RazDva Privacy Policy

The Russian version is the primary one; this is its equivalent.

In short

• Your workouts, steps, measurements, photos and messages are seen by you and your coach. No one else — except in the cases described below.
• We don't sell data, don't show ads and never use health data for advertising.
• From Apple Health and Health Connect we read steps only, and we never write anything there.
• You can download all your data as one file and delete it right in the app: Profile → Privacy.
• Questions — support@razdva.app.

1. Who is responsible for your data

RazDva is made by Maksim Merkulov (Max), a fitness coach and the app's creator. In the App Store and Google Play the developer is listed as razdva.app. Max is the controller of your data: he decides why and how it is processed and is responsible for it.

• Status: private individual
• Country: Thailand. Official letters and requests are accepted at the email below
• Email for any data questions: support@razdva.app

Below, "we" means Max and RazDva.

Your coach in RazDva is a separate person. Coaches see their clients' data in order to coach them and are responsible for how they use what they see (section 5). If your coach isn't Max, they work independently, not on behalf of RazDva.

2. What data we collect and why

Account

Name, email, sign-in method (Apple, Google or an emailed code), language, time zone and — if you choose to set them — gender and a profile photo. We use gender to show exercises on a male or female figure; your coach sees it too. The server crops the profile photo to a square, shrinks it and strips its metadata, including where it was taken; your coach sees it while coaching is active or paused. You can remove the photo at any time: Profile → Account. With Sign in with Apple you can hide your email — then we only get Apple's relay address.
Why: so you can sign in from any phone, and the app speaks your language and counts days in your time zone.

Workouts

Exercises, sets, reps, weights, time, how it felt and how hard it was, notes and a few words to your coach, reasons for leaving a workout, flags ("too hard", "discomfort" and others). Records, level, points and achievements are calculated from them.
Why: this is the app itself — running workouts and showing progress to you and your coach.

Steps

Daily step counts — typed in by hand or read from Apple Health / Health Connect (only with your permission) — and your weekly goal.

Measurements

Weight and circumferences (shoulders, biceps, waist, glutes, thighs, calf) and notes to them.

Progress photos

Photos you pick or take in the app. The photo is downscaled, and the server strips its metadata, including the location. We don't recognise faces. The app has no access to your whole photo library — only to the photos you pick.

Questionnaire for your coach — optional, with a separate consent

Goal, experience, where you train, age, height, weight, activity, nutrition and water, chronic conditions, limitations and contraindications, allergies, hormone use, whether you have recent lab tests (without results), supplements and performance-enhancing drugs, anything else worth knowing. This is health data. Only your coach sees it; every question can be skipped, and answers can be changed or erased at any time.

Messages

Messages and photos in the chat with your coach, reactions, read receipts. An automatic filter checks messages for banned words. If the filter fires or a message is reported, Max as the moderator receives an email with the text of that message and a link to its photo — to decide whether it breaks the rules.

Reports and blocks

Your reports (which message, photo or person, the reason, a comment) and the list of people you've blocked in chat.

Consents

Which consents you have, which version, when they were given or withdrawn, and your IP address at the moment of consent — as proof.

Devices and sessions

Phone model (the model — not the phone's name from settings, which often contains the owner's name), operating system, app version, sign-in time and last refresh. Why: to show the Devices list and let you sign out of a lost or someone else's phone.

Notifications — if you allow them

Your phone's notification address (push token), which notifications are on and reminder times. A notification itself is a short text — for example, the sender's name and the start of a chat message, or a workout reminder. To reach your phone, it passes through Expo and Google or Apple (section 6).

App events

We count, ourselves and without third-party analytics services, how many people reach key steps — for example "first workout", "article read", "photo added". Only the event name, time and app version — no health data and no texts. Kept for 13 months.

