ad networks.

On iPhones that installed RepChief from the App Store, Google Analytics for Firebase measures app installs, app opens and App Store purchases for Google Ads. After you sign in, Google's on-device conversion measurement uses your sign-in email on your phone to match those results to Google Ads campaigns; the email is processed on the device and is not sent to Google or to RepChief by this measurement. Google receives no health, fitness, nutrition or private message content.

Storage, transfers and security

Our main RepChief database and uploaded-file storage are configured in Europe. Backend processing and service providers may also process information in the United States and other countries. Applicable provider agreements and legally required transfer safeguards govern those transfers; contact us for information about the safeguards relevant to your data.

We use encrypted network transport, authenticated access, account access rules and restricted service credentials. No system can guarantee absolute security.

How long we keep information

We generally retain account records, uploaded photos, conversations and history while your account is active, so the features you use continue to work. You can remove supported entries in the app or request deletion. Support and diagnostic records are kept only as long as necessary to resolve issues, protect the service or meet legal requirements.

Account deletion removes identifiable app data from our active services and initiates applicable provider deletion work. Limited pseudonymized billing evidence and legally required records may remain for accounting, fraud prevention or disputes. Residual provider backups and crash records expire under the providers' retention cycles; they are not used to recreate an active coaching account.

Choices and rights

You can edit your profile, choose which photos to upload, control notifications and Health permissions, and delete your account. Store subscriptions must be cancelled separately.

Depending on applicable law, you can request access, correction, deletion, restriction, objection or a portable copy of personal data, and withdraw consent without affecting processing already lawfully completed. Email info@ballerbizoy.com; we may verify your identity. You can also complain to your local supervisory authority, including the Finnish Data Protection Ombudsman.

Children

RepChief is designed and marketed for adult gym users. It is not directed to children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and remove it where required.

Changes

We will update the effective date when this policy changes. For material changes we will provide additional notice or request fresh consent when required.