Privacy policy
Last updated 12 November 2026
How Plimova collects, uses and protects your personal data, including your health data, and the choices you have.
Draft for legal review. Written to match what Plimova does today, but not yet checked by a solicitor. Highlighted items still need filling in.
On this page
01The short version
The rest of this policy explains the detail. It covers the Plimova app for iPhone and Apple Watch, the web app and this website.
02Who we are
Plimova is run by [Company name], a company registered in England and Wales (company number [Company number]), at [Registered address]. We are the controller of your personal data, which means we decide how it's used and we're responsible for protecting it.
Contact us about anything in this policy at [privacy@plimova.app]. Our registration number with the Information Commissioner's Office is [ICO registration number].
03What we collect
Your account
- Your name, email address and a securely hashed copy of your password.
- Your username and profile, if you use the friends features.
- Your settings, such as units, time zone and notification choices.
Your training and health (special-category data)
Much of what you log is health data, which the law treats with extra care:
- Workouts: exercises, sets, reps, weights, effort and notes.
- Runs, walks, hikes and rides: the GPS route, distance, time, pace, splits and heart rate.
- Heart rate during workouts, and your daily resting heart rate.
- Body measurements you add: weight, height, body fat and other measurements, and progress photos.
- Daily check-ins: sleep, energy, soreness and any pain you report.
- Food and water: meals, portions, calories, macros and targets.
- Your plan, programmes, goals, habits, to-dos and journal entries.
- Your answers to the health questions we ask before you start a programme.
From Apple Health and Apple Watch
Only if you allow it in iOS settings, Plimova reads heart rate, resting heart rate, body weight, height, walking and running distance, active energy, and workouts with their routes. It saves the workouts you record in Plimova to Apple Health. You can change these permissions at any time in the Health app.
Files you import
If you import your Strava history, we read the activities in the file you upload. You can undo an import, which deletes everything it added.
Friends and the feed
If you use them: your friends, the posts, likes and comments you share, the people you block or mute, reports you make, and your privacy zones. To place a privacy zone, the postcode you type is sent to postcodes.io, a free UK postcode service, to find its location. Only the postcode is sent.
The built-in AI coach (Plimova Coach)
If you turn it on: your chats with it, the meal photos and words you give it, short summaries of your goals and training that we prepare for it, and a log of each use. Section 06 explains exactly what's sent and to whom. Food photos are not kept after they've been read.
Subscriptions
Which plan you have, whether you're in the free trial, and when it renews or ends, as Apple tells us. Apple handles the payment.
Technical data
- A sign-in cookie, and the IP address and device or browser of each signed-in session, to keep your account secure.
- Basic server logs. These record IDs and errors, never your training details.
- Crash reports. If the app or the web app breaks, a report goes to Sentry, our crash-reporting service, in its EU data region (Frankfurt, Germany). It holds the error, where in our code it happened, the app version, and the kind of device, operating system or browser. It never holds your name, email address, health or training data, what you typed, or the contents of any request, and IP addresses aren't stored. We remove these on your device or our server before the report is sent. Screen recordings (Sentry's "Session Replay") are off.
This website
This marketing website doesn't set cookies or use analytics. Its typefaces are hosted on our own server, so loading a page doesn't contact any third party.
04The waiting list
If you join the waiting list on this website, we keep your email address, whether you asked about iPhone or Android, and the date. We use it only to email you when Plimova is out, on the basis of your consent, and we don't add you to anything else. Every email has a link to leave the list, which deletes your address; you can also ask us to remove it at any time. We delete the list once the launch emails have gone out.
05Why we use it, and the legal basis
| What for | Legal basis (UK GDPR) |
|---|---|
| Running your account and the features you use | Contract (article 6(1)(b)) |
| Storing and using your health data | Your explicit consent (article 9(2)(a)), asked for when you create an account |
| The built-in AI coach | Your separate explicit consent (articles 6(1)(a) and 9(2)(a)), asked for when you turn it on |
| Sharing with an AI app you connect | Your explicit consent, given on the connection screen for each kind of data |
| Keeping the service secure and preventing abuse | Our legitimate interests (article 6(1)(f)) |
| Crash reports, so we can find and fix faults | Our legitimate interests (article 6(1)(f)); they hold no health data |
| Safety checks on coach messages that mention warning signs | Your explicit consent, and our legitimate interest in the coach responding safely |
| Emails about your account and your trial ending | Contract |
You can withdraw consent at any time by turning the coach off, disconnecting an AI app, changing Apple Health permissions or deleting your account. Withdrawing consent doesn't affect anything done before you withdrew it.