Errors and support requests

• Automatic error reports. When an error happens in the app, it sends a technical report: what the error is, where in the code, app version, phone model and OS. The report goes to Sentry and by email to Max (the same error at most once every 6 hours). If you are signed in, the report on the server and the email also carry your account id and name, so Max knows whose app it was. The app puts none of your texts, no health data, no email and no IP address into the report; rarely, an error's description may hold a fragment of what was on screen, and only Max sees such a report.
• "Report a problem". Your text, your account email (so we can reply) and — only if you tick the box — app and phone details: version, platform, OS, model, last sync time and the number of unsent workouts. No workouts, steps, weights or questionnaire answers. The request is stored on the server and emailed to Max.
• Emails to support@razdva.app land in the support mailbox (section 6).

IP address

Used to protect sign-in against code guessing and stored with your consent record.

If you are a coach

Additionally: your public profile (name, photo, "about", "usually replies…"; the photo is the same as in your account), programs, templates and drafts, your own exercises and their videos, notes on library exercises, knowledge base articles, invitations, private notes about clients, and offline clients — people you coach outside the app whose data you enter into RazDva. You may enter an offline client's data only with their permission.
Your public profile is seen by your clients and by anyone who opens your invitation by its code or link; your name and photo also by former clients, in their coaching history.

If you move your data from the Telegram version

Workouts, measurements, steps, photos, questionnaire and messages from Max's former Telegram bot are moved into RazDva when you enter your personal transfer code. Until the code is entered, this data sits in a separate profile visible to no one; if the code isn't entered within 60 days, that profile is deleted.

The razdva.app website

The website sets no cookies, uses no counters, analytics or ads, and loads nothing from third-party sites. It remembers the language you chose in the browser itself (localStorage). The website's server (Railway) sees your IP address and the address of the page you open, like any web server: only to serve the page, and Railway keeps its request log for a short time.

What we don't collect

Location, contacts, advertising identifiers, your whole photo library, any Apple Health or Health Connect data other than steps. We don't use third-party analytics or advertising services and don't track you across other apps or websites.

3. Legal bases

• To run the app (the Terms of Use): account, workouts, programs, chat with your coach.
• Your consent:
  • workout, step and measurement data — we treat it as health data and ask for consent right after sign-in;
  • the questionnaire for your coach — a separate consent, only when you decide to fill it in;
  • steps from Apple Health / Health Connect — also a permission in the phone itself;
  • notifications — a permission in the phone.
• Legitimate interest: security and abuse prevention, chat moderation, finding and fixing bugs, our own analytics without third-party services.
• Legal obligations: keeping proof of consent, answering lawful requests.

You can withdraw consent in Profile → Privacy → Consents — as easily as you gave it. The app can't work without the first two consents ("Terms and privacy policy" and "Workout, step and measurement data"), so withdrawing them means deleting your account, with 7 days to change your mind. The questionnaire consent can be withdrawn on its own — your answers are erased from all coaches at once.

4. Apple Health and Health Connect

• What we read. Steps only — your step count per day. Read-only: we write nothing and see no other data.
• Why. To show your steps for the day and the week, your weekly goal and your streak of days with steps — to you and your coach. Your coach sees your steps only with your explicit consent "Workout, step and measurement data", which the app asks for right after you sign in.
• When. Only after you grant permission on your phone and only while the app is open — we don't read in the background. When you connect, the app reads your history (a year from Apple Health, 30 days from Health Connect), then the latest days whenever you open the app.
• Who sees it. You and your coach — no one else. We do not use steps or any health data for advertising, don't sell it, don't share it with data brokers or third parties for marketing, and don't store it in iCloud.
• How it's protected. Sent to the server only over an encrypted connection (TLS); on the phone it sits in an encrypted database (section 10).
• How long we keep it and how to delete it. Steps are kept while your account exists. To stop reading: iPhone Settings → Health → Data Access & Devices → RazDva; on Android — in the Health Connect app. Steps that already came in are erased together with your account — and when you withdraw the "Workout, step and measurement data" consent (section 3).
• RazDva's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

5. Who else sees your data

Your coach — while coaching is active or paused: workouts started during that coaching, flags and exit reasons, steps, measurements, progress photos, your profile photo, level and achievements, gender, your chat with them and — if you fill it in — the questionnaire. Your coach doesn't see your email. Once coaching ends, the coach loses access to your data; the chat stays read-only for both of you — with your name but without your profile photo. A new coach doesn't see your questionnaire answers to a previous coach or your chat with them.

