Privacy

In short

Entil stores your training so you can follow your progress and share it with friends. We never sell your data, show no ads and don't track you across apps. You can download or delete everything at any time in the app. With Premium you can choose to use Adaptive Intelligence – a summary of your training is then sent to an AI service, but only after you have said yes.

Who is responsible

The data controller is Løver Technologies v/ Tobias Løver (org.nr. 936 537 758), Jernbanegata 2, 3044 Drammen. Privacy questions: kontakt@entilworkout.com.

What we store

• Account: email address and username, and optionally name, profile photo and bio. • Training: workouts, exercises, sets, weight, reps, RPE, notes, location (optional, e.g. your gym), routines, planned workouts and goals. • Health data – only if you consent: bodyweight, height, sleep and readiness. • Date of birth (for the age limit and accurate recommendations) and sex (optional). • Social: who you follow, groups, challenges, group posts, likes, comments and photos you post. • Reports and blocks you make (including any photos you attach to a report), and suggestions you send. • Subscription: which subscription you have, and when it starts, renews or ends. Payment is taken by Apple or Google – we never see your card details. • Emails you send us, and emails we send you (confirmation codes and password reset codes). • Push notifications: if you turn on notifications, your phone's push token (a technical address for the phone), platform and language are stored on your account. The content of a notification (e.g. that someone liked your workout) passes through Expo's push service and the Apple Push Notification service to your phone. You can turn notifications off in Settings → Notifications or in your phone's settings. • Error and performance reports: when something goes wrong in the app (crashes or other errors), and for a small share of usage (performance, e.g. how long a screen or network request took), technical information is sent (phone model, iOS version, app version, what went wrong) and a pseudonymous user ID – not your name, email, IP address or training data. • Website: one cookie (“lang”) that only remembers the language you chose. It is necessary for your language choice to work, is not used for tracking and therefore does not require consent. • Waitlist: if you sign up on the website, we store your email address once you have confirmed it.

What you must provide

To create an account you must provide an email address (or sign in with Apple or Google), a username and your date of birth. Everything else is optional. Some features don't work without the data they need – for example, volume for push-ups and pull-ups isn't calculated without your bodyweight.

Why, and on what basis

• Providing the app (contract, GDPR Art. 6(1)(b)): your account, storing and syncing your training, showing progress, social features, push notifications you have turned on, and subscriptions. • Health data (explicit consent, Art. 9(2)(a)): you give consent with a separate button in the app before anything is stored. You can withdraw it in Settings → Profile and health; the data is then deleted. • Adaptive Intelligence (consent, Art. 6(1)(a)): training data is only sent to the AI service after you tap “Allow” in the app. You can withdraw consent by turning off Adaptive Intelligence in Settings → Training; nothing more is sent after that. • Training data can in some cases say something about physical fitness. We only use it to provide the service to you – never for ads or profiling. • Safety and abuse (legitimate interest, Art. 6(1)(f)): our interest is protecting Entil and its users from spam, abuse, harassment and security incidents. This covers reports, blocks and limits on how much can be done in a short time. • Fixing bugs and performance (legitimate interest, Art. 6(1)(f)): our interest is detecting and fixing technical errors and keeping the app fast, stable and secure. We then process limited technical information and a pseudonymous user ID. • Waitlist (consent, Art. 6(1)(a)): you confirm your sign-up by email, and can unsubscribe with the link in every email. • Purchases (legal obligation, Art. 6(1)(c)): purchase records are kept for as long as accounting rules require.

Who can see what

With a public profile, all signed-in users can see the workouts you share. With a private profile, only followers you have approved can see them. Any workout can also be set to “Only me”. Your profile (username, name, photo, bio and counts) is visible to other signed-in users. In groups only totals are shared (workouts, volume, sets, heaviest lift) – never individual workouts. The location you add to a workout is shown with the workout. Place names from public workouts on a public profile may be suggested to others when they enter a location – only the name, never who trains there, and never addresses (locations containing numbers are not shared). Health data, date of birth, sex, workout notes and exercise notes are always private – only you can see them.

Who processes data for us

We use a few providers to run Entil. All have a data processing agreement with us, only get the information they need for their task, and must protect the data at least as well as we do. • Hosting and database providers – storing your account, training data and photos, and sign-in (EU). • Email providers – account emails, alerts and newsletters (EU). • Error and performance reporting – technical error and performance reports with a pseudonymous user ID (EU). • Push notification services – your push token and the notification content, to deliver notifications to your phone (USA). • Subscription management – a pseudonymous user ID and purchase information (USA). • AI service: OpenAI (Premium only, and only after you have agreed to share data with AI) – a summary of your training data (exercises, weight, reps, RPE, dates, goal, experience, equipment and workout length, and whether you reported a low day – yes/no only) to create weight suggestions, workouts and plans. No name, email, photos or notes, and never your sleep and energy scores. Not used to train AI models, and deleted by OpenAI after 30 days at most (USA). • App updates – technical information such as IP address and phone model when the app fetches an update, not training data (USA). • Website and domain – running the website and emails you send us. Apple is itself responsible for the App Store, purchases, “Sign in with Apple” and the Apple Push Notification service, and Google for “Sign in with Google”. Some providers (marked USA above) process data outside the EU/EEA. Such transfers only go to providers certified under the EU–US Data Privacy Framework, or under the EU standard contractual clauses. Contact us at kontakt@entilworkout.com if you want to know which providers we use, or want a copy of the safeguards.

How long

For as long as you have an account. If you delete your account, your personal data is deleted from our active systems immediately: profile, workouts, photos, posts, comments, likes, routines, goals, health data, suggestions, reports you have sent and your login – and everything on your phone. We also ask our subscription provider to delete your purchase history; records that must be kept under accounting rules are retained for as long as the law requires. Groups you created pass to another member, without you. Backups and technical logs are deleted by our normal deletion routines, usually within 30 days. Error and performance reports are deleted after 90 days at the latest. How many AI suggestions you have used per day (for the usage limit) is kept for 30 days, and the AI service deletes the requests after 30 days at the latest. Your push token is removed from your account when you sign out or delete your account. Reports others have sent about content you posted are deleted after 12 months at the latest. Emails you send us are deleted when the matter is closed, and after 12 months at the latest. If you unsubscribe from the waitlist, you get no more emails from us, and your address is deleted within 30 days. If you delete your account in the app, a waitlist address with the same email is removed too. A subscription is not cancelled when you delete your account – cancel it with Apple or Google.

Your rights

• Access and portability: Settings → Account → "Download my data". • Correction: edit everything directly in the app. • Deletion: Settings → Account → "Delete account". • Withdraw consent: Settings → Profile and health → "Withdraw consent" (health data is deleted), Settings → Training → turn off Adaptive Intelligence (nothing more is sent to the AI service), or the unsubscribe link in waitlist emails. • Restriction: in some cases you can ask us to restrict the processing of your data. • Objection: you can object to processing based on our legitimate interest (safety and bug fixing). Email kontakt@entilworkout.com and we will reply within 30 days. You can also complain to your data protection authority (in Norway: Datatilsynet).

Children

Entil is for people aged 13 and over. If you are under 13, you cannot create an account. If we learn that a user is under 13, we delete the account and its data.

Changes

We will let you know in the app about material changes. Last updated 07.10.2026.