Information we collect
- Account details: your name, email address and chosen username. Your password is never stored directly; only a secure cryptographic hash of it is kept.
- Health and fitness data, read through Android Health Connect with your permission: heart rate variability, resting heart rate, sleep, recovery, activity and steps, calories, nutrition and food entries, hydration, weight, body fat, height and related metrics.
- Data from your Google account, only if you connect it (see “Data from Google” below).
- Profile and biometrics you enter: age, gender, height, weight, body-fat estimate and activity level.
- Your location, only when you tap “Use current location” while looking for a gym. It is used once to find gyms near you and is not stored.
- Training logs you create, such as climbing sessions and finger-health notes.
- App preferences, in-app notifications and an optional profile photo.
Data from Google
You can connect Vireo to parts of your Google account. Each connection is optional, asks for your permission on Google’s own screen, and can be removed at any time.
- Fitbit data (Google Health API), read-only: activity and fitness, health metrics and measurements (such as heart rate, heart rate variability and weight), sleep, your Fitbit profile and settings. Vireo uses this data to show your dashboard and history and to calculate your readiness, sleep and training load. Vireo never writes anything to your Fitbit account.
- Google Calendar: Vireo lists your calendars so you can pick one, then adds and updates your planned training sessions in it. It only reads back the events it created itself.
- Google Drive: Vireo can back up your climbing videos to your Drive. It can only see and change files it created; it cannot read anything else in your Drive.
Data from Google is stored on your device and in your personal Vireo account so it can follow you across devices. It is not sold, not used for advertising, and not shared with anyone except as described under “Third-party services”.
Vireo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Vireo from your Google account at any time in the app’s settings or at myaccount.google.com/permissions.
How we use your information
Your data is used to calculate your Capacity, sleep score and load, to show your dashboard and history, to generate your training plan, and to keep your information in sync across your devices.
Where your data is stored
Data is stored on your device and in your personal account in our cloud database, linked to your account identifier so it can follow you across devices.
Third-party services
- Android Health Connect provides on-device access to your health data.
- Google’s Gemini API reads text and images you choose to send, so the app can understand them: food you describe in words, photos of meals and nutrition labels, and the optional free-text plan notes from training setup (off by default; you confirm the result before anything is applied).
- Supabase hosts the cloud database that stores your account data.
- OpenStreetMap services (Overpass and Nominatim) are used to find climbing gyms. When you tap “Use current location”, your coordinates are sent once to find gyms nearby; when you search by name, the words you type are sent. Nothing is stored by Vireo, and no account details or health data are sent.
- Open Food Facts is used to look up foods you scan by barcode and to search foods by name. The words you search for are sent to it, together with your country and the app’s language, so it can show products sold there. No account details, name or health data are sent.
- Google Firebase Crashlytics receives a crash report only if you turn on “Send crash reports” in Settings. It is off by default and you can turn it off at any time. A report holds the error trace, your phone model, Android version, app version and a random installation ID; Vireo adds no health data or account details to it.
We do not sell your personal data or use it for advertising.
Your choices
You can sign out at any time, revoke Health Connect permissions in your Android settings, disconnect your Google account as described above, and ask for your account data to be deleted by emailing us.
Children
Vireo is not intended for children under 13.
Changes
We may update this policy; material changes will be shown on this page.
Contact
Questions about this policy can be sent to privacy@vireotrain.app.