EDRO Fitness Privacy Policy
This policy covers the EDRO Fitness mobile app and the web app at fitness.edro.su. Updated October 24, 2026.
Local journal
Without signing in, your programs, exercises, sets, weights, repetitions, effort ratings, workout times, notes, body measurements and chosen photos are stored on your device. You enter body measurements yourself. On iPhone, the app excludes its SQLite databases and lock-screen action journal from iCloud backup. Use export or optional synchronization to keep a copy.
EDRO sign-in
Sign-in through auth.edro.su uses your account identifier and, if provided by the sign-in service, your name, username and email address. Authentication separates users in server storage. You enter your password on the sign-in service page; the app stores session tokens. On iPhone, session tokens use protected system storage and do not transfer to another device. API connections are saved separately as described below.
Optional PostgreSQL storage
Connecting a server sends it your journal, programs, exercises, settings, body measurements, added photos and saved health measurements. These data are associated with your account identifier. Records in a shared database are separated by owner. If you connect your own server, its administrator controls access, backups and deletion.
Sharing a program link
Only when you choose Share does the server save a separate copy of the selected program: exercise order, planned sets, weights, repetitions, pairs and related exercise descriptions, illustrations and chosen exercise photos. Anyone receiving the random public link can view the program and import an independent copy into their journal. Workout history, Apple Health measurements, body measurements, nutrition and API keys are excluded. The creator can revoke the link to stop future access; copies already imported by recipients remain with them. Editing your program does not change its published copy.
Apple Health and Apple Watch
With your permission, iPhone reads available measurements for the selected workout interval: average and maximum heart rate, heart-rate samples, active energy, HRV, effort score and workout duration. Apple Watch can save a strength workout and active energy to Apple Health and send measurements and actions to its paired iPhone. These data support your workout journal and statistics and are not used for advertising. Disabling reading in the app stops future imports; change system permissions in Apple Health. Previously saved values are not automatically erased.
Latest Apple Health measurements
When Apple Health is connected, iPhone can also read the latest available height, weight, body-fat percentage, lean body mass, BMI, waist circumference, heart rate, resting and walking heart rate, HRV, respiratory rate, oxygen saturation, VO₂ max, body temperature and walking speed. Biological sex and date of birth are available only with permission and existing data. Each value keeps its own sample date; old values are not presented as current and missing records or access are not replaced with zero. These optional fitness-journal measurements are not a diagnosis. Manually entered body measurements and nutrition settings are not automatically overwritten. The snapshot stays in the private device journal and, when PostgreSQL synchronization is selected, under the current account identifier; other accounts cannot retrieve it. Measurements are excluded from automatic AI requests and public program links. Explicit report exports include date-appropriate values, biological sex and age rather than the exact birth date. Disabling reading does not erase previously saved values.
Daily Apple Health activity
After Apple Health is connected in general settings, iPhone reads available daily aggregates of active energy, resting energy, steps and exercise minutes alongside workout measurements. The interval follows the local calendar day and time zone. These measurements support activity display and an estimated nutrition energy budget; missing measurements are not treated as zero or replaced with invented measurements. The nutrition-profile activity switch changes only the calculation and does not enable or disable Health reading. The app does not import food, dietary macros or water from Apple Health and does not write those data to Health. Refreshes occur when the app opens and background delivery is available; iOS determines background execution timing, so continuous synchronization every second is not promised. The app retains at most the latest 730 dates of aggregates; older dates are removed from the app cache when this limit is exceeded without changing the original Apple Health records. Daily aggregates can synchronize with the private journal under your account identifier and appear on your other devices, including the web. They are excluded from food-recognition and program-building AI requests and public program links. Disabling Apple Health in general settings stops future imports without automatically erasing saved values. The last saved measurements can still contribute to nutrition targets until activity-based targets are disabled in the nutrition profile.
DeepSeek is optional
Checking your key loads the available models. Connecting the selected model sends a short test request. Parsing a program sends DeepSeek the text you paste and exercise names, equipment, muscle groups and weight units from your catalog. Workout history, body measurements, photos and Apple Health data are not automatically included. Do not paste sensitive information you do not want to share. On iPhone and web, DeepSeek requests pass through the EDRO server. The server processes the API key and text only to forward this request to the fixed DeepSeek provider; it does not log them. The provider receives your API key to execute the request; submitted text and API usage are associated with your API account. DeepSeek retains API usage statistics. Its published terms allow processing supplied information to run the service, analyze usage, improve its technology and for model training; this app does not promise zero retention or exclusion from training. DeepSeek may also derive an approximate region from your IP address. The app asks for your permission before sending program text. The provider’s privacy policy and Open Platform terms govern its processing and retention. Disconnecting removes the saved key from your account when signed in, or from this device in guest mode, but does not revoke the key with the provider. A connection already loaded on another device updates on its next read.
