Privacy Policy

AYLTA Privacy Policy

Version 1.0 - Last updated 22 October 2026

This policy explains how AYLTA Limited collects, uses and protects personal data when you use the AYLTA app (including test versions distributed through TestFlight), our website ayltaapp.com, and our waitlist and email updates.

The short version

  • We collect what we need to run your account, build and adjust your training plan, and run the social features you choose to use.

  • We do not sell your personal data, we do not show ads in AYLTA, and we do not build advertising profiles about you.

  • AYLTA never asks about injuries, medical conditions, medication or disability.

  • Your date of birth, gender, height, weight, goals and training settings are visible only to you.

  • If you are 16 or 17, your account is private by default.

  • We only use analytics in the app, and analytics cookies on the website, if you agree to it. You can change your mind at any time.

  • Where we rely on our legitimate interests, you can object at any time.

  • You can delete your account at any time in the app, under Settings > Delete account.

1. Who we are

AYLTA is operated by AYLTA Limited, a company registered in Ireland (company number 799580), with its registered office at Unit 2, 2 Bridge Street, Athlone, Co. Westmeath, N37 F1W4, Ireland.

AYLTA Limited is the controller of the personal data described in this policy. This means we decide how and why it is used, and we are responsible for protecting it.

For any question or request about your personal data, email support@ayltaapp.com. We have not appointed a Data Protection Officer. Privacy requests are handled directly by the company's directors.

2. Who AYLTA is for

AYLTA is only for people aged 16 or over. You must confirm your date of birth when you create an account, and you cannot create an account if you are under 16. Our waitlist and email updates are also only for people aged 16 or over.

We do not knowingly collect personal data from anyone under 16. If we learn that an account belongs to someone under 16, we will close it and delete its data. If you think a child under 16 has given us personal data, please contact us at support@ayltaapp.com.

3. What we collect

3.1 Account details

  • Email address

  • Password. It is stored only in hashed form, so we cannot read it.

  • Username and display name

  • Profile photo and bio, if you add them

  • If you sign in with Google: your name, email address, profile picture and Google account identifier, which Google shares with us when you choose that option

3.2 Your training profile (visible only to you)

Date of birth, gender, height, weight, training experience, training goal, any sport you play and how often, the equipment you have access to, your preferred session length, the days you want to train, any areas you want to focus on and your country.

3.3 Your training activity

  • The workouts you log: exercises, sets, reps, weights, timings and rest

  • How many more reps you think you could have done on a set (reps in reserve), and how hard a session felt overall

  • Routines and folders you create

  • Exercises you swap, and exercises you ask us not to suggest again

  • Information we calculate from your logs, such as personal records, progress, session summaries and how far along you are towards features that need a certain amount of training history

3.4 Photos

Your profile photo and any photos you add to workouts. Photos can contain hidden information such as where they were taken. We remove location information from photos when you upload them.

3.5 Social activity

Who you follow, follow requests, likes and comments.

3.6 Settings and choices

Your privacy setting, notification preferences, unit preferences, and the choices you make about analytics and emails, including when you made them.

3.7 Messages and feedback

What you send us by email or through the app. If you test AYLTA through TestFlight, Apple shares with us your name and email address (so we can invite you), and the feedback and crash reports you choose to send.

3.8 Subscriptions

If you subscribe to AYLTA Pro: your subscription status, which plan you chose, renewal dates and transaction identifiers. Payments are handled by Apple (and in future Google). We never see or store your card details.

3.9 Device and technical data

Device model, operating system, app version, IP address, push notification token, sign-in records and error information. We use these to keep AYLTA secure and working.

3.10 App analytics (only if you agree)

If you allow analytics, we record how features are used. For example, that a workout was finished, which screen was opened, or whether an action succeeded. Analytics data is linked to your account's internal ID number, not to your name or email address. Because that ID belongs to your account, it is still personal data, and we treat it that way. Analytics never includes your name, email address, date of birth, gender, height, weight, the weights you lift, anything you type, your photos, or who you follow.

3.11 Website, waitlist and email updates

  • Your email address, if you join our waitlist or sign up for updates, and the date you signed up

  • If you accept analytics cookies on our website: information about your visit, such as pages viewed, device and browser type, and how you arrived. See our Cookie Policy at ayltaapp.com/cookies.

