Privacy Policy
This Privacy Policy explains how Zurabi Devidze (“we”, “us”, or “our”) collects, uses, and protects your information when you use the Ivarjishe mobile application (the “App”). By using the App, you agree to the practices described below.
Contents
1. Who we are
The App is operated by Zurabi Devidze, an individual developer based in Georgia. We are the data controller responsible for the personal data you provide when using the App. You can reach us at envato.duke@gmail.com.
2. Information we collect
We only collect information that is necessary to run the App and provide its features.
Account information
- Email and password, if you sign up with email/password.
- Apple user identifier, if you sign in with Apple. We do not receive your real email address unless you choose to share it; Apple may provide a relay address.
- Display name, which you choose during setup.
- Account role (client or trainer) and a short connection code generated for trainer–client linking.
- Internal flags such as whether your account has been comped a premium feature by your trainer.
Fitness data
- Workouts you create or that a connected trainer assigns to you (name, description, ordering, rest intervals).
- Exercises within those workouts (name, target sets, reps, weight, rest timer, muscle group, optional notes).
- Set logs you record during a session (weight lifted, reps completed, optional note, timestamp).
- Body weight entries, if you choose to log them.
- Height, if you enter it during onboarding.
Trainer–client connections
- Records of which trainer and client accounts are connected, established when one party enters the other's short connection code.
Messages
- Text messages you exchange with your connected trainer or client through the in-app chat.
Device-level permissions
- Whether you've granted the App permission to send local notifications. We do not collect your device identifier, advertising identifier, contacts, photos, location, or biometric data.
What we do NOT collect
- We do not run any third-party advertising or marketing analytics SDKs in the App.
- We do not collect your precise location.
- We do not access your contacts, photos, calendar, or microphone.
- We do not sell or rent your personal data to anyone, ever.
3. How we use information
We use the information we collect to:
- Create and maintain your account and let you sign in across devices.
- Store your workouts, set logs, and body measurements so you can access them whenever you use the App.
- Allow you to share your training data with a connected trainer (or, if you are a trainer, view the workouts and progress of your connected clients).
- Deliver in-app chat messages between you and your connected counterpart.
- Send you local notifications (if you've granted permission).
- Respond to your support requests.
- Diagnose bugs and improve the App.
- Comply with our legal obligations.
4. Legal basis for processing (EEA / UK)
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal data are:
- Performance of a contract — to provide the App's core functionality (account, sync, chat, trainer–client connection).
- Your consent — for optional features like notifications, which you can withdraw at any time in your device settings.
- Our legitimate interests — to keep the App secure, diagnose problems, and improve the user experience.
- Legal obligations — when we are required by law to retain or disclose information.
5. Sharing and service providers
We do not sell your personal data. We share information only with the following service providers, strictly to operate the App:
- Google (Firebase) — provides our authentication, database (Firestore), and file storage. Your account, workouts, set logs, body measurements, and chat messages are stored on Google Cloud infrastructure. See Firebase's privacy and security information and Google's privacy policy.
- Apple — if you use Sign in with Apple, Apple authenticates you and may provide us with a user identifier and optional email relay. See Apple's privacy policy.
We may also disclose information if required to do so by law, to enforce our Terms & Conditions, or to protect the rights, property, or safety of our users or others.
6. Trainer–client data access
When you connect your account with a trainer (or, as a trainer, with a client), you grant the connected party access to certain data:
- A trainer connected to your account can view your workouts (both their assigned programs and your own client-created workouts), your logged sets, your most recent body weight entry, your display name, and chat messages exchanged with them.
- A client connected to a trainer can view programs that trainer assigns, the trainer's display name, and chat messages exchanged with them.
You can disconnect from a trainer or client at any time from within the App. Disconnection revokes future access, but messages already exchanged and data already viewed cannot be recalled.
7. Storage and security
Your data is stored on Google Cloud servers managed by Firebase. We use the following safeguards:
- All communication between the App and our servers is encrypted in transit using HTTPS / TLS.
- Server-side security rules enforce that only you (and your explicitly connected trainer or client) can read or write your data.
- Account passwords are never stored by us in plain text; authentication is handled by Firebase using salted password hashing.
No method of transmission or storage is ever 100% secure. While we take reasonable measures to protect your information, we cannot guarantee its absolute security.
8. International transfers
Because the App relies on Google Cloud / Firebase, your data may be processed on servers located outside Georgia, including in the European Union, United States, and other countries where Google operates infrastructure. By using the App, you consent to such international transfers, which are protected by Google's standard contractual clauses and security commitments.
9. Retention and deletion
We retain your personal data for as long as your account is active.
You can delete your account at any time from the App's Profile screen, under the "Danger zone" section. Account deletion permanently removes:
- Your profile.
- All workouts, exercises, set logs, and body weight entries associated with your account.
- Your trainer–client connections.
- Your authentication credentials.
Messages you sent to other users may remain visible in those users' chat histories. Backups and logs may persist for a short additional period due to standard infrastructure retention before being purged.
10. Your rights
Depending on your jurisdiction (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request that inaccurate data be corrected. Most fields can be edited directly in the App.
- Deletion — request erasure of your data. The in-app account deletion fulfils this; you can also email us.
- Portability — request a machine-readable export of your data.
- Objection or restriction — object to, or ask us to restrict, certain processing.
- Withdraw consent — where we rely on consent (e.g. notifications), withdraw it at any time.
- Lodge a complaint — with your local data protection authority.
To exercise any of these rights, contact us at envato.duke@gmail.com. We will respond within a reasonable timeframe.
11. Children's privacy
The App is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Material changes will be highlighted in the App or via email where appropriate. Your continued use of the App after the policy is updated constitutes acceptance of the revised version.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
Zurabi Devidze
Email: envato.duke@gmail.com