Coaches are responsible for how they use what they see — for example, if they copy data somewhere outside RazDva.

Max as the moderator — only messages and photos that were reported or caught by the filter, and only to decide whether they break the rules.

Services RazDva runs on (section 6) — only what they need to do their job, under contracts with them.

By law — if the law or a lawful request from a public authority requires it. We disclose only what we must.

We share data with no one else and sell it to no one.

6. Services RazDva runs on and where data is stored

When paid plans for coaches arrive, RevenueCat (subscription records from the App Store and Google Play) will be added to this list. It isn't used now; we'll update this policy in advance.

Your data may be stored outside the country where you live: mainly in the EU (Netherlands, Germany, Ireland), with copies of videos in Singapore and the USA, and some of the services are US companies. By using RazDva you agree to this transfer. We choose services that protect data under data processing agreements; for transfers from the EU to other countries, those agreements include the EU Standard Contractual Clauses.

7. How long we keep data

8. Your rights

• Access and a copy. Profile → Privacy → My data — a file with all your data in a machine-readable format (JSON). You can take it with you to another service.
• Correction. Name, profile photo, gender, language, measurements, hand-entered steps and questionnaire answers can be changed right in the app. For anything you can't fix in the app — write to us and we'll correct it.
• Deletion. Individual photos and measurements, questionnaire answers, your own messages within 24 hours — in the app; the whole account — Profile → Account → Delete account (section 9).
• Withdraw consent — Profile → Privacy → Consents.
• Object to or restrict processing — write to support@razdva.app.
• Complain to the data protection authority of your country (for example, your national supervisory authority in the EU, the PDPC in Thailand, Roskomnadzor in Russia). But please write to us first — we'll try to resolve it faster.

We answer data requests within 10 working days. To protect your account, we may ask you to write from the email you sign in with.

9. Deleting your account

Profile → Account → Delete account. You're signed out on all devices right away; for 7 days you can change your mind: sign in and tap "Cancel deletion". After 7 days the account and data are erased. What exactly is erased and what stays — in "Deleting your account" (also a web page: razdva.app/delete-account). Without the app — write to support@razdva.app from the email you sign in with: within 3 working days we'll start the same deletion and reply by email.

10. How we protect data

• Everything between your phone and the server travels over an encrypted connection (TLS).
• On the phone, data sits in an encrypted database; sign-in keys are in the system's secure storage.
• Photos and files open only via links that stop working on their own; clients' photos are never public.
• Server logs contain no message or support-request texts, no questionnaire answers and no health data. Error reports normally don't either; rarely, an error's description may hold a fragment of what was on screen (section 2).
• Database backups are encrypted on the server before they go to storage; the key is held only by the server and by Max.
• Only Max has access to the server and the database.
• If a breach happens that could harm you, we'll notify the supervisory authority (within 72 hours where the law requires it) and you.

11. Not medical advice

RazDva is an app for training with a coach, not a medical device: it does not diagnose, treat, cure or prevent any medical condition. Talk to a doctor before you start training, especially if you have a medical condition, an injury or are pregnant. If something hurts or you feel unwell during a workout — stop.

12. Age

RazDva is for people aged 18 and over. If you're under 18, please don't use the app. If we learn that an account belongs to someone under 18, we'll delete it.

13. Changes to this policy

If the policy changes materially, the app shows a "The terms have changed" screen with a short summary of what's new. You can accept the new version or delete your account. We keep previous versions and will send them on request.

14. Contact

support@razdva.app — any questions, requests and complaints about data. In the app: Profile → Report a problem, or Contact support.