Privacy Policy

Last updated: May 2026

1. Data Controller

The data controller for the Vire application is:

Northframe Oy (Y-tunnus 3616157-8)
Country: Finland
Contact: support@virefit.app

2. Data We Collect

We collect and process the following categories of personal data:

Account data

• Authentication identifier from Apple Sign-In or Google Sign-In
• Email address (if provided by your sign-in provider)
• Display name (if provided by your sign-in provider)

Training profile

• Experience level (beginner, intermediate, advanced)
• Training goals and preferences
• Available equipment and training environment
• Physical restrictions or injury areas (if provided)
• Training frequency preferences

Workout data

• Generated workout sessions
• Exercise logs (sets, reps, weight)
• Workout completion and history
• Estimated strength levels (derived from logged data)

Subscription data

• Subscription status (trial, active, expired)
• Subscription type (monthly or yearly)
• Trial start date

3. How We Collect Data

• Directly from you — when you create a profile, set preferences, or log workouts
• From sign-in providers — Apple or Google provide your authentication identifier and optionally your email/name during sign-in
• From subscription events — RevenueCat sends us webhook notifications about subscription status changes (purchase, renewal, cancellation, expiration)

4. Purpose and Legal Basis

We process your data for the following purposes:

• Providing the service (legal basis: contract performance) — generating workouts, tracking progress, managing your account and subscription
• Improving the service (legal basis: legitimate interest) — understanding usage patterns to improve workout generation quality

5. Data We Do NOT Collect

Vire does not:

• Use analytics SDKs or third-party tracking
• Use crash reporting services
• Display or serve advertisements
• Use ad tracking identifiers (IDFA/GAID)
• Collect location data
• Access HealthKit, Google Fit, or device health data
• Use cookies (the App does not have a web interface for users)

6. Third-Party Processors

We use the following third-party services to operate Vire:

• Apple (Cupertino, USA) — authentication via Sign in with Apple; payment processing for iOS subscriptions
• Google (Mountain View, USA) — authentication via Google Sign-In; payment processing for Android subscriptions
• RevenueCat Inc. (USA) — subscription lifecycle management and webhook event processing
• Render.com (USA) — API hosting and application infrastructure

Each processor handles data in accordance with their own privacy policies and applicable data protection regulations.

7. Data Retention

• Active accounts — your data is retained for as long as your account is active
• Account deletion — when you delete your account, all associated data (profile, workout history, preferences, logs) is permanently deleted from our systems immediately
• Payment records — transaction records held by Apple, Google, or RevenueCat are subject to their respective retention policies and cannot be deleted by us

8. International Data Transfers

Your data may be processed in the European Union and the United States, depending on the services involved. Transfers to processors outside the EU/EEA are covered by appropriate safeguards, including Standard Contractual Clauses where applicable.

9. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (available via in-app account deletion)
• Data portability — request your data in a structured, machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@virefit.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto).

10. Account Deletion

You can delete your account and all associated data at any time from the Settings screen in the App. Deletion is immediate and irreversible. See our Account Deletion page for full details.

11. Children

Vire is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify users through the App. The "Last updated" date at the top of this page indicates when it was last revised.

13. Contact

For any privacy-related questions or requests, contact us at support@virefit.app.