06AI: the built-in coach and your own AI
Plimova Coach
The built-in coach is optional and off until you turn it on. It uses Claude, an AI model made by Anthropic. Before anything is sent, the app shows you what will be sent and asks for your consent.
- Sent to Anthropic: what you type or say to the coach (speech is turned into words on your phone; only the words are sent), a meal photo you take for it, and short summaries we prepare from your data, such as your goals, last week's training, your programme, your health-question outcome and your monthly numbers.
- Never sent: your name, email address, journal, weight or height (unless you type them to the coach yourself), or your progress and body photos. Your calorie and protein targets are worked out by Plimova itself, not by the AI, from the weight and height you give it.
- Anthropic's role: Anthropic processes it for us under its commercial terms for businesses, may keep it for a limited time under those terms, and doesn't use it to train its models. Its servers may be outside the UK.
- Safety checks: if a message to the coach mentions a warning sign, such as chest pain or fainting, or you report one of its answers, a person at Plimova reads that message and the coach's reply to check it responded safely. Nothing else you write to the coach is read by a person.
- Turning it off: turn the coach off any time in Settings. Nothing more is sent from then on, and everything else in Plimova keeps working.
Connecting your own AI
You can connect an AI app you already use, such as Claude or ChatGPT, using MCP, an open standard for linking AI apps to your data. Nothing is shared until you connect one, and you choose what it can see and do: your training, food, body measurements and journal are separate choices. Progress and body photos are never shared.
When you ask your AI something, Plimova sends it the information you allowed, which can include health data. That AI provider then handles it under its own terms and privacy policy, not ours. Disconnect any time in Account; access stops at once. We keep a list of your connections and of the changes each app made, so you can review and undo them.
07Who we share it with
We share your data only with the following, and only as much as each needs:
| Who | Why | Where |
|---|---|---|
| DigitalOcean | Hosting the servers, database, backups and photos | London, UK |
| [Email delivery provider] | Sending account and trial-ending emails | [Region] |
| Sentry (Functional Software, Inc.) | Crash reports from the apps and the web app, without health data, names, emails or IP addresses | EU data region (Frankfurt, Germany) |
| Anthropic | The built-in coach, only if you turn it on | May be outside the UK |
| Apple | Subscriptions, Apple Health and Apple Watch | Under Apple's own privacy policy |
| postcodes.io | Finding a postcode you enter for a privacy zone | UK |
| An AI app you connect | Only what you allow, when you ask it | Under that provider's own terms |
| Other members | Only what you choose to share with friends | In Plimova |
We may also disclose data if the law requires it, or to protect someone's safety. If Plimova is ever sold or merged, your data would move to the new owner under this policy, and we'd tell you first.
08International transfers
Some of the providers above may process data outside the UK, for example in the United States. Where they do, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.
09How long we keep it
- Your account and everything you've logged: until you delete your account. Deleting it erases your data from our live systems straight away.
- Backups: deleted data can remain in encrypted backups for up to [30] days, after which it's gone.
- Security logs: up to [90] days.
- Coach safety reviews: up to [12 months], so we can show the coach behaved safely.
10Your rights
Under UK data protection law you have the right to:
- Access your data. Download a full copy at any time from your Account page.
- Delete your data. Delete your account at any time from your Account page.
- Correct anything that's wrong. Most of it you can edit yourself.
- Take your data elsewhere (portability). The export is a machine-readable file.
- Object to, or ask us to restrict, how we use your data.
- Withdraw consent at any time, as described in section 05.
To use any of these rights, or if you can't do it in the app, email [privacy@plimova.app]. We'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, but please talk to us first so we can try to put it right.
11Keeping it safe
Everything is encrypted in transit. Backups and photos are kept in DigitalOcean Spaces in London, which encrypts them at rest. [The database server's own disk isn't encrypted at rest yet: say so here, or update this once it is] Passwords are stored only as secure hashes. Access to the systems that hold your data is limited to the people who need it. Your Apple Watch's sign-in is stored in its own keychain. No system is perfectly secure, but if something does go wrong we'll tell you and the ICO as the law requires.
12Age
Plimova is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has made an account, please tell us and we'll delete it.
13Changes to this policy
If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect. The date at the top shows when it last changed.