Clapiletics

Privacy Policy

Last updated October 15, 2026

Clapiletics is a training companion for iPhone and Apple Watch. It is built so that your health and motion data stay on your devices unless you choose to share health summaries with your AI coach. This policy explains what the app, its server at app.clapiletics.com, our website clapiletics.com and the usage statistics and problem reports the app sends to Clapilot GbR's own service at app.clapilot.com process, and why.

Data that stays on your device

• Apple Health data. If you allow it, the app reads sleep, heart rate variability, resting heart rate, respiratory rate, active energy, exercise minutes, workouts and, during Apple Watch sets, runs and rides, live heart rate. This data is used on your device to show trends and live values. It leaves your device only if you turn on Apple Health summaries for the AI coach (see below).
• Runs and rides saved to Apple Health. While Save to Apple Health is on (Account › Cardio, on by default) and you allow it, each run and ride you save is written to Apple Health as a workout: running or cycling, indoors or outdoors, its start and end, distance, active energy, pauses, climb and, outdoors, its GPS route. Sessions you discard are never written, and sets are not saved to Apple Health. What the app writes stays in Apple Health; the route and calories are not uploaded to our server. Turn the setting off to stop writing new sessions, or remove them in the Health app.
• Motion recordings. If you choose to record motion during a set, acceleration and rotation samples are stored on your device together with your confirmed repetitions. You can export or delete them in the app. They are never uploaded.
• Dictation. If you speak a message to your AI coach instead of typing it, your speech is turned into text on your device by Apple's speech recognition. The recording never leaves your device; only the text you choose to send does.
• Meal photos. Photos you take or choose for the food log are shrunk on your device. A small thumbnail stays on your device to show next to the entry and is deleted when you sign out.
• Heart rate sensors. If you connect a Bluetooth heart rate sensor or a WHOOP under Account › External sensors, the app uses its heart rate on your device during sets, runs and rides, and shows it on your Apple TV while you train with it. The heart rate is not uploaded.
• Training history. Sets you log are stored on your device. Without an account, your sets never leave your device. When you are signed in, new sets sync to your account by default; you can turn this off for any set.

Data we store if you create an account

• Your email address and your password, stored only as a salted scrypt hash.
• When the account was created and when you last signed in, and session tokens that keep you signed in.
• The plans you follow, and the personal workout plans you build or your coach saves for you (training days, exercises, sets, reps and rest). Our administrators can see these plans and may set one up or adjust it for you.
• Sets you sync: exercise, repetitions, weight, duration and completion time. Runs and rides you sync: the kind of session, its start, moving and elapsed time, distance, climb and, for indoor cycling, the bike's output. Their heart rate, calories and route stay on your devices.
• If you use the AI coach: your messages and the coach's replies, the coach you chose, and short memory notes the coach writes about you (for example goals, schedule, equipment or injuries you mention). Our administrators can read your conversations with the coach and these memory notes.
• If you send your coach photos or videos: a downscaled copy of each photo without location or other metadata, each video without sound, a few still images from each video, and a short description of them written by an AI model. The images and videos your coach makes for you are stored too. Only you can open them; our administrators see only how many there are.
• Your profile, if you fill it in under Account › Profile or tell your coach: the name you want to be called, a picture, birth date or age, sex, height, weight and when it last changed, your training goal, experience, training days a week and the equipment you have, diet (such as vegetarian or vegan), and allergies and foods you avoid, and when you finished the app's introduction. Every field is optional. Your picture is shrunk to a small square on your device, without location or other metadata. Our administrators can see your whole profile, as they can your memory notes; team members who only edit the app's content see just your name and picture.
• If your profile has a name: recordings of the workout cues that say it (for example "Only ten seconds left, Alex!"), made in your coach's voice. To make them, the server sends the cue text with your name to the speech service we use. Only you can play them, and they are deleted when you change or remove your name.
• If you use the food log: the foods you log (name, portion, meal, time, calories, protein, carbs and fat, and for photo estimates the listed food items), your daily nutrition goals, and the meal plan your coach saves for you. Meal photos are not stored.
• If you turn on Apple Health summaries: one summary per day for the last 30 days with sleep hours, heart rate variability, resting heart rate, respiratory rate, active energy, exercise minutes, and the number and length of workouts. No raw samples are uploaded.

