Your privacy, explained.

Introduction

Snake Charmer Limited (“we”, “us”, or “our”) operates Autoregulate. This privacy policy explains how we collect, use, share, and protect personal information when you use our iPhone app and website, and how you can exercise your rights under the General Data Protection Regulation (GDPR) and other applicable data-protection laws.

Data controller

Snake Charmer Limited, based in Waterford, Ireland, is the data controller responsible for your personal information. We determine how and why your information is processed to provide Autoregulate. You can contact us at:

Information we collect and how we use it

• Account information: your account identifier, email address, display name when supplied, and sign-in provider. We use this to authenticate you, protect your account, and associate your saved data with you.
• Training information: your experience, goals, schedule, equipment, programs, completed sets, weights, reps, effort, and feedback about pump, soreness, and fatigue. We use it to provide your plan, training log, progression and recovery estimates.
• Gym photos: images you select for equipment analysis and the equipment results you confirm. Photo analysis is optional; you can add equipment manually.
• Membership information: product identifiers, purchase and renewal status, expiry dates, and transaction-related identifiers needed to grant access, restore purchases, and resolve billing issues. Apple handles payment; we do not receive your full payment-card details.
• Service and support information: messages you send us, technical errors, security events, request information such as IP addresses, and records needed to investigate abuse or operate the service.

Account and membership information is necessary to provide access to paid training features. Your training preferences and workout records let us personalise your program and calculate progression. Without that information, we cannot provide those features. Gym photos are optional, and the website’s calculators do not require an account.

Gym photos and equipment recognition

Photos are uploaded when you choose Analyze photos. The app re-encodes images to remove embedded metadata before upload. Our backend sends the selected images to Google Gemini to identify possible equipment. Review the results before saving your inventory or using it to plan training.

Our uploaded photo files are removed after processing, including failed processing where cleanup succeeds. Unfinished scan jobs expire after 24 hours and are picked up by a scheduled hourly cleanup; outages or retries can delay removal. The equipment inventory you confirm stays in your account. Google’s own service processing and retention terms also apply to data handled by Gemini.

Choose photos of equipment and avoid including faces, personal documents, or other people’s private information. Autoregulate does not need access to your entire photo library.

Third-party services

• Google Firebase and Google Cloud: authentication, account and training storage, private photo storage, backend processing, and service operations.
• Google Gemini: analysis of the gym photos you choose to submit.
• Apple and RevenueCat: payment processing, subscription status, purchase restoration, and membership access.
• Expo: delivery of app updates. Update requests may include technical app and device information.
• Cloudflare: delivery of this website and operational request/security information, and forwarding messages sent to our support email address.

Providers process information under their applicable service terms and privacy arrangements. They receive the information needed for the functions described above.

Data sharing

We do not sell your personal information or use your training history for advertising. We share information with the providers described above to operate Autoregulate. We may also disclose information when required by law, to protect the service or someone’s rights, or as part of a lawful merger, acquisition, or business transfer, with notice where required.

Legal basis for processing

• Contract performance: we process account, membership, and requested training-service data to provide the service you purchase or request.
• Legitimate interests: we process information for proportionate service security, fault investigation, and support, subject to your rights and interests.
• Legal obligations: we process and retain information where necessary to meet applicable legal requirements.
• Consent: where consent is required for an optional feature or particular information, you can withdraw it by contacting us. Withdrawal does not affect processing that was lawful beforehand. Device permissions can also be changed in iPhone Settings.

Training feedback may reveal information about your physical condition. Supply only information you want used for your training. The app’s estimates do not make decisions with legal or similarly significant effects about you.

Storage and retention

Your phone stores training data so you can continue an existing session offline. Saved sessions and changes sync with your signed-in account when connectivity permits. An unfinished workout is saved locally and is not live-synced between devices.

We retain account and training information while you use the service, until you delete it or request account deletion. Operational and support records are retained for as long as needed to provide support, investigate incidents, resolve disputes, and meet legal obligations. An account-deletion completion record is retained to prevent deleted accounts from recreating data. Apple and RevenueCat may retain transaction or subscription records under their own requirements; deleting your app account does not erase those independent records.

Data security

We use authentication and access controls to protect account information and restrict access to saved training data. Gym photo uploads are tied to your signed-in account and an active analysis request. Account deletion requires a recent sign-in. We use these safeguards alongside our hosting providers’ security measures, but no internet service or storage system can guarantee absolute security.

International data transfers

Our company is based in Ireland. Our infrastructure and providers may process information outside Ireland, the European Economic Area, or your country, including in the United States. Where European data-protection rules apply, transfers must use an applicable adequacy decision or appropriate contractual safeguards, as relevant to the provider and transfer. Contact us for information about the safeguards applicable to your data.

Your choices and data-protection rights

You can edit your training preferences and equipment in the app. Manage camera, photo, and notification permissions in iPhone Settings. Rest alerts are optional. In Profile → Data & privacy, you can export your training information and request account deletion.

Under the GDPR, and subject to its conditions and exceptions, you can:

• Request access to your personal information and a copy of it.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your account and personal information.
• Ask us to restrict processing of your information.
• Obtain a portable, machine-readable copy of information you have provided.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on it.

Contact us to make a request; we may need to verify your identity. Other rights may apply depending on your location. You can also complain to your local data-protection authority. In Ireland, this is the Data Protection Commission.

Read the account deletion instructions. Account deletion and cancelling an App Store subscription are separate actions.

Cookies and this website

This website does not set advertising or analytics cookies and does not include advertising trackers, analytics scripts, or a mailing-list form. The training calculators run in your browser; their inputs are not sent to our backend. Hosting providers may process network and security information to deliver the site. If analytics or other data-collecting features are introduced, we will update this policy and request consent where required.

Children’s privacy

Autoregulate is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

Changes to this policy

We may update this policy as the service or our data practices change. We will publish the revised policy on this page, update the date above, and provide additional notice of material changes where required.

Contact us

For privacy questions, concerns about how we handle your information, or requests to exercise your data-protection rights, contact Snake Charmer Limited: