Skip to content
en

Privacy policy

Last updated:

This policy explains what personal data Yeonseup collects when you use the Yeonseup app (iPhone, Android and web) and the yeonseup.com website, why we collect it, who processes it, and what rights you have.

[TODO: legal review before launch. This policy was drafted to cover the GDPR and Korea’s Personal Information Protection Act (PIPA); have it checked by a lawyer.]

Who is responsible for your data

The data controller is [TODO: legal entity name], [TODO: postal address], France (“Yeonseup”, “we”). You can contact us about your data at support@yeonseup.com.

For users in Korea, our privacy officer is [TODO: name and title], reachable at the same address.

What we collect

When you visit yeonseup.com. The website sets no cookies and runs no analytics or advertising trackers. Our host, Cloudflare, processes your IP address and browser information to deliver the pages and protect them against attacks.

When you create an account.

When you sign in. A session with the IP address and browser or device information it was opened from, so you can stay signed in and we can detect abuse. On the web, the session is kept in a cookie that is strictly necessary for signing in.

When you use the app.

Reminders are scheduled on your device; we don’t send them from our servers. Your device also keeps some data locally: your language and appearance settings, a workout in progress, programs you’re editing, and your last answers to the AI coach.

When you track your body (optional). Your weight, body fat, tape measurements (neck, shoulders, chest, waist, hips, arms, forearms, thighs, calves), notes, height and target weight, by day. Only you can see them: they are never shown on your profile or in the feed. They count as health data.

When you use the feed. The posts you publish (text and an optional photo), your likes, and the posts you report. Your posts are shown to every Yeonseup member with your name. When you report a post, we keep the report to review it; the author isn’t told who reported it.

Your profile and follows. Every member has a profile with their name, their Yeonseup ID (a unique handle others use to find them; we suggest one from your name, you can pick another when you join, and it’s fixed after that), an optional profile photo and bio, the date they joined, and who they follow and who follows them. If your profile is public (the default, which you can change in onboarding and in Account), other members also see the programs you follow or finished, your progress in them, the number of workouts you’ve done, your total training time and your latest fitness level. If it’s private, they only see your name, bio and posts. Members you block, and members who block you, can’t see your profile.

Training activity in the feed. Unless you turn it off (Account → Profile and privacy), we post short updates to the feed for you when you start or finish a program, complete a workout (with its length) or take the fitness test (with your level). They’re shown to every member like your posts. Turning it off stops new updates; you can delete past ones like any post.

When you use the AI coach (Premium). To create or change a program, the app sends our servers your answers (goal, level, days per week, session length, number of weeks, focus, equipment), the notes you write, and the conversation so far. Our servers add the list of exercises that match your equipment and send all of it to an AI model through OpenRouter (see below). Your notes can include health information, for example an injury you want the program to avoid: only write what you’re comfortable sharing, and don’t include your name or contact details.

We don’t keep the conversation on our servers. For each request we record when it was made, whether it was a new program or a change, whether it succeeded, how many tokens it used and what it cost, to apply the weekly limits and control costs. A program from the AI is saved only if you save it in the builder, like any program you create.

When we email you. Account emails only: verification codes, password reset codes and email change codes. We don’t send marketing emails.

When you subscribe. Purchases go through the App Store or Google Play. We never see your payment details. We receive your subscription status (product, store, renewal date and whether it is active) through RevenueCat, linked to your Yeonseup account ID.

Your fitness test results, your training history and what you tell the AI coach can reveal information about your health. We process it only with your explicit consent, which you give separately when you create your account (GDPR article 9(2)(a), PIPA article 23). You can withdraw it at any time by deleting your account; we then delete this data. We need it to recommend programs, plan your sessions and personalize your training, so the app can’t work without it.

Why we use it

Purpose Data Legal basis (GDPR)
Create and secure your account Account and session data Performance of our contract with you
Recommend programs and plan your sessions Profile, fitness test results, training history Your explicit consent (health data); performance of our contract
Generate and change programs with AI AI requests and the data they include Your explicit consent (health data); performance of our contract
Show your posts and likes in the feed Posts, photos, likes, your name Performance of our contract with you
Show your profile, follows and training activity to other members Name, bio, follows, programs, progress, workout counts and durations, fitness level Your explicit consent (health data), which you can withdraw by making your profile private or turning activity off; performance of our contract
Review reported posts and enforce the community rules Posts, reports Our legitimate interest in a safe community
Give you access to Premium Subscription status Performance of our contract with you
Send account emails (verification, password reset) Email address Performance of our contract with you
Apply AI limits and control costs AI usage records Our legitimate interest in a sustainable service
Prevent abuse and keep the service running Session data, request logs Our legitimate interest in a secure service
Meet legal obligations Data we must keep by law Legal obligation

We don’t sell your data, use it for advertising, or use it to train AI models.

Who processes it

We use these providers to run Yeonseup. They process your data only on our instructions.

Transfers outside the EU and Korea

Some of our providers process data in other countries. Where the European Commission hasn’t recognized a country as offering adequate protection, the transfer is covered by safeguards such as its standard contractual clauses. For users in Korea, the transfers are these:

Recipient Country Data Purpose When and how Kept for
Cloudflare, Inc. United States, and Cloudflare data centers worldwide All the data described above Hosting, database, files, email Continuously, over encrypted connections Until account deletion
OpenRouter, Inc., and the model provider it selects United States, and the country of the selected provider AI coach requests Generating and changing programs When you use the AI coach, over encrypted connections Not kept after the answer (zero data retention)
RevenueCat, Inc. United States Account ID, subscription status Managing Premium When you subscribe or your subscription changes Until account deletion

You can refuse these transfers by not using the service or by deleting your account; the app can’t work without them.

How long we keep it

We keep your data while your account exists. When you delete your account in the app, we delete right away your account, profile, test results, programs, training history, posts and their photos, likes, AI usage records, and your purchase history at RevenueCat. Copies in our database backups are overwritten within 30 days. We may keep data longer only where the law requires it.

Reports you made about other members’ posts are deleted with your account. Deleted data can’t be recovered.

How we protect it

Your rights

You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw your consent. Many of these you can do yourself in the app: edit your profile and training settings in Account, delete your posts, and delete your account (Account → Delete my account, or see how to delete your account). For anything else, write to support@yeonseup.com from the address of your account. We answer within one month, and within 10 days for requests under Korean law.

If you think we haven’t respected your rights, you can complain to the French data protection authority, the CNIL, or to your local authority.

Users in Korea

To report an infringement or get advice, you can also contact:

Cookies and similar technologies

The website uses none. The web app uses one cookie, strictly necessary to keep you signed in, and stores your settings and work in progress in your browser. The mobile apps keep your session in the device’s secure storage. None of this is used for tracking or advertising.

Children

Yeonseup is not intended for children under 16, and we don’t knowingly collect their data. If you think a child has created an account, write to us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top of the page. If the change is significant, we will tell you in the app before it applies, and ask for your agreement again where the law requires it.

← Back to the home page