Privacy policy
Last updated: 24 September 2026
1. Controller
Luca Britten, Am Scharfenberg 42, 54451 Irsch, Germany
Email: info.awakenfitness@gmail.com
2. Summary
- Awaken contains no advertising, no tracking and no analytics services.
- Your data is stored on a server in Germany (Nuremberg) and is never sold.
- You can delete your account and all data yourself in the app at any time.
3. Data we process
| Area | Data |
|---|---|
| Account | Email address, password (stored only as an encrypted hash), nickname. If you sign in with Apple or Google: the identifier and email address provided by them (for Apple possibly a relay address). |
| Profile | Name, title, age, height, body weight, gender, training goal, training days per week, nutrition and step goals. |
| Training | Training plans, exercises, completed workouts with sets (weight, reps, optional RPE and notes, time), and the resulting level, EXP, ranks, attributes, quests and achievements. |
| Body weight | Your daily weight entries and the weekly average calculated from them. |
| Nutrition | Meals (food, amount, date), foods you create, water. |
| Steps | Daily step count, read from your iPhone's motion sensor (Apple Core Motion). |
| Reporting and blocking | If you report or block a user, I store who reported or blocked whom, the reason and the time. I review reported accounts and can remove them from the leaderboards in case of violations. The data is deleted together with the account. |
| Password reset | Your email address and a 6-digit code (stored only as a hash, valid for 15 minutes, at most 5 attempts) that I send you by email. |
| League (optional) | If you take part: nickname, league (rank) and your score on the leaderboards. By default you are not visible. |
| Technical data | Your IP address is processed briefly in memory to prevent abuse (e.g. password guessing, mass registration; for at most one hour). The web server does not write access logs. System logs with security events (e.g. failed server logins) contain IP addresses and are kept for a limited time automatically. |
4. Purposes and legal bases
- Providing the app (account, training, nutrition, leaderboards): Art. 6(1)(b) GDPR (contract / terms of use).
- Health-related data (e.g. body weight, training performance, steps): based on your explicit consent, Art. 9(2)(a) and Art. 6(1)(a) GDPR. You give it when registering and can withdraw it at any time with effect for the future by deleting your account or writing to me.
- Security and abuse prevention (limiting login attempts, protecting the server): Art. 6(1)(f) GDPR (legitimate interest).
5. Hosting and backups
Data is processed by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on a server in Nuremberg (Germany). A data processing agreement is in place with Hetzner. Database backups are created daily (kept for up to 14 days); another copy is kept on a password-protected computer of the operator and is overwritten after 30 days at the latest. The connection between app and server is encrypted with TLS.
6. Other recipients and services
- Apple (Apple Distribution International Ltd., Ireland / Apple Inc., USA): distribution of the app through the App Store and TestFlight and optional “Sign in with Apple”. Apple's privacy notices apply.
- Google (Google Ireland Ltd.): only if you use “Sign in with Google”. Google's privacy notices apply.
- Google Mail (Gmail) (Google Ireland Ltd.): to send emails, for example the code to reset your password, I use a Gmail account. Your email address and the content of the message are transmitted to Google.
- Open Food Facts (openfoodfacts.org): when you scan a food barcode, our server sends the barcode number to this open database to get the product name and nutrition values. Your IP address and identity are not transmitted.
There is no disclosure for advertising purposes and no sale of data.
7. Device permissions
- Camera: only to scan barcodes. No photos are stored or transmitted, only the detected barcode number.
- Motion & Fitness: to read your step count. You can revoke the permission at any time in the iOS settings.
8. Storage on your device
Your login token is kept in the secure storage (Keychain) of your device. So that training also works offline, ongoing workouts, your active training plan and settings are cached locally on the device and synchronised with the server later.
9. Retention and deletion
Your data is stored as long as your account exists. In the app you can permanently delete your account and all data under Hunter → Settings → Delete account. Backups are overwritten afterwards within the periods stated above. Login tokens that are not used expire after 180 days.
10. Leaderboards
Taking part in the leaderboards is voluntary and off by default. If you take part, other users can see your nickname, league and score. You can stop taking part at any time in the league view. Scores are based on your own entries and are not verified.
11. Security
Passwords are stored only as a hash (scrypt), login tokens only as a hash. Transmission is encrypted, server access is protected by key, login attempts are limited.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent (Art. 7(3)). Write to info.awakenfitness@gmail.com.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany.
13. Children
Awaken is intended for people aged 16 and over. Please do not create an account if you are younger.
14. Changes
I will update this policy when the app or the legal situation changes. You can always find the current version here and in the app.