Privacy Policy

Last updated: October 13, 2026

1. Data Controller

The data controller for the Vire application and website purchases is:

Northframe Oy (Y-tunnus 3616157-8)
Country: Finland
Contact: support@virefit.app

2. Data We Collect

We collect and process the following categories of personal data:

Account data

• Authentication identifier from Apple Sign-In or Google Sign-In
• Email address (if provided by your sign-in provider)
• Display name (if provided by your sign-in provider)

Training profile

• Experience level (beginner, intermediate, advanced)
• Training goals and preferences
• Available equipment and training environment
• Physical restrictions or injury areas (if provided)
• Training frequency preferences

Workout data

• Generated workout sessions
• Exercise logs (sets, reps, weight)
• Workout completion and history
• Estimated strength levels (derived from logged data)

Subscription data

• Subscription status (trial, active, expired)
• Subscription type (monthly or yearly)
• Trial start date

Website purchase data

• Buyer email address, purchased access period and amount, purchase and payment references, and transaction status
• Code fulfillment and delivery records, including timestamps, and operational records needed to verify payments and deliver access codes

3. How We Collect Data

• Directly from you — when you create a profile, set preferences, log workouts, or enter your email address during website checkout
• From sign-in providers — Apple or Google provide your authentication identifier and optionally your email/name during sign-in
• From subscription events — App-store subscription and billing services send us webhook notifications about subscription status changes (purchase, renewal, cancellation, expiration)
• From supported payment service providers — payment responses provide purchase references and transaction status

4. Purpose and Legal Basis

We process your data for the following purposes:

• Providing the service (legal basis: contract performance) — generating workouts, tracking progress, managing your account and subscription, fulfilling prepaid purchases and delivering access codes
• Improving the service (legal basis: legitimate interest) — understanding usage patterns to improve workout generation quality

5. Data We Do NOT Collect

Vire does not:

• Use analytics SDKs or third-party tracking
• Use crash reporting services
• Display or serve advertisements
• Use ad tracking identifiers (IDFA/GAID)
• Collect location data
• Access HealthKit, Google Fit, or device health data
• Use cookies (the App does not have a web interface for users)

6. Service Providers and Recipients

We use the following categories of services to operate Vire:

• Account authentication providers — identity services that authenticate sign-in and provide your authentication identifier and, where available, email address and name
• App-store subscription and billing services — app marketplaces and subscription management services that process store purchases and subscription status events
• Supported payment service providers — payment and employer-benefit services that process prepaid purchases and exchange purchase references and transaction status
• Transactional email delivery services — email services that process the buyer email address, access-code message and delivery status to deliver purchased access
• Hosting and infrastructure services — cloud services that host the API, store account and purchase data, and process operational records

These services handle data in accordance with their own privacy policies and applicable data protection regulations.

7. Data Retention

• Active accounts — your app-account data is retained for as long as your account is active
• Account deletion — when you delete your account, app-account data (profile, workout history, preferences, workout logs) is permanently deleted from our systems immediately
• Payment records — transaction records held by app-store subscription and billing services or supported payment service providers are subject to their respective retention policies

Website purchase records are stored separately from app-account data and are not automatically deleted when you delete your app account.

8. International Data Transfers

Your data may be processed in the European Union and the United States, depending on the services involved. Transfers to processors outside the EU/EEA are covered by appropriate safeguards, including Standard Contractual Clauses where applicable.

9. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (available via in-app account deletion)
• Data portability — request your data in a structured, machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@virefit.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto).

10. Account Deletion

You can delete your app account and its associated data at any time from the Settings screen in the App. Deletion is immediate and irreversible. See our Account Deletion page for full details.

11. Children

Vire is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify users through the App. The "Last updated" date at the top of this page indicates when it was last revised.

13. Contact

For any privacy-related questions or requests, contact us at support@virefit.app.