The controller of your personal data is Javier Rubio Roca, an individual, the developer and operator of Costia Training. Contact for privacy matters: javi.rubio.roca@gmail.com

This is the most important part, and what sets this app apart from almost any other. If you have not signed in, everything you log — routines, sessions, sets, records and preferences — is stored only in the local database on your device. It is not sent to any server, ours or anybody else’s. There is no backup, and if you uninstall the app or clear its data, it is gone. There is no mandatory registration and no screen forcing you to create an account before you can use the app.

Signing in exists to back your training up and let you carry on with it on another device. From that point we process: • Identity data: your email address and an account identifier. If you sign in with Google or Apple, we receive the identifier they issue and your email; never your password. • Training data: your routines, your sessions, every set with its weight, reps and reps in reserve, your personal records, any discomfort you logged and any exercises you created yourself. • Your athlete profile, if you fill it in: level, experience, goal, days and minutes you can train, equipment and, only if you choose to give them, sex, body weight and your best lifts. It is used to recommend a routine. • Account preferences: language, weight unit and the first day of the week. • Your Costia Premium status and, if you are in one, your family plan. • Server technical logs: the time of requests and errors, to keep the service running. Training data is data about physical activity. It is not health data in the clinical sense: we process no diagnoses, no medication, no vital signs, no measurements and nothing from any health device or fitness tracker.

This is not a statement of intent: it is what the app does, and it can be checked against the permissions it asks for. • No advertising and no advertising identifiers. The app contains no ad network. • No analytics and no product telemetry. We do not measure which screens you open or how long you spend on them. • No precise location. Only when you look for gyms near you, the app asks for your approximate location; it is rounded, used for that search and never stored or linked to your account. Everything else works if you say no. • No camera, no photos, no contacts, no microphone and no calendar. • No HealthKit, no Health Connect and no watch or fitness band. • No tracking cookies and no profiling. One technical exception: if the app crashes, a crash report is sent to Sentry, our crash-reporting provider, in the European Union, with the technical details needed to fix it. It carries your account identifier if you are signed in, and is scrubbed of your email, names, notes, weights and anything you typed.

• To provide the service: store your training, sync it between your devices and give it back exactly as you logged it. • To identify you and keep your session open securely. • To manage your Costia Premium subscription and, if you are in one, your family plan. • To keep the service available and diagnose faults. • To answer you when you write to support. We do not use your data for advertising or for profiling, and we do not use it to train artificial-intelligence models. The suggestions the app makes on its own — drop the weight, a muscle under its band, a gentler lift when something hurts — are arithmetic rules computed on your phone from what you logged; no model is involved and nothing leaves the device to produce them. The AI features are different, and they only run when you use them. The in-session assistant and routine design by conversation need a Costia account with Premium, and each time you use them we send the AI model provider what that answer needs: for the assistant, the workout in progress — its lifts and their targets, the sets you logged with their weights, last time's load, any open discomfort, your level, goal and equipment, and the time left — together with what you typed or chose; for routine design, what you typed and your answers to the questionnaire — level, goal, days, minutes, equipment, split and muscles to prioritise. If you tell the coach your body weight or your best lifts in the conversation, that message is sent like any other. Your email, your name and your account identifier are not sent. We record how much each call used and what it cost, never its text. If somebody reports a note or a name you wrote at a public gym, its text is checked by an AI model to decide whether to remove it; who wrote it is not sent. If it is removed, you are told by email and can appeal. With no account, or without using those features, nothing is sent.

• Performance of a contract (art. 6.1.b): processing your account and your training data is what is needed to provide the service you asked for by signing in. • Legitimate interest (art. 6.1.f): the security of the service and the minimum technical logs needed to keep it running. While you use the app with no account there is no processing on our side, because we receive nothing.

We do not sell your data or share it for advertising, and there is no ad network or analytics provider in the app. These parties process it on our behalf, each only for its own task: • Hosting: the servers and the database are operated by the controller at a hosting provider, inside the European Economic Area. • AI: when you use the AI features, the model provider Costia has chosen receives what section 5 describes, through Vercel's AI Gateway, and processes it to produce the answer under its own terms. • Subscriptions: RevenueCat manages Costia Premium on our behalf. It receives your account identifier and the state of your purchases — never your training and never your email. The payment itself is made and billed by the store you buy through; we never see your payment details. • Crash reports: Sentry, in the European Union, as section 4 describes. • Sign-in: if you sign in with Google or Apple, that authentication is performed by them under their own terms; we receive the result, not your credentials. The family plan is the one case where other people see something about you: members of the same family see each other's nickname, name and profile picture, so that everyone knows who is sharing the subscription. Nobody in a family sees anybody's training.

Costia Training shares its account with the other Costia applications. The same account works for all of them, which is why the identity data — your email and your identifier — is common to them, and so are your Costia Premium subscription and the family plan you belong to. Training data, on the other hand, belongs to this app alone: it lives in its own database and is not shared with the other applications in the family.

Your training data is kept for as long as you have the account, because its whole value is being a long history. When you ask for it to be deleted, it is deleted. Server technical logs are kept for a short period, the time needed to diagnose incidents.

You may exercise your rights of access, rectification, erasure, restriction, objection and portability at any time by writing to javi.rubio.roca@gmail.com. Deletion has its own page inside the app and on the web, and you can use it without signing in. If you believe your request has not been handled properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).

Costia accounts are not for children under 13. The app itself contains nothing unsuitable for any age, but it is not directed at children under that age and we do not knowingly collect their data. If we find an account belonging to someone under 13, we delete it.

The app stores on your own device the database holding your training, your appearance and language preferences and, if you have signed in, your session credentials in the system’s secure store — the Keychain or the device’s encrypted storage. No tracking cookies are used. The web version of this app uses browser local storage for the same technical purpose and for nothing else.

All traffic between the app and the server is encrypted over HTTPS. Sessions are held in the operating system’s secure store and expire on their own. Reaching an account’s data requires a credential issued specifically for this application: a session from another Costia app is not accepted here.

If this policy changes in any meaningful way — for example if advertising or analytics are ever added — it will be updated here and the date at the top will change before the change reaches the app.