3.12 What we do not collect

  • AYLTA never asks about injuries, medical conditions, medication, pregnancy or disability, and there is no field for them in your training profile. Please do not include health information in your bio, posts or comments.

  • We do not collect your device's precise (GPS) location, your contacts or data from Apple Health.

4. Why we use your data, and our legal basis

Under the GDPR we need a legal basis for each use of your personal data.

  • Creating and running your account, and signing you in - Contract - we need it to provide AYLTA to you

  • Building your training plan and adjusting it from the training you log (see section 5) - Contract

  • Recording your workouts and showing your history, records and progress - Contract

  • Social features: showing your profile, sharing your workouts with your followers, the feed, likes and comments - Contract

  • Storing and showing your photos - Contract

  • Providing AYLTA Pro and managing subscriptions - Contract

  • Service emails, such as sign-in codes, password resets, security alerts and important changes to AYLTA or these policies - Contract

  • Push notifications, such as training reminders and friend activity - Consent - you choose whether to allow notifications, and can turn them off in the app or in your iPhone settings

  • App analytics, to understand which features work and fix what doesn't - Consent - withdraw it at any time in the app's settings

  • Website analytics cookies - Consent - given through the cookie banner

  • Waitlist and launch emails, newsletters, and promotional emails - Consent - unsubscribe at any time using the link in any email

  • Keeping AYLTA secure, preventing fraud, spam and misuse, moderating content and enforcing our Terms - Legitimate interests - running a safe, working service for everyone who uses it

  • Answering your messages and handling feedback from test versions - Legitimate interests - helping you and improving AYLTA

  • Keeping backups and records of the choices you make - Legitimate interests - protecting data and showing we comply with the law

  • Keeping financial and tax records - Legal obligation

  • Responding to lawful requests from authorities, and establishing or defending legal claims - Legal obligation or legitimate interests

Where we rely on legitimate interests, we have weighed our interests against yours. You have the right to object (see section 10).

You need to give us your email address, date of birth and training profile to use AYLTA. Without them we cannot create your account or build your plan. Everything else, such as a profile photo, bio or workout photos, is optional.

5. How your training plan is made

AYLTA builds your training plan automatically using software. It uses your training profile (section 3.2) and the training you log (section 3.3) to choose exercises, sets, reps, weights and how you progress, and it adjusts your plan after the sessions you log. Under the GDPR this counts as profiling.

  • No person at AYLTA reviews your plan individually.

  • The plan does not make decisions that have legal or similarly significant effects on you. It suggests training, and you decide what you actually do.

  • You can change your training profile at any time, swap exercises, edit your workouts or ignore a suggestion.

  • You can ask us to explain how your plan was put together, or object to this processing, by emailing support@ayltaapp.com. If you object, we may not be able to provide the plan features, but you can still log your own workouts.

We do not use your personal data to train artificial intelligence models, and we do not share it with AI companies. If we start using an outside AI service to help word plan descriptions, it will only receive the plan itself (exercise names, sets and reps), never information that identifies you. We will update this policy before that happens.

6. Who can see what in AYLTA

  • Username, display name, profile photo, bio, whether your account is private, whether you have AYLTA Pro, your preferred units, and your follower, following and workout counts - Anyone signed in to AYLTA

  • Your completed workouts, workout photos, and the likes and comments on them - Public account: anyone signed in to AYLTA who follows you. Following a public account does not need your approval. Private account: only followers you have approved

  • Comments you post on someone else's workout - Anyone who can see that workout

  • Date of birth, gender, height, weight, goals, country, email address, your plan and your settings - Only you

If you are 16 or 17, your account is private when it is created. If you are 18 or over, your account is public when it is created. You can change this at any time in Settings. Switching to private does not remove followers you already have.

AYLTA profiles and workouts are not published on the open web and cannot be found through search engines.

7. Who we share data with

We do not sell your personal data, and we do not share it with advertisers or data brokers.

We use the service providers below to run AYLTA. They process personal data on our behalf, under contracts that require them to protect it and use it only on our instructions.

