Join the waitlist

Privacy Policy

Updated 8 November 2026

1. Controller

Chulo Oy (business ID 3269666-3, VAT ID FI32696663)
Tervahovinkatu 18, 20810 Turku, Finland
[email protected]

2. What data we process

Account

  • Email address. If you sign in with Apple and hide your email, we only receive Apple’s relay address.
  • The name you give when signing up, or that Apple or Google passes on at your first sign-in. You can change it in the settings.
  • If you sign in with Google, Google passes on your email address and your name.
  • Your password is stored only as a hash; we cannot see it.
  • The app language, so that our emails reach you in the right language.

Profile you fill in yourself

  • Sex for workout calculations (male, female or “prefer not to say”)
  • Year of birth, height and weight
  • Your goal and starting level, workouts per week, training split, rest and recovery settings
  • Whether the figure is shown and how it is dressed, units (kg/lb, cm/ft)
  • Whether you have completed the introduction
  • Whether you want our newsletter, when you gave or withdrew that consent, and the wording you agreed to

Workouts

  • Your training program and the plan for your next workout
  • Completed workouts: date, duration, exercises, sets, reps and weights
  • Choices per exercise: star ratings, how often you have swapped it and the reason category you picked (“I don’t like it”, “doesn’t suit me”, “equipment taken or other”), and exercises you want left out of your program
  • Names you give your own workouts, and exercises you add yourself. If you choose to suggest an exercise you added to us, we see its name, muscles and equipment together with other users’ suggestions, without knowing who added it.

Imported workouts (Apple Health, Health Connect)

Only if you turn on importing (in the introduction or in Settings → Apple Health / Health Connect), Chango reads your workouts from Apple Health or Health Connect on your phone, starting from when you began using Chango. For each imported workout we store:

  • the type of workout (for example running or cycling)
  • the start and end time and the duration
  • your average heart rate during the workout
  • how it felt, if you log it yourself

We do not read or store any other health data, such as heart rate curves, calories, sleep or steps, and we never write anything to Apple Health or Health Connect.

Subscription

If you subscribe to Chango, Apple (App Store) or Google (Google Play) handles the payment, and we never receive your payment details. We store your subscription’s identifier, the product (monthly or yearly), how long it is valid, and whether it renews or has been cancelled, so that your subscription shows correctly in the app.

Feedback

If you send feedback from the app, we store the text you write, up to three attachments you choose yourself (for example a screenshot), the screen you sent it from, the platform (iOS or Android), and the operating system and app version. Your feedback is linked to your account so that we can reply to you if needed.

Workout snapshot for fixing bugs

Only if you give separate permission, we may put together a snapshot of your workout data with your name, email address and account identifier removed. It contains your age in ten-year bands, your weight to the nearest 5 kg, your sex, your training program, your plan, your exercise settings and the workouts you’ve done in Chango, without dates or times. It contains no data imported from Apple Health or Health Connect, none of your feedback and not your height.

Error log

If saving or loading fails or the app crashes, the app sends us a technical error report: where the error happened, the error message, the server’s response code, the number of attempts and how long they took, whether the device was online, the platform (iOS or Android), and the operating system and app version. The report contains none of your workout data.

View counts

The app counts how many times each view is opened, for all users together. The numbers aren’t linked to you or your device, and we use them to develop the app.

Technical logs

Our service providers Supabase and Cloudflare keep technical logs of requests to the service (IP address, time and the request) for up to seven days, to keep the service secure and working.

Support

If you contact us, we keep your message and email address to deal with your matter. So that we recognise your account in support, we may add a short internal name to it, which only we can see.

We do not collect location, device identifiers, the advertising identifier (IDFA), contacts or photos (except pictures you attach to your feedback yourself). From Apple Health and Health Connect we read only the workouts described above, and only if you have turned on importing. The app has no ads and no third-party analytics.

3. Why we process data, and on what basis

All of the above except imported workouts and feedback is needed to provide the service you signed up for (GDPR art. 6(1)(b), contract): creating your account and signing you in, resetting your password, planning your workouts, calculating weights and rest times, showing your progress, syncing your data between your devices, and sending emails about the service (confirmation, password, change of address).

Newsletter. Only if you allow it (in the introduction or in Settings → Account), we email you training tips, news and offers (GDPR art. 6(1)(a), consent). It is off until you turn it on. You can withdraw your consent at any time in the app or with the link in every newsletter; this does not affect earlier processing.

Imported workouts. We use imported workouts only to calculate your load and recovery and to plan your workouts, and they appear in your workout history. Average heart rate is health data, so we process it based on your explicit consent (GDPR art. 9(2)(a) and 6(1)(a)), which you give by turning on importing. You can withdraw your consent at any time. When you turn importing off, no new workouts are read, but workouts already imported stay so that the goals for earlier weeks remain correct. You can delete imported workouts one at a time from your workout list, all at once in Settings → Apple Health / Health Connect → Delete imported workouts, or by deleting your account. Deleted workouts are never imported again. The data is never used for advertising or shared with anyone.

Feedback. We use feedback to develop the app, fix bugs and reply to you (GDPR art. 6(1)(f), legitimate interest). Sending feedback is voluntary. Please don’t include personal details such as names, contact details or health information.

Workout snapshot. We use the snapshot only to fix bugs and improve the workout logic in the app, including in AI-assisted development tools (GDPR art. 6(1)(a), consent). Your permission is voluntary, lasts 30 days and can be withdrawn at any time. Giving or refusing it doesn’t affect how you can use Chango.

Error log. We use error reports only to fix bugs and keep the service working (GDPR art. 6(1)(f), legitimate interest).

View counts, technical logs and support. We use view counts and exercise suggestions to develop the app, technical logs to keep the service secure, and support messages to deal with your matter (GDPR art. 6(1)(f), legitimate interest).

We do not profile you or use your workout data for marketing, and we make no automated decisions with legal effects on you. Automatic workout planning is a feature of the service, and you can change every suggestion.

4. Exercises to avoid

When you swap an exercise, you can tell us that it doesn’t suit you. It is then left out of your workouts. We store only that the exercise is to be avoided, never why.

5. Who processes data on our behalf

  • Supabase: database and sign-in. Data is stored in the EU (Stockholm, Sweden).
  • Resend: sends the service emails (account confirmation, password reset, change of address) from [email protected], and the newsletter if you have allowed it.
  • Cloudflare: this website, visitor statistics, and forwarding of messages sent to [email protected] to our email provider.
  • Development tools (Anthropic Claude, GitHub): your feedback with its attachments (for example screenshots, the screen and device details) and, if you’ve given permission, your workout snapshot may be processed in Anthropic’s commercial service, which is bound by a data processing agreement. Anthropic does not use this data to train its models, and it is deleted from the service within 30 days. The workout snapshot never contains your name or other identifiers. In our other development tools (such as GitHub) we use only the text of your feedback without identifiers: the link to your account is removed, and any addresses and numbers in the text are masked. Anthropic is located in the United States, and the transfer is based on the EU Standard Contractual Clauses.
  • Apple and Google: only if you sign in with them. Their own privacy policies cover their processing.
  • Apple (App Store) and Google (Google Play): subscription payments. They act as independent controllers, and their own privacy policies apply to payments.

Transfers outside the EU. Resend, Cloudflare and Anthropic are located in the United States, and our email provider may process messages there too. These transfers are based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

We do not sell or hand over your data to anyone else.

6. How long we keep data

We keep your data for as long as your account exists. When you delete your account in the app (Settings → Account → Delete account), the account and all its workouts, settings, subscription details, feedback with its attachments and error reports are deleted immediately and permanently. If you can’t access the app, see chango.fit/delete-account. Imported workouts are kept in the same way, also after you turn importing off, until you delete them (see section 3) or delete your account. Data is removed from our service provider’s backups within seven days. Deleting your account doesn’t cancel your App Store or Google Play subscription; cancel it in the store’s subscription settings. We keep feedback until it has been dealt with, for no longer than two years. The workout snapshot isn’t stored: it’s put together only when needed, while your permission is valid. We store only the permission and how long it is valid, and it is removed after 30 days. Error reports are deleted after 90 days and technical logs after seven days. If you signed in with Apple, deleting your account also revokes Chango’s access to your Apple ID.

7. Your rights

You have the right to

  • know what data we hold about you and get a copy of it
  • correct your data; most of it you can correct yourself in the app
  • have your data deleted; you can do this in the app by deleting your account
  • ask us to delete your feedback without deleting your account
  • withdraw your consents at any time: the newsletter in the app or from the link in any email, and imported workouts by turning importing off and deleting your imported workouts (section 3)
  • withdraw your permission for a workout snapshot by writing to [email protected]
  • restrict or object to the processing
  • move your data to another service

Requests: [email protected]. We answer within one month. You can also complain to the Finnish Data Protection Ombudsman: tietosuoja.fi.

8. Security

All connections are encrypted (HTTPS). In the database, every user can reach only their own data (row-level security). Passwords are stored as hashes.

9. Changes

If this policy changes in a significant way, we will tell you in the app.

10. Waitlist

If you join the waitlist on chango.fit, we process: your email address, the language you chose, the consent text you agreed to and when, your place in line, your own invite code, who invited you (if you joined with an invite link), how many people joined with your link and confirmed their address, the channel you came from (for example instagram), and whether you want to be a beta tester and on which phone (iPhone or Android).

This website does not use cookies and does not store anything on your device. To count visits, we use Cloudflare Web Analytics. It counts visits, pages, referring sites, countries and device types without cookies and without storing anything on your device, and it does not identify individual visitors.

We use this data to keep your place in line, send you the confirmation link, tell you when Chango launches and give you your perk code, and invite you to the beta test if you asked to be a tester (GDPR art. 6(1)(a), consent). You can withdraw your consent at any time with the Leave the waitlist link in every message.

Processed on our behalf by Supabase (database in the EU, Stockholm), Resend (emails) and Cloudflare (website and visitor statistics).

Unconfirmed addresses are deleted after 30 days. The waitlist is deleted six months after Chango launches. The Leave the waitlist link deletes your data immediately.

11. Age limit

Chango and the waitlist are for people aged 16 and up. We do not knowingly collect data from children under 16.

If you notice that a child under 16 has given us their data, contact us (section 1) and we will delete it.