STREN

Privacy policy

Effective October 1, 2026

Controller

The controller is the developer of the STREN app. For anything about your data, write to [email protected].

Without an account

You can use the app without an account. Workouts, plans, measurements and your private profile are stored on your phone. Published social posts, comments and photos are stored on the server. Posting requires an account; older local posts are not automatically shared.

Account

You create an account with your email address (you sign in with a one-time code sent by email), or with Google or Apple. We store:

Purpose: running your account and sign-in (GDPR Art. 6(1)(b)). Kept until you delete the account.

Sign-in codes

We email sign-in codes (and, for accounts with a password, password reset codes) through Resend (a US email provider sending from servers in Ireland). A code has 6 digits and is valid for 15 minutes; we only store it as a hash (HMAC).

AI coach

The coach chat requires an account. When you send a message, the app passes it through our server to Anthropic's Claude model together with a summary of your log: sex, height, weight, body fat, goal, plan, measurements, records, progress and recent workouts. No name or email. You can preview this data in the app under "What does the coach see?".

We do not store chat contents on our server, only message and token counts for the daily limit. Anthropic processes the data as our processor and, under its commercial terms, does not train models on it. Anthropic is based in the USA; transfers rely on standard contractual clauses.

Legal basis: your consent (GDPR Art. 6(1)(a) and 9(2)(a)), given with the "Agree" button before your first chat. You can withdraw it at any time in the chat ("Withdraw consent"); the log works without the chat.

Photos in the social feed

Before a photo is added to a social post or used as your avatar, the app sends it through our server to Anthropic's Claude model, which automatically checks it for nudity, sexual content, blood and injuries, violence, self-harm and hate symbols. This requires an account. A photo that cannot be checked or does not pass the check is not added.

Approved photos are stored on our server. Only the owner can access them before publication; after publication they are public together with the post, nickname and selected avatar appearance. We also store comments and reactions linked to accounts. You can delete your own posts and comments in the app; deleting an account also deletes its social content and photos. Abandoned unpublished images are cleaned up after 24 hours. The database and photos have encrypted NAS backups; deleted data may remain in backups until their retention expires. Logs record the moderation result and account number, and the database also records token usage. Anthropic processes the photo as our processor and, under its commercial terms, does not train models on it; transfers to the USA rely on standard contractual clauses.

Purpose: protecting users from harmful and illegal content (legitimate interest, GDPR Art. 6(1)(f)).

Reports and blocks

When you report a post or block someone in the social feed, the app sends us: that person's nickname, the post number and an excerpt, the reason for the report and, if you are signed in, your account number. The STREN developer reviews reports in the help desk panel to remove content that breaks the law or the terms (an obligation under the Digital Services Act, GDPR Art. 6(1)(c), and legitimate interest, Art. 6(1)(f)). Handled reports are deleted after 12 months. The list of people you block is kept on your phone.

Crash reports

When the app hits an error it sends a report: the error message, stack trace, app and OS version and, if you are signed in, your account number. We keep the latest 5000 reports. Purpose: fixing bugs (legitimate interest, GDPR Art. 6(1)(f)).

Map, location and exercise animations

Your phone's location (if you allow it) is used only on your phone to show the map around you; coordinates are never sent. The map, gym lists and exercise animations are downloaded from our server in parts, so the server sees which part you request, like with any online map. These requests only reach the technical logs.

Logs and security

The server keeps technical logs: IP address, time and type of request and, on sign-in, the account number. They protect against break-ins and abuse, such as limits on sign-in attempts (legitimate interest, GDPR Art. 6(1)(f)). Logs are deleted automatically after 14 days, rate-limit counters after one day.

Payments

Today STREN does not sell anything. If we introduce paid features, payments will be handled by the App Store (Apple) or Google Play. We will not receive your card details, only a purchase confirmation (transaction ID, product, date and subscription status) to unlock the feature on your account (GDPR Art. 6(1)(b)). We will keep confirmations for as long as tax law requires. We will update this policy before payments go live.

The stren.world website

The website uses no advertising or analytics cookies and loads nothing from other servers. If you pick a language from the list in the footer, your browser remembers the choice locally (localStorage) and does not send it to us. Traffic to the website goes through Cloudflare, and the server keeps the technical logs described above.

Who receives data

We do not sell data. STREN has no ads and no analytics. Data only reaches companies that help run the service:

Our server and database are located in the European Union.

Your rights

You have the right to access, correct, delete, restrict, port and object to the processing of your data, and to withdraw consent. Write to [email protected]. You may also complain to a data protection authority; in Poland that is the President of the Personal Data Protection Office (uodo.gov.pl).

Deleting your account and data

In the app: Settings → Delete account (password accounts must enter the password). The account, sessions and related data are removed from the server immediately. Without access to the app, email [email protected] from the address on your account with the subject "Delete account"; we delete it within 30 days and confirm by email. Data on your phone is removed by uninstalling the app.

Children

STREN is not intended for anyone under 16.

Changes

We will announce material changes to this policy in the app or on this page.

Go to Jesus Christ He's the only way