  • Supabase - What they do for us: Database, sign-in, file and photo storage, server functions. Where the data is processed: European Union (Ireland)

  • Resend - What they do for us: Sending sign-in codes and service emails. Where the data is processed: United States

  • PostHog - What they do for us: App analytics, only if you agree. Where the data is processed: European Union

  • Expo (650 Industries) - What they do for us: Delivering app updates and push notifications. Where the data is processed: United States

  • Google (Google Workspace) - What they do for us: Our email and support inbox, storing waitlist sign-ups, and sending launch updates. Where the data is processed: European Union and United States

  • Squarespace - What they do for us: Hosting our website, sign-up forms, website analytics and, if we use it, sending email updates. Where the data is processed: European Union and United States

  • RevenueCat - What they do for us: Managing subscription status, once paid subscriptions launch. Where the data is processed: United States

Some companies act as independent controllers under their own privacy policies, not on our instructions:

  • Apple, for the App Store, TestFlight, payments and push notification delivery

  • Google, if you choose Sign in with Google

We may also share personal data:

  • with professional advisers such as lawyers and accountants, under a duty of confidentiality

  • with the authorities, if the law requires it, or to protect someone's safety

  • with a buyer or investor, if all or part of AYLTA Limited is sold, merged or reorganised. This policy will continue to apply to your data.

8. International transfers

Our main database is in the European Union. Some of our providers are in the United States or may access data from there. When personal data leaves the European Economic Area, we protect it in one of two ways:

  • the EU-US Data Privacy Framework, where the provider is certified under it

  • otherwise, the European Commission's Standard Contractual Clauses, with any extra safeguards needed

You can ask us for more information about these safeguards at support@ayltaapp.com.

9. How long we keep data

  • Account, training profile, training activity, photos and social activity - While your account is open

  • Something you delete yourself, such as a workout, photo or comment - Removed from the app straight away. Copies in backups are overwritten within 30 days

  • Everything linked to your account, once you delete your account, except the records below that we must or may keep - Deleted from our live systems when you confirm deletion. Backup copies are overwritten within 30 days

  • App analytics - Collection stops when you withdraw consent. Deleted when you delete your account or ask us to. Otherwise kept for no more than 2 years

  • Sign-in and security logs - Up to 90 days

  • Support emails and feedback - Up to 2 years after the matter is closed

  • Waitlist and email update sign-ups - Until you unsubscribe or ask us to delete it. Addresses that never become AYLTA users are deleted no later than 12 months after the app's public launch

  • Subscription transaction and tax records - 6 years, as required by Irish tax law

  • Information needed for a legal claim or dispute - Until it is resolved

10. Your rights

You have the right to:

  • access the personal data we hold about you, and get a copy of it

  • correct data that is wrong or incomplete

  • delete your data. You can delete your account yourself in the app at Settings > Delete account.

  • restrict how we use your data in certain cases

  • object to processing based on legitimate interests, and to profiling (see section 5)

  • data portability - receive the data you gave us in a commonly used, machine-readable format

  • withdraw consent at any time. This does not affect processing that happened before you withdrew it.

To use any of these rights, email support@ayltaapp.com, ideally from the address linked to your account. We may need to confirm your identity. We will reply within one month. If a request is complex, we can extend this by up to two more months, and we will tell you if we do.

You also have the right to complain to Ireland's Data Protection Commission at www.dataprotection.ie, or to the data protection authority where you live or work. We would appreciate the chance to resolve your concern first.

11. Your choices

  • App analytics: you are asked when you first use the app. Change your choice at any time in the app's settings.

  • Push notifications: turn them on or off in the app's settings, or in your iPhone settings.

  • Emails: use the unsubscribe link in any update email, or email support@ayltaapp.com. You will still receive essential service emails, such as sign-in codes.

  • Website cookies: use the cookie banner, or the cookie settings link at the bottom of our website. You can also delete cookies for ayltaapp.com in your browser, and the banner will appear again.

  • Account privacy: switch between a public and a private account in Settings.

12. Security

We protect your data with encryption in transit, hashed passwords, access rules that keep private information visible only to you, private storage for workout photos, and limited staff access. No system is completely secure. If a breach puts your data at risk, we will tell the Data Protection Commission within 72 hours, and we will tell you without undue delay where the law requires it.

13. Changes to this policy

We may update this policy as AYLTA changes. If we make significant changes, we will tell you in the app or by email before they take effect. The version number and date at the top show which version applies.

14. Contact

AYLTA Limited Unit 2, 2 Bridge Street, Athlone, Co. Westmeath, N37 F1W4, Ireland support@ayltaapp.com