Privacy Policy

This Privacy Policy explains what personal data Gojan (the "Service") collects, how and why we use it, who we share it with, and your rights. The data controller is Ondaform Labs LLC (30 N Gould St, Ste N, Sheridan, WY 82801, USA). Privacy contact: team@gojan.app.

1. Controller & contact

Ondaform Labs LLC is the controller of your personal data. For any privacy question or to exercise your rights, write to team@gojan.app.

2. Data we collect

• Account data: name, email and login credentials.
• Training profile: goals, level, available equipment, preferences and any physical limitations you disclose, plus your workout logs. Some of this may constitute health/wellness (sensitive) data, which you provide voluntarily to personalize your experience.
• AI coach conversations: the messages you exchange with the assistant.
• Gym & location data (optional): if you enable these features, your chosen gym and location data. You can turn this off.
• Payment data: processed by Stripe (or Apple/Google for in-app purchases). We do not store full card numbers.
• Technical & usage data: device, identifiers, language, features used, and activity logs.
• Cookies & similar technologies: to keep you signed in, remember preferences, secure the Service and understand usage (see §8).

3. How we use your data

To create and manage your account; to generate personalized routines and operate the AI coach; to process payments and manage subscriptions; to provide support; to improve, maintain and secure the Service and prevent fraud; to send transactional communications (and, with your consent, updates); and to comply with legal obligations.

4. Legal bases (GDPR)

(a) performance of a contract; (b) your consent (e.g., location, disclosed health/wellness data, marketing), which you may withdraw at any time; (c) our legitimate interests in operating, securing and improving the Service; and (d) compliance with legal obligations. For sensitive health data we rely on your explicit consent.

5. AI & automated processing

Your routines are generated by AI models based on the data you provide. This does not produce legal or similarly significant effects and is not solely-automated decision-making. You keep control and can adjust or ignore any suggestion.

6. Who we share data with (processors)

We do not sell your personal data. We share it only with providers that help us operate the Service, under confidentiality and data-protection obligations: Stripe (payments), Supabase (database/auth/hosting), Resend (email), AI model providers, Google (Places/Maps), Apple / Google (in-app purchases), infrastructure/analytics providers, and authorities where required by law.

7. International transfers

Some providers are in the United States or other countries, so your data may be processed outside your country. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses).

8. Cookies & tracking

We use strictly necessary cookies (authentication, security) and, where applicable, functional and analytics cookies. You can control cookies through your browser or device; disabling some may affect functionality. We honor recognized opt-out signals where legally required.

9. Retention

We keep your data while your account is active and as needed for the purposes above and our legal obligations (e.g., billing records). When you delete your account, we delete or anonymize your data within a reasonable period, except what we must retain by law.

10. Your rights

Subject to applicable law: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Write to team@gojan.app. You may also lodge a complaint with your local data-protection supervisory authority.

11. U.S. state privacy rights

If you are a resident of California or another U.S. state with privacy legislation, you have rights to know, access, delete and correct your personal information, and to opt out of its "sale" or "sharing". We do not sell your personal information. Contact team@gojan.app; we will not discriminate against you for exercising these rights.

12. Security & breach notification

We apply reasonable technical and organizational measures. No system is completely secure, but we work to minimize risk and, if a breach affecting you occurs, we will notify you and the relevant authorities as required by law.

13. Children

The Service requires a minimum age of 18 and is not directed to minors under 18. We do not knowingly collect data from minors under 18; if we learn we have, we delete that data and close the associated account. Contact us at team@gojan.app.

14. Changes

We may update this Policy; we will post the current version with its effective date.

15. Contact

Ondaform Labs LLC — 30 N Gould St, Ste N, Sheridan, WY 82801, USA — team@gojan.app · ondaformlabs.com · gojan.app