Usage statistics
The app stores request time, model, token count, duration, result and estimated cost. The usage log does not contain the API key or full prompt and is not included in PostgreSQL synchronization. This local log is separate from API usage statistics retained by DeepSeek.
Adding food by voice
Recording starts while you hold the microphone. Releasing the button or reaching the 59-second safety limit automatically stops recording and uploads the audio to EDRO for transcription, without a separate send action. On the first permission request, allow microphone access, then hold the button again. Change the camera and microphone order in Settings → Nutrition. The server’s own GigaAM-v3 e2e-CTC Q4 CPU service converts speech to text; the recording itself is not sent to OpenAI or DeepSeek. Audio uses temporary files removed after processing or an error and is not retained in the durable journal or application logs. Only after you separately choose Find macros (Найти КБЖУ), the reviewed meal description and parsing instructions are sent to your selected OpenAI or DeepSeek provider using your API key; this request consumes provider tokens and that provider’s processing terms apply. Workout history, body measurements and Apple Health data are not automatically included. Review, edit or cancel the items before saving. The journal stores names, portions, macros and estimate provenance identifying the provider, model and request; it does not store the full original transcript or audio. Cancelling cannot undo completed transcription or refund a provider request that has already run.
OpenAI is optional
Recognizing a meal sends OpenAI the chosen photo, your portion context and instructions for estimating nutrition, only after you tap Recognize. Estimates can be edited before saving. Body parameters, workout history and Apple Health records are not included. On iPhone and on the web, requests pass through the EDRO server and its protected server-side VPN route to OpenAI. No VPN is required on your device. The recognition request does not write the photo, context or key to application logs; saving an API connection is a separate operation described below. The photo stays in the recognition window until it closes; the journal stores the meal name, portion, macros and photo-estimate provenance. These journal records can be synchronized. Requests use store:false, which is not a promise of zero retention or no abuse monitoring by OpenAI. Provider retention and processing depend on the API terms and your API account controls.
API keys and tariffs
After connecting while signed in to EDRO, your OpenAI or DeepSeek key and chosen model are stored on the server in a separate encrypted store associated with your account. They are available on other devices after signing in to the same account. The server returns them only after verifying the sign-in and owner; other accounts cannot retrieve them. The server uses a separate encryption key; an operator with access to that key can technically decrypt the data. Without signing in, API keys remain local: protected system storage on iPhone and the browser tab session on web. Guest and previously local keys are not automatically transferred to an account; enter the key again and connect the API after signing in to save it there. Keys are excluded from the workout journal, its synchronized snapshots, exports and usage statistics. Local expense records store provider, model, time, tokens, tariff, an optional exchange rate and estimated cost, without photos or portion context. Cancelling a meal entry does not delete an already completed provider request.
Export, photos and the lock screen
Export and copying are initiated by you. A report may contain body measurements and health data. Its recipient or the chosen app processes it under its own rules. Photos are added only when you choose them. An exercise with an external image URL contacts that site when the image loads. An active workout can show the exercise name, weight, repetitions and timer on the lock screen; you can disable this in EDRO Fitness Settings.
Retention and deletion
Local data remain until you uninstall the app, delete a corresponding record or remove this account’s private copy. Signing out keeps the local journal and does not erase the server copy. To delete your account yourself, open Settings → Account → Delete account (Настройки → Аккаунт → Удалить аккаунт), sign in again if requested, check the explicit confirmation and choose Delete account permanently (Удалить аккаунт навсегда). This deletes the shared EDRO identity and its sessions, plus Fitness data in the live EDRO server database: journal, programs, exercises, workouts, nutrition, measurements, saved health measurements, encrypted AI connections and published program links. Once completion is confirmed, the current device clears this account’s private copy while retaining guest and other account data. Removing the shared EDRO identity prevents sign-in to other EDRO applications; it does not promise erasure of those applications’ separately managed records. Confirmed deletion automatically resumes after a temporary service failure; closing its window does not cancel an operation that has started. A minimal technical one-way owner hash and status remain to prevent stale devices from restoring erased data; they contain no name, email or journal. The secret receipt is stored only as a hash, permits result checks for 24 hours after completion and is then removed. Cancelling or allowing preparation to expire does not delete an account. You can separately remove a saved API key by disconnecting that provider in Settings. Signing out does not remove the saved key. Apple Health, custom external PostgreSQL databases, external AI services and program copies already imported by others are managed by their respective owners or services. Account deletion does not revoke an API key with its provider.
Web pages and technical information
These support and privacy pages have no advertising trackers or third-party analytics. The sign-in service, synchronization server and chosen external services receive technical information necessary for connections, such as an IP address. Their server log processing and retention depend on the service operator.
Contact support
Email supportedro_technologies@mail.ru