Privacy policy

This policy explains how BallerBiz Oy handles information when you use RepChief and this website.

Who is responsible

BallerBiz Oy, Limingantie 37A 1, 00560 Helsinki, Finland, is the controller of your RepChief information. Contact info@ballerbizoy.com for privacy questions or requests.

Information we process

• Account and profile: your sign-in identifier, email, name, and the profile details you provide, such as age, gender, goals, height, weight and training preferences. Apple or Google may provide the account details you authorize when you sign in.
• Training and daily records: your schedule, workouts, exercises, sets, repetitions, weights, completion confirmations, journal, recovery and nutrition entries.
• Photos and conversations: photos you choose to upload, messages to Chief and the answers or plans generated for you. Camera and photo access are optional.
• Apple Health: if you connect it, the measurements you authorize, including available sleep, heart and body measurements. These support your Vitals view; newer weight readings can update your RepChief profile weight. You control access in Apple Health and can disconnect it in RepChief.
• Social features: if you choose a username to use the Feed, your username, name, photo and bio, the workouts you share, your follows, likes and comments, and your best lifts and weekly sets on the leaderboards are shown to other RepChief users. You choose who sees each workout (Everyone, Followers or Only Me), and a private profile shows its workouts to accepted followers only. Your age, height, weight and sex only place you in leaderboard filters and are never shown.
• Contacts: if you use Find Friends and allow contact access, RepChief reads the email addresses in your contacts on your phone and sends only a one-way scrambled form of each (a SHA-256 hash) to find which of your contacts use RepChief; these are not stored. Your own sign-in email is held in the same scrambled form so friends who have it can find you. Contact access is optional, and invitations you send open Messages or Mail on your phone.
• Purchases: account identifiers, product and transaction identifiers, subscription status, entitlement records, store country and currency information from Apple, Google Play and RevenueCat. RepChief does not receive your full payment card details.
• Technical and support records: device and app version, diagnostic or crash information, request logs, IP addresses and approximate country information used by our infrastructure, notification tokens when enabled, and correspondence you send to support.

Why we use it

We use account and app records to provide the service you request, keep your devices in sync, create your schedule and display your history. Subscription information controls purchased access and helps us understand subscriptions, renewals and billing failures. Technical records help us operate securely, diagnose failures and respond to support requests.

Where the GDPR applies, the bases are performance of our agreement for core account and service operations, including Chief's coaching and photo analysis; your explicit consent for Apple Health processing, which you give by connecting Apple Health and can withdraw by disconnecting it; legitimate interests for proportionate security and troubleshooting; and legal obligations for required records. Health information may reveal sensitive data.

How Chief uses AI

Chief's coaching, plan building and photo analysis are part of the RepChief service. When you use them, RepChief sends the relevant messages, selected images and profile, workout, nutrition and journal information to OpenRouter, which acts as our processor and routes each request to the AI model provider we have selected. Relevant context may include Apple Health measurements you have synced. AI providers receive the context needed for the requested feature, rather than access to your entire account database. If you do not want information processed this way, do not use those features, or delete your account.

Our AI requests use provider routes configured to prohibit training on those requests and require zero data retention at the model endpoint. RepChief itself stores your conversations and results so you can view them later; infrastructure and billing services may retain necessary operational metadata.

To have saved conversations removed, use account deletion or contact us. AI results can be inaccurate; they support your choices and do not make legal or similarly significant decisions about you.

Services that process information

• Google Firebase and Google Cloud: authentication, account and app data, uploaded files, hosting, backend processing and crash diagnostics.
• Apple and Google Play: sign-in where selected, store purchases and subscription management.
• RevenueCat: purchase validation and subscription access.
• OpenRouter and the AI model providers it routes to: the AI processing described above.
• Service and legal recipients: support providers, professional advisers or authorities when necessary to respond to a request, protect rights or meet legal obligations.

We do not sell personal information, use health data for advertising, or use your information for cross-app advertising tracking. Product advertising attribution and session replay are not enabled in this launch configuration. This support website uses no advertising cookies, tracking pixels or analytics scripts.

Storage, transfers and security

Our main RepChief database and uploaded-file storage are configured in Europe. Backend processing and service providers may also process information in the United States and other countries. Applicable provider agreements and legally required transfer safeguards govern those transfers; contact us for information about the safeguards relevant to your data.

We use encrypted network transport, authenticated access, account access rules and restricted service credentials. No system can guarantee absolute security.

How long we keep information

We generally retain account records, uploaded photos, conversations and history while your account is active, so the features you use continue to work. You can remove supported entries in the app or request deletion. Support and diagnostic records are kept only as long as necessary to resolve issues, protect the service or meet legal requirements.

Account deletion removes identifiable app data from our active services and initiates applicable provider deletion work. Limited pseudonymized billing evidence and legally required records may remain for accounting, fraud prevention or disputes. Residual provider backups and crash records expire under the providers' retention cycles; they are not used to recreate an active coaching account.

Choices and rights

You can edit your profile, choose which photos to upload, control notifications and Health permissions, and delete your account. Store subscriptions must be cancelled separately.

Depending on applicable law, you can request access, correction, deletion, restriction, objection or a portable copy of personal data, and withdraw consent without affecting processing already lawfully completed. Email info@ballerbizoy.com; we may verify your identity. You can also complain to your local supervisory authority, including the Finnish Data Protection Ombudsman.

Children

RepChief is designed and marketed for adult gym users. It is not directed to children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and remove it where required.

Changes

We will update the effective date when this policy changes. For material changes we will provide additional notice or request fresh consent when required.