Privacy Policy

Workout Director (fit.workoutdirector). Last updated 23 October 2026. Controller: Shelgaon Ltd, company number 17079383, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.

Workout Director is a training app for iPhone. This page explains what the app and our service collect, why, who else receives it, how long it is kept, how to delete it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). It is the privacy URL in the App Store (https://workoutdirector.com/privacy).

Who we are

Shelgaon Ltd is the controller of your personal data: company number 17079383, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. Contact us at shelgaonltd@gmail.com.

What we collect

Account. Your email address, name, and a user ID when you sign in with Apple or Google (the web version also offers a sign-in code by email). Amazon Cognito holds the account.
Profile you enter. Name, age, sex, height, weight, activity level, your program, and your time zone.
Training data. Workouts, exercises, sets, reps, holds, the weight you lifted, and edits to your plan. It is stored on your iPhone, and a copy is kept on our servers when you are signed in.
Trainer data. Your messages to the trainer and its replies, a short summary of earlier chat, the facts it remembers about you (for example a goal, your equipment, or an injury you mention), and food entries you ask it to log. You can open the list of remembered facts and delete any of them.
Voice coach usage. How many voice coach minutes you used, and a rating if you give one. We do not keep recordings of your voice.
Purchases. Whether you have Workout Director Pro, from Apple and RevenueCat. Apple processes the payment; we never see your card.
Diagnostics. Crash reports (Google Firebase Crashlytics), linked to your user ID when you are signed in. Firebase Analytics is turned off in the app, and we do not collect product usage analytics.
Feedback. Messages you send with the in-app feedback form (Google Firebase).
Security and operations. Server logs, rate limits and backups that keep the service working and safe.

We do not use your data for advertising, we do not track you across other companies' apps or websites, and we do not sell personal data.

Why we are allowed to use it

Contract: to give you an account, keep a copy of your training, sync it, and provide Workout Director Pro.
Explicit consent: training, profile and Health data are about your health and fitness, so we treat them as special category data. We rely on your explicit consent to keep a copy on our servers when you sign in, to send data to the AI trainer or the voice coach (each has its own agreement and switch), and to use Apple Health (given in iOS when you allow access).
Legitimate interests: crash reports, security, server logs and backups, to keep the app reliable and safe.

Where we rely on consent, you can withdraw it at any time. This does not affect what was done before you withdrew it.

Camera

The camera counts reps and checks form on your iPhone, using Apple Vision or MediaPipe BlazePose. Video is never recorded, saved, or uploaded. Only the results, such as a rep count or a short form note, leave the camera screen.

Apple Health

Apple Health is optional and off until you turn it on. With your permission, Workout Director reads your heart rate and active calories during a workout, to show them in each set's summary, and writes each finished workout to the Health app.

Health data stays on your iPhone and is not sent to our servers. The one exception is the voice coach: while it is on and Health is on, the heart rate and active calories for the set you just finished are sent to OpenAI as text, so the coach can talk about that set. You agree to this on the voice coach screen before it starts.

We never use Health data for advertising, marketing, or data mining, never share it with anyone else, never sell it, and never store it in iCloud. You can revoke access at any time in iOS Settings, Health, Data Access & Devices.

AI trainer and voice coach

Trainer (xAI). Typed replies are written by an AI model from xAI. To reply, we send xAI your message, your profile (name, age, sex, height, weight, activity level), the facts the trainer remembers, a summary of earlier chat, your recent workouts and today's plan, and today's food entries. If you speak to the trainer, your iPhone turns speech into text first and only the text is sent. Camera video and Apple Health data are not sent to xAI. You agree before the first message, and you can turn the trainer off in Profile.

Voice coach (OpenAI). The voice coach is a separate choice with its own agreement screen. Once you agree, it starts with your workouts until you turn it off in Profile. While it is on, the microphone audio from that workout goes to OpenAI, which turns it into text and speaks the coach's replies. OpenAI also receives your profile (name, age, sex, height, weight), the facts the trainer remembers, a summary of earlier chat, today's plan, your recent workouts, today's food entries, the live rep counts, and, if Health is on, the heart rate and active calories for the set you just finished. Camera video is never sent. Turning the coach off, or ending the workout, stops the audio.

xAI and OpenAI use this data only to produce the replies for us, under their API terms, and keep it for up to 30 days. The trainer and the coach are AI. They do not give medical advice.

Who else receives data

We share data only with the service providers that run Workout Director for us, and only what each needs:

Apple and Google: sign-in. Apple also processes purchases.
Amazon Web Services (United States, us-east-1): our servers, the account (Cognito), and sign-in email codes.
xAI: the trainer, as described above.
OpenAI: the voice coach, as described above.
RevenueCat: subscription status.
Google Firebase: crash reports, remote settings, and feedback messages. Not analytics.
PostHog: feature flags (which features are switched on), checked by our servers with your user ID. No Health data.

Each of them is bound by contract or its terms to protect your data at least as well as this policy describes, and to use it only to provide its service to us. Some of them process data outside the UK, including in the United States, under the safeguards the law requires.

International transfers

Our servers and several providers are in the United States. Where data leaves the UK, we rely on the UK Extension to the EU-US Data Privacy Framework for certified recipients, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with each provider's security measures.

How long we keep it

Data on our servers is kept while you have an account. When you delete your account, we delete your account and the data on our servers straight away. You can also stop using your Apple ID with Workout Director in iOS Settings, your name, Sign-In & Security, Sign in with Apple. Copies in our encrypted database backups expire within 35 days. Server access logs are kept for up to 12 months and crash reports for up to 90 days. Data on your iPhone stays there until you delete the app. AI providers keep requests for up to 30 days, as above.

Your choices

Delete your account in the app: Profile, Delete Account. This removes the cloud copy. You can also email us.
Withdraw consent for the trainer or the voice coach at any time with their switches in Profile. Nothing more is sent once a switch is off.
Apple Health: turn it off in Profile, or revoke access in iOS Settings.
Sign out in Profile. Your workouts stay on your iPhone.
Under UK and EU data protection law you can ask for a copy of your data, a correction, deletion or a restriction, object to processing, or ask to move your data. Email shelgaonltd@gmail.com. We reply within one month.
You can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to help first.

Children

Workout Director is not meant for children under 14, and we do not knowingly collect data from them.

Changes

If this policy changes in a way that affects what is sent to an AI provider or how Health data is used, the app asks you again before anything new is sent.

Contact

Shelgaon Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. Company number 17079383. Support: https://workoutdirector.com/support. Email: shelgaonltd@gmail.com. Terms: https://workoutdirector.com/terms.