We use this data only to provide your account: syncing plans and progress between your devices, and letting your AI coach give advice. Coach profiles and exercise videos are created by us and do not contain your data.

Oura Ring (optional)

With your explicit consent under Recovery › Oura Ring, we connect to Oura and import sleep duration, phases and score, readiness, nightly HRV, lowest sleeping pulse, temperature deviation, steps and active calories. The first sync imports 14 days; subsequent syncs run hourly. We retain up to 30 days of daily values on our server, separately from Apple Health. Oura credentials are encrypted at rest. If you separately enable sharing, your AI coach, its AI model service and our administrators can access these values to help discuss training and recovery. Training is never changed automatically based on a score.

You can withdraw coach sharing separately at any time. Disconnect and delete under Recovery › Oura Ring stops imports and deletes the connection credentials, consent record and imported daily values. You can also revoke access in your Oura account. Values already discussed in coach conversations or memory remain until you clear those under Coach › Data & memory. Deleting your account also deletes its Oura connection and daily values.

AI coach

The coach is an AI chat assistant, not a person and not a medical professional. To write a reply and keep its memory notes current, the server sends your message, recent conversation, memory notes, your profile (never your picture), synced sets, your personal workout plans, your food log, nutrition goals and meal plan and, if you share them, Apple Health summaries to the AI model service we use to generate text. Photos you send, and still images from videos you send, go to the AI model service that describes them for the coach; the coach receives the description, not the image. The coach can send you exercise demonstration videos and images and short videos it generates from a text description, which may show your coach but never you. When you mention a profile detail in the chat, such as your weight or that you eat vegan, the coach saves it to your profile; while your age, height, weight or diet are missing, the latest messages are also checked for them after each reply. The coach can save a personal workout plan to your Plans tab, and a meal plan and, when you ask or agree, nutrition goals to your food log. Meal plans are not reviewed by a dietitian. When you ask the coach to pass on feedback about the app, such as a bug or a feature you want, it sends a short report it writes with you, the coach's name and the app's build number to our issue tracker (the Clapilot Issue Reporter), and your email address only if you agree to be contacted; the team reviews each report before acting on it. Replies are generated automatically and may be wrong; do not rely on them for medical decisions.

You stay in control in the app under Coach › Data & memory: you can read and delete the coach's memory notes, start a new conversation to delete your messages with a coach along with the photos and videos in it, and turn off Apple Health summaries, which deletes them from our server. Photos and videos you attach but never send are deleted after a day. Members are limited to a fixed number of coach messages, photos and videos, and generated images and videos per day. You can change or clear your profile under Account › Profile at any time.

Meal photo estimates

When you add a meal by photo, the app sends a downscaled copy of the photo, without location or other metadata, and any note you add to the AI model service we use, which estimates the foods, portions, calories and macros. The photo is used only for that estimate and is not stored on our server. Nothing is added to your food log until you review the estimate and save it. Estimates can be wrong. Members are limited to a fixed number of photo estimates per day.

Subscriptions

Clapiletics Plus and Pro are subscriptions you buy in the app through Apple. Apple handles the payment; we never see your payment details or your Apple Account. When you subscribe, start a free trial, restore purchases or redeem a code, the app sends us the transaction Apple signed, and Apple's servers tell ours when it renews, ends or is refunded. We store the transaction's IDs, the product, its dates (purchase, expiry, trial), whether it renews, and Apple's environment, linked to your account, to know which plan you have. To count your plan's daily allowances, our server records each AI request you make, its feature and its estimated cost. Subscription records are kept for our accounts when you delete your account, without the link to it. Manage or cancel the subscription in your Apple Account's settings; deleting your account doesn't cancel it.

