Sloan — Privacy Policy
Last updated: 2026-05-09.
This Privacy Policy explains what data Sloan collects, how we use it, and your rights. Sloan is provided by Softleb (“we”, “us”). Our contact details are at the bottom of this page.
1. Data we collect
Information you provide during onboarding. Goal, fitness level, self-reported benchmarks (push-ups, pull-ups, squats), age, sex, height, weight, days per week, session length, time-of-day preference, limitations, and a display name if you choose to enter one.
Activity data. Workouts you start and complete, per-set actual reps, per-exercise difficulty ratings, free-form text or voice notes you choose to add, and AI-generated debriefs.
Coach memory. Durable preferences that the AI trainer (or you) has agreed to honour — for example “never schedule pistol squats” or “prefer evening sessions”. You can revoke these in Settings → Coach.
Device and technical data. A randomly-generated user identifier (no email or phone number is required), basic device type, operating system version, app version, and crash logs.
Subscription and purchase data (handled by Apple App Store / Google Play / RevenueCat — see “Third-party processors” below).
Voice notes. When you dictate a note during a session or chat, the audio is transcribed on-device by the operating system. We only store the transcribed text, not the audio file.
We do not collect: email address, phone number, contacts, location, photos, or device biometric data.
2. How we use your data
- To generate and adjust your training plan.
- To provide the AI trainer chat and post-session debriefs.
- To remember your durable preferences across sessions.
- To improve the App (aggregated, anonymised analytics where applicable).
- To process subscriptions through Apple / Google.
- To respond to support requests you send us.
We do not sell your data, and we do not show ads.
3. AI processing
When you finish a session, send a chat message, or generate a plan, your relevant inputs (profile, plan context, recent session signals, active directives) are sent to our AI provider via OpenRouter for inference. We instruct providers not to retain prompts for training, but they may retain limited operational logs per their own policies.
We send the minimum data needed for each call — never your name, device ID, or other identifying data beyond your random user UUID.
4. Third-party processors
| Processor | Purpose | Data shared |
|---|---|---|
| Supabase | Backend storage + edge fns | All app data tied to your random UUID |
| OpenRouter | AI model inference router | Profile attributes + session context per call |
| Apple App Store | iOS subscription handling | Apple ID (handled by Apple, not by us) |
| Google Play | Android subscription handling | Google account (handled by Google) |
| RevenueCat | Subscription state management | Random UUID + subscription events |
| Expo / EAS | App build + crash reporting | Crash stack traces |
Each processor is bound by its own privacy terms.
5. Data retention
We keep your data while your account is active. If you uninstall the App, your random UUID stays associated with your past data unless you ask us to delete it. To request deletion, email us at the address below.
6. Your rights
Depending on where you live, you may have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your data.
- Export your data in a portable format.
- Object to or restrict processing.
- Lodge a complaint with your local data-protection authority. In Germany this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).
To exercise any of these rights, email us — see Contact below.
7. Children
Sloan is not directed to children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with their data, contact us and we will delete it.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to our production environment is limited to authorised personnel. We follow industry-standard practices, but no system is perfectly secure.
9. International transfers
Our processors operate servers in the EU and the US. Where data is transferred outside the EU, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
10. Changes
We may update this policy from time to time. The “Last updated” date at the top reflects the current version. Material changes will be announced in the App.
11. Contact
Softleb Cannabichstr. 3 81543 München Germany [email protected] +49 171 2934205