Privacy
Privacy policy
What Cairnfit collects about you, why, and what you can do about it, in plain language.
Last updated 16 August 2026
Who runs Cairnfit
Cairnfit is built and run by Thomas Bianchini, as an individual. There is no registered company behind it yet: no SIREN, no SIRET, no registered business address, because none has been created. Registration number: to be added once that registration is complete.
Our legal notice carries the company's registration details, as placeholders until that registration exists. Until then, this policy and the contact below are how you reach the person responsible for your data.
Questions, requests, or complaints about your data: email thomas@cairnfit.com.
What we collect
The table below lists every category of personal data Cairnfit collects. Three of them, marked below, count as special category data under GDPR Article 9: data revealing health information, which gets stronger legal protection than an email address does.
| Category | What it includes | Special category (Art. 9)? |
|---|---|---|
| Account | Your email address, and if you sign in with Google, your name and profile picture. | No |
| Training | The workouts, exercises, sets, loads, reps, RPE, programs and goals you log. | No |
| Body and physiological data | Body weight, heart rate, resting heart rate, heart rate variability, and sleep, only if you connect Apple Health on iPhone or Google Health Connect on Android. | Yes |
| Strava activities | The sport type, start time, duration and distance of activities you record in Strava, only if you connect your Strava account. | No |
| Pain reports | Which of ten body areas hurts, how severe it is, and what movement triggers it, only if you log one. | Yes |
| Coach conversation | The messages you exchange with your coach. | Yes, by content |
| Coach memory | Facts your coach has noted from your training and conversations, to personalise your coaching. | Yes, by content |
| Calendar | Your availability windows, only if you grant calendar access. | No |
| Device | A push-notification token and basic device information. | No |
| Billing | Your subscription tier, entitlement status, and credit usage. | No |
| AI disclosure acknowledgement | The date and time you acknowledged that you're talking to an AI, not a person, inside the coach. Just the timestamp, not what you said. | No |
We treat heart rate and sleep as health data here, not because they always are, but because Cairnfit uses them, together with your pain reports, to assess your physical state. Combined, this dataset is health data both by nature and by how we use it.
Why we process it, and on what legal basis
GDPR requires a legal basis for every purpose. Here is ours.
| Purpose | Legal basis |
|---|---|
| Run your training log and show your progress over time | Performance of our contract with you (Art. 6(1)(b)) |
| Build and adapt your training program | Performance of our contract with you |
| Provide conversational coaching that responds to your history and state | Performance of our contract with you, and, for the health-related content involved, your explicit consent (Art. 9(2)(a)) |
| Avoid loading a body area you've reported as painful | Performance of our contract with you, and your explicit consent |
| Send notifications you've opted into | Your consent (Art. 6(1)(a)) |
| Meter and bill your subscription | Performance of our contract with you |
| Keep a record that you were told your coach is an AI, not a person | Our legal obligation (Art. 6(1)(c)) |
For physiological data, pain reports, and coach conversation and memory, we rely on your explicit consent under Article 9(2)(a). You give that consent by taking the action yourself: connecting Apple Health or Google Health Connect, logging a pain report, or messaging your coach. You can withdraw it at any time by disconnecting the source, not using that feature again, or deleting your account, which erases the data these consents cover.
Your coach, and the transfer to the United States
Cairnfit's coach is powered by Anthropic's Claude API. When you message your coach, that message, plus the training and health context needed to answer it (which can include your pain reports, training history, and physiological signals), is sent to Anthropic in the United States. This is a real international transfer, and it deserves to be stated plainly rather than buried.
Here is what constrains it. The transfer is covered by Standard Contractual Clauses under Anthropic's data processing agreement. Anthropic does not use API inputs or outputs to train its models. By default, Anthropic automatically deletes what it receives within 30 days of processing it, except content its automated systems flag as a policy violation, which can be retained longer under its own terms.
Your account data itself never leaves the EU: everything Cairnfit stores lives on servers in Ireland. Only the specific message you send your coach, and the context needed to answer it, crosses to the United States, transiently, to generate that one reply.
Who we share your data with
We share data with the service providers who help us run Cairnfit, never for advertising, and never by selling it.
| Recipient | What they do | Where | Safeguard |
|---|---|---|---|
| Supabase | Our database, authentication and backend | EU (Ireland) | No transfer, EU to EU |
| Anthropic | Generates your coach's replies | United States | Standard Contractual Clauses |
| Expo | Delivers push notifications | United States | Standard Contractual Clauses |
| RevenueCat | Checks your subscription status | United States | Standard Contractual Clauses |
| Sign-in, only if you choose it | United States | Standard Contractual Clauses | |
| Apple, Google Play | Process your payment, as merchant of record | Varies | Not applicable: they are independent controllers for the payment, not our data processors |
For the detail behind each of these, including which document we checked and when, see our subprocessor list.
How long we keep your data
If you delete your account (see below), your data is erased right away: your programs, sessions, sets, pain reports, coach conversations and memory, and every other record tied to your account, are all removed. The one exception is a coach message already sent to Anthropic before you delete your account, which follows Anthropic's own retention (described above); since Anthropic is not a store of your data, we cannot reach into a request it already processed.
For accounts that are never deleted, the retention period is 24 months of no session activity. If you stop logging sessions or messaging your coach for 24 months, your account becomes dormant: your contribution to the community strength standards is anonymised, so it no longer identifies you, and your account, including your training history, is then erased. Before that happens, we email you: once when you're 30 days from that date, and again at 7 days, and any session or coach message you log in that window cancels it and resets the clock for another 24 months.
Your rights, and how to use them
Under GDPR, you have the following rights over your data. Some of them you can now exercise yourself, in the app; the rest, email us.
- Access and portability. In Settings, Export my data gives you everything Cairnfit holds about you, your training, coach conversations, health signals, integrations and account, as one file you can keep or share.
- Erasure. In Settings, Delete account permanently removes your programs, sessions, sets, coach conversations and everything else tied to your account. This takes effect immediately and cannot be undone.
- Rectification. You can correct most of your own data directly in the app (your profile, goals, and training details). For anything you cannot fix yourself, email us.
- Objection and withdrawal of consent. Where we rely on your consent (physiological data, pain reports, coach conversation and memory, notifications), you can withdraw it at any time by disconnecting the source, turning off the feature, or deleting your account. Where we rely on our contract with you to run the app, there is generally no separate right to object, since that processing is what delivering the service requires. But deleting your account is always available to you.
- Any other request. Email thomas@cairnfit.com. We reply as the person, not a department, since that is what Cairnfit currently is.
How we protect it
Cairnfit's database runs entirely in the EU (Ireland), and access is enforced with owner-scoped Row Level Security so your data is only reachable by you. The health data we ask for is deliberately narrow: our Apple Health and Google Health Connect integrations read a fixed set of five metrics plus workouts, and pain reports are limited to a fixed list of body areas and severities, not free text. We have not obtained a security certification such as ISO 27001, and we are a small team, not a security department: we are telling you what is actually in place rather than what a larger company might claim.
If you're not satisfied
You can lodge a complaint with France's data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), at cnil.fr, or by post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Not a medical device
Cairnfit is a training companion, not a medical device. Its coaching is not medical advice. If you have a health concern, talk to a qualified professional before starting or changing a training program.
Changes to this policy
We update this page when what we actually do changes, not on a fixed schedule. Questions about anything on it: thomas@cairnfit.com.