Usage data (App Insights)

Unless you turn off Share usage data under Account › Your data, the app on iPhone, iPad, Mac and Apple Vision Pro sends App Insights, Clapilot GbR's own usage statistics service, when you open the app, which screens you open, which features you use (for example that you started a plan, saved a set or a run, or sent your coach a message, never what it said), which of a few settings you change, when you finish the introduction, when the subscription offer is shown and which subscription you start buying, buy or restore, and the codes of errors. Each event carries a random ID for this installation (we store only a keyed hash of it), a session ID, the app version and build, the system version, device model, platform, language and region setting, and whether it is an App Store, TestFlight or development build. It never includes your account, email, name, content, messages, locations, measurements or health data, and it is not used for advertising or tracking across apps. We use it to see which features are used and where the app needs improving. The app sends it first to our inbox at ingest.clapilot.com, run for us by Cloudflare as our processor with its database in the EU and without storing IP addresses; our own server in Germany (app.clapilot.com) imports it from there every hour, after which the inbox deletes it (anything not imported within 14 days is deleted). Raw events are deleted after 90 days; daily totals are kept, as is a summary for each hashed installation ID: when it was first and last active, and the latest app version, system version, device model and language and region setting it reported. Turning the setting off stops sending and deletes events not sent yet. The Apple TV and Apple Watch apps send no usage data.

Usage analytics (optional)

If you turn on Share usage analytics under Account › Your data, the app records which screens you open and what you do with its features, such as starting a workout, logging a set, messaging your coach or saving a run, without their content. Each event carries a random ID for this installation, your account's random ID when you are signed in (never your email), a session ID, the app version, your device model, iOS version, language and time zone. Our server adds the country it is reached from. Events go only to our own server at app.clapiletics.com, never to third parties, and are not used for advertising or tracking across apps. We use them to see which features are used and where the app needs improving. Events are deleted after about 13 months, and with your account. Turn the setting off to stop recording.

Problem reports

Account › Report a problem and the feedback button send your text, whether it was typed or dictated and how long it is, a screenshot if you attach one (the feedback button attaches the screen you were on unless you turn that off; a picture you pick is re-encoded without its location and other metadata), the app, system and device versions and your language and region setting, with the feedback button also the name of the screen you were on, and, while you share usage data, the installation ID, to Clapilot GbR's issue intake: first to our inbox at ingest.clapilot.com (Cloudflare, database in the EU), from which our server in Germany (app.clapilot.com) imports them every 10 minutes. When you are signed in, every report also includes your account's email address and its ID, so that we can reply to you; without an account, Report a problem includes an email address only if you enter one. An administrator reviews each report, and we use your email address only to answer it.

Beta list

If you join the beta list on clapiletics.com, we store your email address, your browser's language and when you signed up, so that we can invite you to test new versions. Our administrators see the list. We send you nothing when you sign up. When we invite you, we send you one email, through our email provider, with a link to join the beta in Apple's TestFlight app; Apple processes your use of TestFlight under its own privacy policy. To be taken off the list, email us and we remove your address. Before the app was in the App Store, this was a waiting list whose invitations created an account and came with a link to choose its password.

Connections and security

The app connects to app.clapiletics.com (formerly workout.clapilot.com) over HTTPS. The server is reached through Cloudflare, which processes connection data such as your IP address to deliver and protect the service. Our server uses your IP address briefly in memory to limit repeated sign-in attempts. Usage data and problem reports go to ingest.clapilot.com, Clapilot GbR's inbox run by Cloudflare as our processor (see above). Data between your Apple Watch and iPhone is exchanged through Apple's device connection.

What we do not do

No advertising, no tracking, no third-party analytics (App Insights is our own), and no selling of your data. We do not use your data to train AI models. Your data reaches an AI service only to answer your own coach messages, including the photos and videos you send, to estimate your own meal photos, and to record the workout cues that say your name.

Retention and deletion

Account data is kept while your account exists. Apple Health summaries older than 400 days are deleted automatically. To delete your account and all data synced to it, including your sets, runs, plans, coach conversations with their photos and videos, memory notes, your profile and picture, your community profile, health summaries and your food log, choose Account › Delete account in the app and confirm with your password. It is deleted from our server right away. You can also email us from the address you signed up with, and we delete it promptly. Data on your device is removed when you delete it in the app or remove the app.

Children

Clapiletics is not directed at children under 16.

Changes and contact

We will update this page when our practices change. Questions or requests: [email protected].