Effective date: 14 November 2026. Contact: support@getworkset.app.
Workouts, sets, templates, programs, body metrics, progress photos, your nutrition diary and profile, and your settings. Progress photos stay on the device; they can be included in your normal device backup.
| What | When | Where it goes | How long it is kept |
|---|---|---|---|
| Food search text and barcode digits. For a food you saved from the food database: its barcode, or its name and brand | When you search or scan, and automatically, about once a day per saved food, to keep the values of foods you saved from the food database up to date (up to 5 foods each time you open the Food tab or the add-food screen, for the foods shown there; you do not need to type or scan anything) | Our server, then FatSecret, the food database | Server memory only: search about 6 hours, barcode up to 23 hours; raw FatSecret values are never served after 24 hours |
| Weekly review: a summary of last week and the week before: your calories and protein for each day, your average carbs and fat, your goal, the dates of the week and whether your weight unit is kg or lb, your targets, how many days you logged and how (for example by search, barcode or typing), what share of your portions were estimates, whether your targets were adjusted (and, if so, the size of the change, the new target and the date it starts), your calorie floor, your language and region, and your weigh-in averages (with the number of weigh-ins and the weekly trend). No food names, entries or notes are sent. | Only when you tap to generate a review, and only after you agree in the app's consent screen | Our server, then Anthropic, which writes the review | Our server does not store the figures (its logs hold counts only). Anthropic: standard 30-day retention |
| Purchase proof (an Apple signed receipt) | The first time the app needs our server after each launch, again whenever the check runs out (every 6 hours; 24 hours for Lifetime food access) or your plan changes, and when you buy or restore. Never sent without a purchase. | Our server, to confirm what you own. It does not store the receipt; it returns a signed token that carries a one-way hash of your original transaction id (not your Apple ID), which your app keeps in memory. | Not stored per user |
| Usage counters for rate limits | Every request | Our server. Keyed by the same hash (for the purchase check, by a hash of your network address); a per-minute counter, plus a daily counter for AI use (and for food lookups if the daily food limit is on) | 60 seconds to 24 hours, then removed |
Everything here is off until you switch it on, and Apple's permission sheet asks you first.
Calorie and nutrition targets need a birth year that makes you an adult. We use the birth year only to apply that rule. Under the age, you can still log food but get no targets.
Zavlo is not directed at children. We will post changes here and update the date. Contact: support@getworkset.app.