1. Who we are
Vigorix is a product of Saorlin — offline-first recovery and training software for gyms and strength athletes.
| Item | Detail |
|---|---|
| Legal name | Saorlin [FILL IN — full registered name once finalised] |
| Status | [FILL IN — legal structure and jurisdiction of registration] |
| Correspondence | [FILL IN — registered/correspondence address] |
| Company number | [FILL IN — once registered] |
| ICO registration | Available on request if registered with the ICO |
| Privacy contact | privacy@vigorix.app |
2. Scope
This policy covers everyone who uses the Vigorix app, whether or not you create an account. It does not cover the Saorlin website you may have arrived from — that has its own privacy notice.
3. What we collect
3.1 Account identifiers
If you create an account (email/password, or Sign in with Apple/Google), your email address and an account ID are stored by our backend provider, Supabase, to authenticate you and enable optional cloud sign-in. If you never create an account, none of this applies — the app works fully offline.
3.2 Training data
Your workout plans, logs, goals, and recovery history are stored locally on your device only. We do not transmit or store this data on our servers, with one exception:
3.3 AI Coach (optional, Premium feature)
If you use the hosted AI coach mode, a summary of your recent training state and your question are sent to our server, which forwards them to our AI provider, Anthropic, to generate a response. That request is not stored by us after the response is returned. See International transfers for what this means for where your data is processed. If you instead use the on-device/local coach mode, nothing leaves your device.
3.4 Subscription data
Purchases are processed by Apple/Google and our subscription provider, RevenueCat. We receive confirmation of your entitlement status (e.g. “premium: active”) but not your payment details — we never see your card number.
3.5 What we do not collect
Location, contacts, photos, HealthKit or similar health-app data, or advertising identifiers. We do not use third-party analytics or ad-tracking SDKs in this version.
4. Purposes and lawful bases
| Purpose | Examples | Lawful basis (UK GDPR) |
|---|---|---|
| Authenticate you | Sign-in, syncing your account across devices | Contract (Art. 6(1)(b)) — necessary to provide the account feature you asked for |
| Generate AI coaching responses | Hosted AI Coach requests, only when you use that feature | Consent (Art. 6(1)(a)) — you opt into hosted mode; local mode needs no transfer |
| Verify your subscription | Checking Premium entitlement via RevenueCat | Contract (Art. 6(1)(b)) |
| Send reminders you enabled | Workout/log notifications, processed on-device | Consent (Art. 6(1)(a)) — notification permission |
5. Sharing and processors
We share data only with the service providers below, each solely to provide that part of the service. We do not sell your data.
- Supabase — authentication and account storage.
- Anthropic — generates AI Coach responses, only when hosted mode is active.
- RevenueCat, Apple, Google — subscription processing and entitlement status.
6. International transfers
Using the hosted AI Coach means your question and training-state summary are processed by Anthropic in the United States — outside the UK/EEA. Hosting our own relay server in the UK does not change this: the moment a request is forwarded to Anthropic for a response, it leaves the UK regardless of where that relay runs. This transfer is made lawful by Anthropic's Data Processing Addendum and Standard Contractual Clauses (or the UK International Data Transfer Agreement/Addendum), not by server location.
If you use the on-device/local coach mode instead, no training data leaves your device and this section does not apply.
7. Retention
- AI Coach requests: not retained by us after the response is returned.
- Account data: retained until you delete your account.
- Subscription/entitlement records: retained for as long as required to administer your subscription and for statutory accounting periods.
8. Security
The Anthropic API key used by the hosted AI Coach is held as a server-side secret and is never included in the app itself. Hosted AI Coach requests require a signed-in session and are rate-limited per user.
9. Cookies and tracking
Vigorix is a mobile app, not a website — it does not use cookies. It does not use third-party analytics, advertising, or cross-app tracking SDKs in this version.
10. Your rights
Under UK GDPR, you may have the right to access, rectify, or erase your personal data, restrict or object to processing, request portability, and withdraw consent where processing is consent-based. In the app: Settings → Account → Export gives you a JSON copy of your locally stored data, and Settings → Account → Delete Account permanently deletes your account record. To exercise any other right, email privacy@vigorix.app — we may need to verify your identity.
11. Children
Vigorix is not directed at children under 13 (or the minimum age required by your country), and we do not knowingly collect data from them.
12. Changes
We'll update the “Updated” date above when this policy changes and, for material changes, notify you in-app.
13. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.
14. Contact
Saorlin
Privacy: privacy@vigorix.app
This notice is provided for transparency. It is not legal advice — have it reviewed for your jurisdiction before relying on it.